data.skaldo.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:f1:3d:47:d4:ee:cc:f7:ad:e7:2e:15:6e:77:9d:98:48 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=data.skaldo.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:f1:3d:47:d4:ee:cc:f7:ad:e7:2e:15:6e:77:9d:98:48
Serial Number (int): 289560674016811586828853361628790929594440
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:bc:1e:bf:a9:14:93:40:36:de:a3:60:f6:b8:cc:62:ec:ea:db:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:2b:48:23:52:38:1d:16:2e:b0:6a:4c:2c:9a:90:e5:e8:7e:6e:e8
Fingerprint (sha256): d2:62:26:73:e6:01:50:e7:e3:14:b0:ea:22:57:b0:32:43:bd:31:35:60:c1:34:b8:ca:9a:e0:7d:31:35:2f:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate data.skaldo.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.skaldo.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.skaldo.cz

Other certificates including the domain name skaldo.cz

(limited to 100 certificates)
data.skaldo.cz
skaldo.cz
skaldo.cz
skaldo.cz
gsep.skaldo.cz
gsep.skaldo.cz
www.skaldo.cz
gsep.skaldo.cz
gsep.skaldo.cz
skaldo.cz
www.skaldo.cz
www.skaldo.cz
www.skaldo.cz
data.skaldo.cz
skaldo.cz
www.skaldo.cz
matomo.skaldo.cz
skaldo.cz
data.skaldo.cz
gsep.skaldo.cz
skaldo.cz
data.skaldo.cz
gsep.skaldo.cz
data.skaldo.cz
www.skaldo.cz
gsep.skaldo.cz
data.skaldo.cz
realtime.skaldo.cz
realtime.skaldo.cz
skaldo.cz
data.skaldo.cz
skaldo.cz

Certificate

The complete raw certificate details for data.skaldo.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgISA1LxPUfU7sz3recuFW53nZhIMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MDgxNzAwMjdaFw0x
ODEwMDYxNzAwMjdaMBkxFzAVBgNVBAMTDmRhdGEuc2thbGRvLmN6MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqFWw9xzpGRrX9O13ynhEGhcUjTDahon4
9ocPPjI7a3Y68Wd+yayewv+nu53e3nYtmXXUzktBAANSAYNYnqVJGTxVnLOa4eLC
Q3B6yfyjXcnXT6HMfMkFRu7QWnQ8PeeGk1GaKHAkhKGYKbNZRnhumZj5pJnlDnGQ
/HEmteiQyv8vJxzfGL5t/pHGbcNGZ9C7SMEONb+JUyu4joZsCN0ECiAms8m7dM0F
wq6e7X0/45VXmI0QQRgx/9LCqu0vebxsaJp3ovv0eFMtwA0hi+1QFyfr16clwjn2
OCjHaCe18UANVTux2h67SiHuB5U6RZmCg1CQyCNzf17dLQDgCLfYSAgy4YK0/ZlY
Iaw9FVo3/L4S7klomoqAqrTO/pdmvrr46C5/l8+Dfj5oNbfMtDblaivfX3W7PbxK
JxzsR6zN3KOq+I8HMVQuov1fHPxylCeMcRA0HLkPl3/N49+npba+oXyb3hzJ02T0
RNp0LTNHDEeQpby6y75hpdJvV6/alS54NzqsUc6f1Lo+nqhUvygQawwDfZt30vRe
lQyw5ZGHPlVfSdyDZfr4k3T3iJLCuk9AKBU8yan2uWHy95jWxFmydITitwDppBnb
l1sDdskNn155B+lRT3N25YSCFbkDXaQ6pxlHDyXAMXYg/6V3BnfsVn1t3bq0VHm2
ZJRK8NPGtJUCAwEAAaOCAxcwggMTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUX7we
v6kUk0A23qNg9rjMYuzq2x4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5kYXRhLnNrYWxkby5jejCB
/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCB
ngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkg
UmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUg
Q2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQu
b3JnL3JlcG9zaXRvcnkvMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAKTxRllTI
OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFkew1QzgAABAMASDBGAiEA4pxc
w+x2vEgUFlxclJ2Bzj27rsra73tD/c8Fukkw6SoCIQDSYWHh2Y1+d/w7SU/rSTap
8j0dSDQIzHznlup6zG092AB2ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2
H79kAAABZHsNVKkAAAQDAEcwRQIhAPY+ZNxNNw0B4QFkdbOflf7TQBktpGx7WZ7K
/49UD/eaAiBK3U7n48LyyGlQggegfs3/oJ+7sZHp7M8dCtwStK/rbDANBgkqhkiG
9w0BAQsFAAOCAQEATOynQeuYsAal9EqItG0Zl4NYwnNzBn8rWn7Pm7XDsoKpw2Aq
DxbGrq3JAnXogyXAGeqJQgQDe/SG+zlHALQ358rpTukIxkL/cGdZjYDquH/sMx1g
6O6/l0WxJ9DUw/mvzFIfHoVFe0iGLKpoHeeTznUF4buxhFKZVu/Qk237Gzi7XJRo
kvD20vi3RfWvIPFhxVdvB/2yzwxiWDd0JGdVCUyZA6rtOcIVtxPiTJyAVsXTQat8
XZZMvZT8TQO0Xlw0L1vHQs8zwK+jw9Y1yN+R1HCFryDm+kFfK9emPk1Lgq6FhJVq
KyESvS+s/kivgDRRSvFcZ5Lm+16lwkhggjobgw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289560674016811586828853361628790929594440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-08 17:00:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 17:00:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data.skaldo.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686745788911616931481703636900849895861188322608616497533032745510479407656193123559492306372751539028971693916443308975845670743373838288523657381612062182889052974099692891624514406639299561444506081170170548464234892769142365438768169003737853833438012888035824784348804954049785572182784313151419427944749119417327387404387634246706356067193540026601304250179164515209808772688425631857898418873415988558310794601337583456417565926853144193056113580369751481386584741927521220302692989542293264056313629332385661983152748439134207269587861964475906543228494083923324326619652949812303064222288616712906645885598840509101381555736797155063754247651773991038296946793210437309377176399574008555930090237694855435602839264493998833069053297107689128859138854287753837424087109816796487029378387291987772688733697047270755939235518319346341249714976879817030446559276052926728947920874007673127572068514592966123232625475395520848493506288625538432873395605235857023055891349018329041276271615483016894374125988586027315722832269069378510550539949845833421240705670778664530212386557894107048631091860978623998957371121080781692138134421217778075414003750330520604690710429872398451137572912833078815807429228065549455834514475889813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fbc1ebfa914934036dea360f6b8cc62eceadb1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.skaldo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001647b0d50ce0000040300483046022100e29c5cc3ec76bc4814165c5c949d81ce3dbbaecadaef7b43fdcf05ba4930e92a022100d26161e1d98d7e77fc3b494feb4936a9f23d1d483408cc7ce796ea7acc6d3dd8007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001647b0d54a90000040300473045022100f63e64dc4d370d01e1016475b39f95fed340192da46c7b599ecaff8f540ff79a02204add4ee7e3c2f2c869508207a07ecdffa09fbbb191e9eccf1d0adc12b4afeb6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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