www.tkl.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:d3:30:d8:ad:da:1e:ac:da:a1:ed:1e:86:51:ae:87:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tkl.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:d3:30:d8:ad:da:1e:ac:da:a1:ed:1e:86:51:ae:87:cd
Serial Number (int): 272846896635805987474996210223955407964109
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:f4:8c:d3:d4:c4:05:05:85:b4:12:40:ac:6d:a2:fb:9a:56:b2:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:eb:e6:e0:d3:98:c3:08:25:28:3b:e9:e0:c0:ad:23:ec:9a:ee:84
Fingerprint (sha256): f2:0e:d9:83:44:6b:19:a6:b2:70:4a:f0:b2:3f:47:87:67:63:4b:28:c0:0f:50:43:83:e1:77:05:ae:cc:a2:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tkl.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tkl.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tkl.cz

Other certificates including the domain name tkl.cz

(limited to 100 certificates)
www.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
www.tkl.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
www.tkl.cz
www.tkl.cz
www.tkl.cz
public.relations.cz
tofu.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
www.tkl.cz
www.tkl.cz
public.relations.cz
tofu.tkl.cz
www.tkl.cz
www.tkl.cz
public.relations.cz
tofu.tkl.cz
tofu.tkl.cz
www.tkl.cz
www.tkl.cz
public.relations.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
public.relations.cz
www.tkl.cz
www.tkl.cz
tofu.tkl.cz
public.relations.cz
tofu.tkl.cz
www.tkl.cz
public.relations.cz
www.tkl.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
public.relations.cz
www.tkl.cz
www.tkl.cz
www.tkl.cz
www.tkl.cz
tofu.tkl.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz
public.relations.cz
www.tkl.cz
www.tkl.cz
www.tkl.cz
tofu.tkl.cz
tofu.tkl.cz

Certificate

The complete raw certificate details for www.tkl.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MsExRz4LlHFCSoB4SMW
h3tZcVyW4Lm1NMikbT2llopkPjm19vgmM1qPF7eAaGkMwIFFUB0xwLbe3Y5jZ+vM
zjC2HKNfQa9FWgaZrEdmIL2rFKdSsTgfeOWaiJU7tuiSIEw8fuUFu2Yg2czcckQr
TPoBBA+YMKBEMf2joVVNjDeGy3TlZfKO89ow5dKQ5MyPprBNlrTR93qD6IM8Kl/b
Yir3u+B48xcQ5scrpOOhGo/TqzBv+2qArrmJuX+p5lTV1SqHimIA+7QC1c9qBIT9
t1K4zzEZSSMz+w9F8qnUT3AmNIgw90IgJ3oNDBz91IEBKPhwji1IPdZn27f0Nrj3
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272846896635805987474996210223955407964109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 20:38:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 20:38:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tkl.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26357679651962087502061322233463255321157922140689772661202739234178983662483815257536138505224314922151393220273623781541248190487987666288774512354960606202449176196143161486977786773061660722454980470392852316879018394549177837578483048506305183652217699372165373728874546525352789538346680533166615518737988217726904779544671901894810443842875262352423349270467324439377113858807535270301527562248278914376148733482564160115871358097633993423275393107606807376394655530767172479089806068626637917657953932569478288693930102440839546171577170445630156261149801432221957806285047931145339650908012027965221348374467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75f48cd3d4c4050585b41240ac6da2fb9a56b2df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkl.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac2956fbd0000040300483046022100ae86f24809a9dc9c70e06f105bc21a5a9984915d01187bb98e10d2558aa167da022100a41134536357081fe98ad1823ea37e316bf3fbce4be3b16e61439f04270b671100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ac29571bd0000040300473045022100bf4255e5d50edb4902c190a79871335d62f0c91dc90d96167147711841193c7402201667fa343481cbe6bb825dd612f3572c346c607ec708fd7f0d12583be6db4cd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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