realtime.skaldo.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:de:6d:aa:53:07:81:74:79:01:c2:b7:a9:07:75:b8:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=realtime.skaldo.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:de:6d:aa:53:07:81:74:79:01:c2:b7:a9:07:75:b8:c7
Serial Number (int): 342960001519394757333608471380688010328263
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:c3:d5:79:5b:af:0e:d6:68:6a:5d:98:40:e7:6c:cc:30:ea:a2:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:0b:a4:14:d5:05:f2:6c:34:80:34:6d:34:5b:a9:61:0b:da:00:4c
Fingerprint (sha256): d4:25:af:a5:17:1e:76:ad:be:93:b9:d4:3a:3d:8c:17:ee:55:a2:07:4d:83:f8:8e:32:3c:33:49:2a:ce:cc:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate realtime.skaldo.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for realtime.skaldo.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

realtime.skaldo.cz

Other certificates including the domain name skaldo.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for realtime.skaldo.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342960001519394757333608471380688010328263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 21:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-29 21:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'realtime.skaldo.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696030412505058310136316980132644097927141686550733820663852700892699107172708748540053815395214156808259859074761627036226931110424643566635115203980398176208256183585943642773032150418361108397980295141524197966810124184115218955123389352943467502110828732882688264850382275549214571570259125010067485169928205565138815279799345285512600376817212030694131101649594502457231183751754760432485210450778089658552925160067595597687583674061684417127131620260329728367913749341916140098848993242375730317620214851181681872428402822364923347378775562853852439648527828089699463323082221136733851445144428221697847750919712619132328523550022660180595316096573187461975226817594808433915745441859862668679782663290484747437293489859044188794746119148617076878432179348522431949988409107181915249685772480284744204838801960621742612032439692359025783874644483260032377232014783939089443992377705607167071185832096387526915319894688844459951237668904750111458109091566368650324274036441906063744112205463168859455109806856829131765882122611645389618172517961050597275142205721292807274142304103210026495243048041174165456230792683107460727208419070630092540806044511836893256514322586660264262987035964022511303345322148515975888014892803849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1c3d5795baf0ed6686a5d9840e76ccc30eaa233
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtime.skaldo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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