renault-brno.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:2d:f2:b3:a6:3a:a3:bc:12:38:75:e4:c9:7c:3d:a8:6d was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=renault-brno.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:2d:f2:b3:a6:3a:a3:bc:12:38:75:e4:c9:7c:3d:a8:6d
Serial Number (int): 293044193358299445789168442404417002383469
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:93:66:9a:9a:c0:8e:4e:90:17:c6:6c:39:1e:b4:5e:9f:ff:ce:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:1a:c5:ec:b0:fb:70:e9:e0:d1:fc:98:f2:87:34:e3:3f:4d:39:9a
Fingerprint (sha256): ef:48:f5:0d:fe:e7:1e:b4:40:37:fe:27:19:c0:55:e3:51:61:ee:ab:b5:d0:cc:37:19:9f:eb:cc:b2:c0:e0:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate renault-brno.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renault-brno.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacia-brno.cz
renault-brno.cz
renaultbrno.cz.vhost.omnio.cz
www.dacia-brno.cz
www.renault-brno.cz

Other certificates including the domain name renault-brno.cz

(limited to 100 certificates)
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz
renault-brno.cz

Certificate

The complete raw certificate details for renault-brno.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293044193358299445789168442404417002383469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 11:04:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 11:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renault-brno.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718189273549938764310342965626459160770988196342257289115057077190886964538883454383303737636222948143197387174054813087396685197529570412521495465375360506035069974424515420506808323988228607970938485292622303112277199743144892827908278135723639678574434650076627000860087146740252263039791277801859239182037365318284006920756145373813122573132371304376313497735435158613868217271724892524361974738900629913565915191875841213090862890927194899009229979268563340832305876815361273141580216814292270659268571511837814568835745871364034810204461280059687585620889644355585048913613147245028626073454295928907577771410657689342273912294215866414647181230497982003460912305093999283310108277967762284618740109800928943067583480707466289850621636851719486227130341591061338378007166019741347219638145280136302376232330696582465567429588416821638272800243090546316781292028268468946903267183724883186909223139622122014240377055824372151959530009475869582922487401421721095049937280864035620380635653010554103471558685016731465307765510122086816945361820273586898596527810722668696623128398430462995347355654491532860084211936217742819307349909597958799865531988559755360893634850315818440448708628932561631109757878379616609299522752717671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4093669a9ac08e4e9017c66c391eb45e9fffcec5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia-brno.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault-brno.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaultbrno.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dacia-brno.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renault-brno.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6bf70c3d00000403004630440220738a364c86d3e50ff3c1ea49a69d8e8c6b1e0663b5da28eced18c688ffca3a0702204ebca2bcab96abec16e4f0d59761ef467f1c96e94dcf8a7cf8a53ce555a2f97b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6bf70c3000000403004630440220451f594686757b5fe55cc444318874165ecc40aff428c1b790c478c3cff2666a022006820ac6dfb194b6dfec3962763b1eee986f4bb40250f3febe74cea13a354bdf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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