7fit.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:c6:0b:eb:80:ff:c1:aa:63:a7:89:d3:8a:46:27:82:e7 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=7fit.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:c6:0b:eb:80:ff:c1:aa:63:a7:89:d3:8a:46:27:82:e7
Serial Number (int): 299031167191601442611578388578024745829095
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:9a:50:0c:17:58:6b:8c:97:ee:a9:09:ab:12:d8:59:2f:18:68:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:42:9b:89:09:3b:53:f2:45:cd:0c:0b:e5:8b:d0:90:aa:fb:36:3d
Fingerprint (sha256): fc:a3:cf:36:25:c4:14:1c:85:ec:b3:db:a0:bc:f4:92:a0:20:15:17:20:3c:5a:53:1c:5b:e9:fc:64:93:a8:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate 7fit.eu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 7fit.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

7fit.cz
7fit.eu
beatme.org
e-plk.cz
faveo.cz
www.7fit.cz
www.7fit.eu
www.beatme.org
www.e-plk.cz
www.faveo.cz

Other certificates including the domain name 7fit.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for 7fit.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299031167191601442611578388578024745829095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-24 09:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-23 09:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7fit.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1016528966490004022320758733331645329079003056944131825223312813087477432691370760546760100866969972710345483187650497317181068692466767738915862011799369427730264246123232380071092204043793981005378409246057609164289831452131880899649052857604273194664516142312499242902479693428677429141294090488741761143782456857682859408617800300362665955283584601211739382778874684271637695282031193386322031764922765319530299874355183522307068594099469618668778635383528636693444313903054399545259174910480743060774619837680372207155521780012076110100749408940069640854466177275717215224609204081489173545064863048035548306586330228904921756496925194778430934289816722443404281140398674352340517177995245322093274713907301436184619915680917781102822083332100084456240593693935295274503901189553061486390082922715667816129671752461003874061763870015868468760168509507774844231641850028643254162196175906782894417403357465747007366162040635784604142903814236616287356129154516812064461002700894859959747659296195236662889203464476112163709972209574035823016661954616727940660746531806787699902318437441361081157197954025473297578442979930153299609390961733500002053570050814627375952265354227679631411952975817941637491900346423221890057878118393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b59a500c17586b8c97eea909ab12d8592f186856
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7fit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7fit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-plk.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faveo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7fit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7fit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beatme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-plk.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faveo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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