satomar.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:62:75:e6:20:d8:02:92:51:8c:c0:69:18:db:f1:03:df:22 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=satomar.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:62:75:e6:20:d8:02:92:51:8c:c0:69:18:db:f1:03:df:22
Serial Number (int): 381953530255228440451622567814188302065442
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:47:19:2c:1a:30:2c:17:5c:1a:92:bf:c4:c8:e5:d6:4f:ed:61:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:a0:50:81:1e:83:18:73:c0:16:c2:c5:b8:a3:e0:07:09:78:8c:21
Fingerprint (sha256): d6:f1:7f:97:ab:41:ae:54:38:b5:49:a0:1b:1c:a9:6d:8c:0e:df:57:ff:c4:fe:10:e8:8b:6c:af:14:13:49:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate satomar.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for satomar.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

satomar.cz
www.satomar.cz

Other certificates including the domain name satomar.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for satomar.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381953530255228440451622567814188302065442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 02:41:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 02:41:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'satomar.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794358950705215369881183641462029042485252731135039825738938553862934710036433588608174390774069418150786593789171951778000494442750644599441647317441672699802203531670624612812746118924559225110575165066098438563964020582576182948907459926091983686402117179525054707813704534012491077339697503873288839850683759463483273231990975954050483553555510578918968874321110574110541961187687814603981800191323804086256598495778585149819819730253673984497129130268927924197838899746653182836097500577004950225860892633968707495801668813005729812086499619619533262763922038786502666207455634031799586977938227797290446264683834937355416488604194320794412455715057198375479440773432478458396061437774971190722637077538318058165971992727610075131854451912671054858948900627486070713158785787918011546553144697574816698541522741046287063643687156333173342931248590363361733845927111270402746334155949144906499860238808450124291116308330841068724914243781715453564566185179857950805978458922866019501581542254918596761182356099070642973261840944343708083699850717152251673611083573074659902655696119259739897178387140087955684210951197332966358696812305242820705510309071148514578604757481608650334862960333529822178511924449056456548622873273517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d47192c1a302c175c1a92bfc4c8e5d64fed6170
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satomar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satomar.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d9641a12b000004030047304502202b8bcbffd32fa8c582c1b692da064c36b91a7d151736b6962d5211c6558f33d1022100f22fc8267eb06e264a8beb3f5ac113e5095ad4c8ab923bb41665a17e59fa7fc300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9641a2e80000040300463044022047636719865e6ff320691b1f7f419c144fc07568bed31c39cbaea33c12be1dcb02201339ef395fb75acfc77187e5d9ed2f40fb7cbe05aca51ae2268e60de4986b627
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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