app.unizdrav.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:d0:c8:da:f3:c6:75:09:1c:75:78:36:6e:d9:e1:7c:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.unizdrav.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:d0:c8:da:f3:c6:75:09:1c:75:78:36:6e:d9:e1:7c:07
Serial Number (int): 287135557637725250773036671478977712454663
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:a0:5a:a4:50:47:28:e6:31:7c:c8:05:e6:b0:5c:a4:d5:4c:cd:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:b6:11:b5:f8:9c:00:13:20:8f:37:f3:13:7e:85:74:4b:bd:01:67
Fingerprint (sha256): ea:e1:c3:3c:b9:10:ee:26:c1:bc:92:f1:f0:25:71:8b:1f:73:c0:aa:da:c8:03:87:45:b5:87:ff:2c:ea:af:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.unizdrav.sk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.unizdrav.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.unizdrav.sk

Other certificates including the domain name unizdrav.sk

(limited to 100 certificates)
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk

Certificate

The complete raw certificate details for app.unizdrav.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA0vQyNrzxnUJHHV4Nm7Z4XwHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDYyMTAxMDBaFw0x
OTEyMDUyMTAxMDBaMBoxGDAWBgNVBAMTD2FwcC51bml6ZHJhdi5zazCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALrThiN+gK8Aj82eQPO74dZvuDKdV/pe
4vhEyT/jUzO/S8YtRr+Aj64aMdKey2Djvy2b5hape/QRsEp0hYutwXfAaZgp1Rld
JRg0o/eEdHkmlQ2obvEl0hVI8WfmclNQ0Qu8qm/uZ9qQelePthS2JkUri3qUf05O
TsfAF8XZIvzBz5JuNwNH9Ipk7ADpkHiDHHoxjj7cXa02Vlp8Oe7XNCo0RvcGfeDE
swwJ6YfASB9IOVkMRxnLs3AW4k8OYnyeqkxLtmkGWYbis/FpM0Zz3CtV0fXdjNEZ
xwAfBA2VfY/Q+gI5195SOTbJntlZbFQqqDp0qFPwgSi+YKfMQXWvWhKd51VTQeau
S9WVRosnHEPSR8Dtj+iLiVeze9WKuofXrxtaW6FtL4f4EKS+Q667elJz5PcN0eW/
bfELqf03ACPF0XsBtK9Jgb/83bR5pUOpZAAHBtyxUY8zx2J1n71thPoWsh+tMQMF
X3sRRqZZEZt6ADdHluxi2lsP/MVWrTDg6m6g3/S2xRP4jbls2KYhQhcxLCZS7nmQ
7gRsIIhfap92MJjjZWuB4S7FU4XHzlEzPcwrJ36QKOrErskSLgn9ta4uovMbY+iS
hnvnSCuTJYDPuriTarySwYk/Gj9eEkd423CYRq88STcD/+6rs2OBr7QcxC8k8Fu7
zVDfusJmukTvAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHeg
WqRQRyjmMXzIBeawXKTVTM1zMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPYXBwLnVuaXpkcmF2LnNr
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFtCJhH
lAAABAMASDBGAiEAnnXTsnU+a5N/GKEzN5P5q5KFRsqs7bOi6DMfx274kNICIQD9
Q097+oTzLoEQsR6Hm+6nQ6w25gwlHsQf2LwiQdr0FgB1AGPy283oO8wszwtyhCdX
azOkjWF3j711pjixx2hUS9iNAAABbQiYR38AAAQDAEYwRAIgcP6eIiv4iaGP7XH/
FadrXkBA2xtrrSIHRiAw1hmRdlQCIFWuCfAO1Y3dyHTTlzGynbA79FsDGaYgBte3
HDu5DCu6MA0GCSqGSIb3DQEBCwUAA4IBAQBczbmeMMlLSz+Ct2exxtSDWO1Qqjhs
rNif4IIJkDFOwAwwFnMsIPiQX1hS/28e98h6A7Ve9qD3XPUkMULvlhJ7W2q6SIXH
oePhz4TqaAkb1OiXWjI6L6/ysFgTDLiUM3UakPJu2EwxOM1THWmw5ACJ13R1j2aM
s9SQgZaBegrT1JZHxpqvoN5rVlCmtTG1J/rxYxPYjcAOrS4+jmjG4g4d8/ToMjms
38veYFyLlgQduH5WGnppqaD3Qb5tftUdWo9DRnktrNz/TW5P2w0HgPimO/4FLZDR
aUedVj/cxAapp6zolfBDPbINkFVmM5bVaP/sZvIZ5gWYcqoGN09+nIR7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287135557637725250773036671478977712454663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 21:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 21:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.unizdrav.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762184665974283484890372827317334488266877065786541192282019383223772115164978464263061092904745730619132103433188856419986472165849853259333085085660786681287928311918948098607243164871736983009471877533737755720048476024177307373797361530371316492050368907155816226779269787507606998514986549826473485482148383182099787173470247390136938765402414202543891242327223444931156737725895117502843980153214612819726305215728136882364558230356745499021047990182483598145610637275379013161448885700887762931862360359783956015543111034885183633034484953795997371281638725461354359577574425931543213979008521082557479219672594782253237521548444445566629807178571818075511601267689441340644943331328034231163046984937601176533204258945376235387745678767149825015350502493821923964283586962358938059880521826866405965834232238182850919958488232540152171735387296848343559524157630009593091190651095490514885541190132904750802011114742321908091520248606788213849169190900954730739640610805133521240371087139698355110444604437143910183261509676401794352827948772939676264191437899571505865478208964853013267953536419682425935589925508628342470668956612795381273797026979272297256981983550803452010370754786148669321966519923069047299046869976303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77a05aa4504728e6317cc805e6b05ca4d54ccd73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.unizdrav.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d0898479400000403004830460221009e75d3b2753e6b937f18a1333793f9ab928546caacedb3a2e8331fc76ef890d2022100fd434f7bfa84f32e8110b11e879beea743ac36e60c251ec41fd8bc2241daf41600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d0898477f0000040300463044022070fe9e222bf889a18fed71ff15a76b5e4040db1b6bad2207462030d619917654022055ae09f00ed58dddc874d39731b29db03bf45b0319a62006d7b71c3bb90c2bba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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