www.simplia.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f0:be:2b:21:15:fc:8e:e0:e4:c0:ec:40:bb:c5:8a:fd:7f was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.simplia.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:be:2b:21:15:fc:8e:e0:e4:c0:ec:40:bb:c5:8a:fd:7f
Serial Number (int): 343257403115331493469797245127334256377215
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:07:84:0d:a5:2f:5f:88:f1:91:b4:4f:d3:25:d5:75:f8:18:74:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:4e:dd:eb:c9:02:a8:d6:01:17:35:1a:ef:73:06:90:01:ed:15:99
Fingerprint (sha256): cc:be:af:f3:f8:71:8c:cd:70:39:f1:03:23:6c:22:cc:db:da:a4:93:21:0c:a5:4a:9d:8c:58:ee:ff:92:57:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.simplia.cz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.simplia.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

automobilist.com
club.sportmade.cz
cz.hecht.cz
en.hecht.cz
simplia.cz
www.andrie.cz
www.bechick.com
www.bexis.cz
www.bexis.sk
www.bici.cz
www.budchlap.sk
www.butlers.cz
www.butlers.hu
www.cachemira.es
www.caxemira.pt
www.chytapust.cz
www.czechdeals.cz
www.easybuy.cz
www.electric-collars.com
www.elektricke-obojky.sk
www.elektro-obojky.cz
www.felipe.cz
www.frogpack.cz
www.frogtac.eu
www.gentlemanstore.cz
www.glam.cz
www.glamadise.ro
www.gsm-market.cz
www.hecht.sk
www.i-living.cz
www.i-moda.cz
www.jadi.cz
www.jungle-gym.cz
www.kashemirbutik.ru
www.kashmirgenser.nu
www.kashmirneule.com
www.kasmiir.ee
www.kasmir.gr
www.kasmir.hr
www.kasmir.rs
www.kasmir.si
www.kasmir.sk
www.kasmirs.lv
www.kasmyras.lt
www.klenota.cz
www.klenota.de
www.klenota.pl
www.klenota.sk
www.kliky-kovani.cz
www.kliky-kovani.net
www.kolostrum.info
www.krabcycles.cz
www.krmiva-pucalka.cz
www.lavado.cz
www.mahogany.bg
www.mahogany.dk
www.mahogany.hu
www.mahogany.pl
www.mahogany.ro
www.mahogany.se
www.makita-shop.cz
www.malvik.cz
www.malvik.sk
www.metabo-shop.cz
www.mikaton.cz
www.modadeti.cz
www.modadeti.sk
www.modovo.ro
www.monditrade.cz
www.naboso.cz
www.nakupni-dum-praha.cz
www.nanosilver.cz
www.naradi-profes.cz
www.obroza-elektryczna.pl
www.outdoorweb.cz
www.peknydarek.cz
www.perfektne-pradlo.sk
www.perfektnipradlo.cz
www.sarones.cz
www.sexicekshop.cz
www.simplia.cz
www.skolni-aktovky-batohy.cz
www.stylomat.cz
www.svet-her.cz
www.svet-hier.sk
www.svetcukrarov.sk
www.svetcukraru.cz
www.timestore.cz
www.viphair.cz

Other certificates including the domain name simplia.cz

(limited to 100 certificates)
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
imap.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
help-files.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
napoveda.simplia.cz
www.simplia.cz
simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
help.simplia.cz
www.simplia.cz
www.simplia.cz

Certificate

The complete raw certificate details for www.simplia.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxcjBE2LAparvNfGqRif
9uOPMqLjYyWILnA4G6BzTxzV7u1iDgi0bEiw9ZeUZGkvejC2etScO/ZqGucjTgRw
tYVovNH/9C9anx+Oo8tGUnarhEajGnqlsf8ltjy/04y/f0H/J7le547AocE8v1DO
M54cQ2snSmZvcgFwhETf98CFS2eFbCWn5fGt2H9IMAYdZnclQIqHXQwSVYfbyfCX
fbFkODdB/HRwZ38rJcvZtBQGBpCxEQoTprb0iY6Z/xsKu0GtdfVNrDoDcqgRuacG
bpLJoTN6nYq6zQOaXR5cqWo36yVVDkIW1bY9cE/c/dJVIJFYRPI0L4D8tMkuJBUG
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343257403115331493469797245127334256377215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 08:30:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 08:30:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.simplia.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26142738301590989803447695854271909973078460042140339605822768245965872475902775785311360791507171839668915089918961441599239819407700724436403693657668798611845718274684306080077476569707224502423077890164435124708261984560309181767100995801301624911741853917592633556643496358727502009829096123411542623676687608746029593957204733370872945055895151382260158762106925384319434815539625560857274346335337001562009705559373961503827685926836714975754146491479395810323573316657581232158749155977382356054456782985097072030280422114983985040164138585644403098293645998561758797875167340102152900044008583192432275162793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0707840da52f5f88f191b44fd325d575f818745a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.sportmade.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.hecht.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.hecht.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrie.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bechick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bexis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bexis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bici.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budchlap.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlers.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cachemira.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caxemira.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chytapust.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czechdeals.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easybuy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electric-collars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektricke-obojky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektro-obojky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.felipe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frogpack.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frogtac.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gentlemanstore.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glam.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glamadise.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsm-market.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hecht.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-living.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-moda.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jadi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jungle-gym.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kashemirbutik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kashmirgenser.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kashmirneule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmiir.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmir.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmir.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmir.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmir.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmir.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmirs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasmyras.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klenota.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klenota.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klenota.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klenota.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kliky-kovani.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kliky-kovani.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kolostrum.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krabcycles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krmiva-pucalka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavado.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahogany.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahogany.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahogany.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahogany.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahogany.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahogany.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makita-shop.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malvik.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malvik.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metabo-shop.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikaton.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modadeti.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modadeti.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modovo.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monditrade.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naboso.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nakupni-dum-praha.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanosilver.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naradi-profes.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obroza-elektryczna.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outdoorweb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peknydarek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfektne-pradlo.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfektnipradlo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarones.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexicekshop.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skolni-aktovky-batohy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stylomat.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svet-her.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svet-hier.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svetcukrarov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svetcukraru.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timestore.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viphair.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001679c9aa04b0000040300473045022100b9445ce7a488148cfe07a1c67760f624d3da13322fe9aca335e9b67b8911ad8f02203921c8c67450a0f8da186b9b5ed8ed8f6b01a57d4866af99f1662e4bd43a9bcf00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001679c9aa23f0000040300463044022029b145a7cdb949550d2649fae99e75d8f9009f0bb0747b35963480ccc4bb857302205928f6aa2ddcf1e8ead2d53cd56a71053eed5d234de67cb0a877c04413495e87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006be661ad1373e05364ddc24eadd894b4f168da6412f2a89d8f289307206da0b5a4840252b0109dc9c35d3208e55bf239fedf7bd34382ce806e496e842ff1256d5b95fc14ff387e17f32c244f6b0589e578fbdbec0e82db262094dabecadcc8c4b5c8348d3e9edd4a1ccb279b1c70e7aeaec6a7a5bb85587cb067e66bf705424a073c7a71a9d93d9a058ece02065f4e053f54c0f341525f22d99fb9f63c835372b68f880211105cf82e4736e1867fee2094abafe0d3f0f620acd01f953d20ceba2e0afeb27bc40bf1da8bfe82d2195213ef02fa84b98be19aa8dc244329063b700744f1785262f71a47087982dffb33bc48a7df5bce35cb777f76b09363090ef8