strnadatka.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:bb:1d:f7:0f:02:83:a0:73:ad:2f:be:b7:ff:e4:d6:11 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=strnadatka.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:bb:1d:f7:0f:02:83:a0:73:ad:2f:be:b7:ff:e4:d6:11
Serial Number (int): 303100027782400281897328704134783024027153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:c5:b7:f2:52:5c:7c:86:fa:fc:27:8d:a5:92:de:56:c4:2d:57:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 76:4d:b8:b4:de:92:5a:60:da:56:59:b5:19:76:11:36:c3:40:d9:e9
Fingerprint (sha256): e1:95:5f:d1:dd:32:34:dd:48:d1:2f:5e:23:cf:ea:02:c4:43:2a:25:4f:26:38:41:a2:78:70:41:9d:eb:1d:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate strnadatka.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strnadatka.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

horeckovnik.strnadatka.cz
strnadatka.cz
turistickeznamky.strnadatka.cz
turistika.strnadatka.cz
www.strnadatka.cz

Other certificates including the domain name strnadatka.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for strnadatka.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzIfNlbBDY/oNZ0fGNNUl
/XZz21ByxJOjhKFJC47GnIv1cAjhJoyfDwWLxW3Yd3amC9Bog4cWM0as0ZiBn4ej
DZIrExDbykRKsEeJkSPPFz6KRPlkdGIfFExUS/Myr0jwpT76Kloojx+AuzBjGFCJ
MhGIo6TE/2p3WpqCX+35ISj/BqOkR6GcfmySTXxjKBpBCNhxNwNRdScooFyudWpG
HY5zUyj9sXJ6I6bLjBu9hUiOQ3fXBfYyZXRHbTaxiMmYAlXzin+9re+ejSJvM1Ew
mMgjAX8kBCdvBg9xB1uvSw1GvoNGHwbE49emb0msj1kfll/QCiy1H6Eh3WKFr8BP
X8lWzX+u5aLEF5qG/3kFbIgumIJ4prL4UfOIt1RFlMEnec2bwOckoeXCmnTZSSZQ
gZMaKR0i97EhOqUAZTSCQcSTWSXqSPuXHCpdFppH05vHKmLQuxsuiu/i/P0n03+w
RiCHmj4QBUBB7zihrWINFz26HWqrwmkUoRPKerlw0OiRrCiPn2qLEkWFkHN9KqQU
SE+fAS+LPJHSHySOovcsj42ya1b77EZiziNSAH101OcfF9HfGaMoY3ZY/n8QsFr1
lBVP+bwoY1bz//WcbAjCJP0xMdjR4NwKVmCK11PFUOoJ4zi6iHXDMRYAtC47cPRv
cxrAxoyJHpQAXnZzK8oNcGsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303100027782400281897328704134783024027153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 23:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 23:02:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strnadatka.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834411562414520189446291427188242706605352150412021867820817457211817529907147989694397700295360718465011191539901017038338560261398592943476619692495783297891560720341893327356517209200398104813602451669155095493222647339448239097337828271309483718683105162335072634558379976638842139670666329482609756096671491389334963342778985209017310791327497056534016196631705262585466001081986610839088265244468501788616490547637674462514837501592918084183581469095066394957988146868094497432963820217606179522769760043501247067767963211143986073061951254186047396918447613384656613476107589572497125791624542119340580560504745503514787543289457403286879597329465827651583108220318415710286723380298617934423322340545950766793141889873553060746839323253947231337905675208839715464381312404982724043161052543201275736310551793952279011852935444017728457193537289224122744151667793405359696636016399164314876768479898713903907075280547702863611705951207186743479252325300004677572721272577212183397091147951220580598139497690849192131469476731691057319942593697015753501884643919937224597003453341720493117211132489060854418278292089884968365565276159395006107488981899821282646842046257231353047295883680749113271987000103207803160553581277291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81c5b7f2525c7c86fafc278da592de56c42d5700
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horeckovnik.strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistickeznamky.strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistika.strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strnadatka.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a1fb35c2d0000040300473045022100ef25f8aaaa6be660e25e968b4b560b1f4f13d7ac8235c9ecac699737ad4bcd3802201c196c915ca661b3abfdc9e5ec14cfeb0d3fffcb695790fd6feb2fb193b89be80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a1fb35c410000040300473045022100e0d345ce637970a55ca821edfd192a25212a26042f5130e767bedef5f696e16c022045e6ec61ab8339da2ad42d2c4bd6a583d1cf4dffd0b6083a98a4749951466a4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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