www.skolastik.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:3b:86:6d:00:e9:ad:57:6d:cb:17:7e:26:6b:53:38:55 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.skolastik.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:3b:86:6d:00:e9:ad:57:6d:cb:17:7e:26:6b:53:38:55
Serial Number (int): 307013817393071814109725899966541183793237
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:c3:a0:4e:84:1d:e6:cc:55:78:d9:6f:8f:73:22:e8:c4:62:5a:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:65:ea:4f:ad:42:3b:55:bd:26:05:87:2c:0e:92:f9:14:22:23:05
Fingerprint (sha256): ca:bb:be:bc:e5:86:44:f6:48:ab:57:6e:31:0f:65:bf:05:ee:dd:f5:57:d2:06:90:76:86:7c:23:d4:31:62:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.skolastik.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.skolastik.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skolastik.cz
www.skolastik.cz

Other certificates including the domain name skolastik.cz

(limited to 100 certificates)
www.mercedcapital.com
skolastik.cz
download.osmanturan.com
muji-uat.order.place
brunchycafe.com
skolastik.cz
www.skolastik.cz
skolastik.cz
codi.ditosas.com
www.skolastik.cz
demo-sso.ramp.com
jk-holkynavdavani.cz
skolastik.cz
modacenteroficial.com.br
www.woodofmetal.com
skolastik.cz
www.serravi.cat
parceiro.soulcial.com.br
l.karaokekan.jp
skolastik.cz
icredit.works
thatgame.site
negocios.mybiznez.app
links.well-beam.com
www.skolastik.cz
api.spmarketingm.com
pubhop.estore.business
learning.qooper.io
www.skolastik.cz
www.rogerdavila.com
skolastik.cz

Certificate

The complete raw certificate details for www.skolastik.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISA4Y7hm0A6a1XbcsXfiZrUzhVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTEyMTU0NDJaFw0x
OTExMDkyMTU0NDJaMBsxGTAXBgNVBAMTEHd3dy5za29sYXN0aWsuY3owggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDhcNNZ+qUUzO5cHfuJVKLrrKd/S0wS
v2ReM4lGxCFK2KEJwcmwNocIgcjpZreCpz2uVnP6p0XJ/vyGz7BDSDv3yIizPD/j
fLyMinkFTOeyjYCc0tWBh5ttbEbUrq17QIMxsWEHYe0VDHz4sVL3CFgI8DdTmJUU
9DuFUREJgz38TCWEhg7EH4tC1Mf/x0aksuNAt9psOXCHP86EnF9XXDn0LCOC7W56
ifwtqibLqeQnxU+cmK/cLmcKOfiHjXz5+/R/72NDiAhHikU+SuflJrH1ipdjAj00
7Rb3hoPayrrimAs8d6yUWpxngBrJ4l6B0mjW6LAner/i85+v3Jvrdhcwsebkhb0Z
/bead85ZmnctA2XO9e+6aGbrAWmz2Y8ALbyZo0HparP9AXQYPNilhp88veNYi2lp
LqxDVQs+QcPZJ+nBL0feeKwcAhZuOVAJu2tGx62SkgeUlJ7iCRINFyVQolNkvupr
m7NsNPOLMuL/HzVU3hq1W/OYN6InjEsJxBbycFDg0XFrn6nk0eQe7Vh3fOKwScPm
I0rxIn6XLKDveJ7QP1nnkV9ClZJPCgVNwIp2UFov0WxSc7RaGyZ4qjHMz3c0HSOr
R6zou9OwlCrPnQaAuhmaZOwH0YNkUoAHXkQuJhpyKWinsAATHnZt174SEQfJ+O7l
UsLC7JkxraM7rQIDAQABo4ICcjCCAm4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS0
w6BOhB3mzFV42W+PcyLoxGJamDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDHNrb2xhc3Rpay5jeoIQ
d3d3LnNrb2xhc3Rpay5jejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEA
KQaNsgiaN9kTAAABbILkGPcAAAQDAEYwRAIgBVoCDSn/bRVxr3MgacUY6PPa4v8i
ZaPEiB2YPnEjAo0CIF7NkboF9gR9ZfnQjNjjiUMwknt6vWGGyMRUdfIWoWIOAHYA
KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFsguQX4wAABAMARzBF
AiBYLbKyzJuNo6fLx/36rkIB2Fm2dPEC8UXDA5aPxrT+JAIhAOh6WuwNRyLYjJbF
Kosceou/gJnP7iulqJkcnrbV4py/MA0GCSqGSIb3DQEBCwUAA4IBAQBmBz2qHYmz
EQO/HZOmmjtxyF8W3lwdkY0BgxxwCROjTkMrYWHRZNWceul0563YHZ9k6ZDoSwA1
2JYaxq7qCUqxnQvl/GiG62dZgjA4ngS2ZwOlqqsdRubS1rEzYUkxNzQi3jqLts9Z
XA0GQBv7Rpvka45TA/wj4lZRV1UMj3SOuadCK3lzTxxbJ22Ikh3lUnY7HTgqt7wj
icnRg/uHx9AF90rhxtq9z+aDmZmRiWHaprLwxnPmictoB0G+mavlbaGvc4lZpwM4
36Z3fFLxrxvFdQelgDal7NEj2/GW+AzVGWEKFCFPwlEoPpvGWIrIbkn4K7nzypZN
ya7CTbXjcKMB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307013817393071814109725899966541183793237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 21:54:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 21:54:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.skolastik.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919717916304484816141758668285229833397315749913690677192669458175546364715281172919322073498856087560680830828010504867657107174431447609120742457168378060483221751714200931275732223630565899986796842141820462989239379695611387067930204850213560140513478602074519376026148683375959630507060688456764707884629603235759345586378913353866977470069776359449713101096867657508755893696592578324340623326051142025093259852357623304599185008379071835296841131270911433763631423018743436387831535477915369408855026089492970251885114574143689012612555475117349080925806922675843366698122684279114370121342620747748152870880941603886654631813929881613213241527045542886245386351581325953497856053445126435774565155383024716514670589338446352451834465504812536283186894174677865223230608155329144362897483471227762030512369393708950678286354857286621646136113359533342671958632296354344955596371762141182649376853059354161065119059093147598813310470309185867356606224685656108749818422969316309456241759701261285043943496507718100513632643621871164647439629170763184028638085422085102183559302269391690628154727102926300601573212607522497280854252133108204386672785645374903859674991031407462853204543910350296777899798619677311225132289833901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4c3a04e841de6cc5578d96f8f7322e8c4625a98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skolastik.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skolastik.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c82e418f700000403004630440220055a020d29ff6d1571af732069c518e8f3dae2ff2265a3c4881d983e7123028d02205ecd91ba05f6047d65f9d08cd8e3894330927b7abd6186c8c45475f216a1620e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c82e417e300000403004730450220582db2b2cc9b8da3a7cbc7fdfaae4201d859b674f102f145c303968fc6b4fe24022100e87a5aec0d4722d88c96c52a8b1c7a8bbf8099cfee2ba5a8991c9eb6d5e29cbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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