www.autoinzat.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:b6:d7:a8:7d:06:b1:77:d4:3a:1b:51:13:0e:a7:be:96 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.autoinzat.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:b6:d7:a8:7d:06:b1:77:d4:3a:1b:51:13:0e:a7:be:96
Serial Number (int): 344268512213476631421849536571842016820886
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:e3:78:20:58:62:a5:60:87:20:ad:e9:14:fd:ca:87:79:8a:f1:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:7d:98:71:a3:3d:c4:2e:67:4e:9e:b4:ef:54:32:6d:1d:82:3f:ba
Fingerprint (sha256): d9:14:90:5c:ba:08:c5:e5:f8:48:32:dd:d7:2d:8d:86:1d:96:c6:6f:4c:aa:ae:ea:e6:d6:22:76:f0:f5:3f:3d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.autoinzat.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.autoinzat.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autoinzat.cz
www.autoinzat.cz

Other certificates including the domain name autoinzat.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.autoinzat.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344268512213476631421849536571842016820886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-25 07:06:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 07:06:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.autoinzat.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741887995736218142726386842400614242737031539339808612278260356462067114206063175751114094391678319648878702274839687804988716541200784933592504737396679364260346134684145502046349923520177298974729630739558444328504861221526281716109183556547270583570744961882579892167470518872050605108392537484941002413280313853699119424114631859730271582858828129919281145790544867615443811395933489014953058798431080459013069048899901345281729027159236456138516906405281859895004536732637409725782468021076933436673090370436358683546872242266313387949485408417415496050076942218091240603306582889799982293267972127366409163269360971019097594200117851720452209034739441531941243004578691304302214840184839117264028324732613581425889799106819940415817003336510737433772174655012020804611318221444374002490524966602672663275354021050014849803319061138715649923788979362131956283722410077029008525995545277903092972643148223849704846177077196224861684914292033326777264033042920191219121194226820706354572538921613978377133585815208318605236639641219259294491405741721029416557732267750832154096481764852727801975854563047520963335811347459782437697550361009158486243101620990538612397426012362524245169649158601699934230027470512229686665754407871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9e378205862a5608720ade914fdca87798af1e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoinzat.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoinzat.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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