Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            05:7c:ca:69:71:08:13:4e:82:c1:91:30:23:59:67:89:e5:92

        Signature Algorithm: ecdsa-with-SHA384

        Issuer: C = US, O = Let's Encrypt, CN = E5

        Validity

            Not Before: Jul  6 09:52:43 2025 GMT

            Not After : Oct  4 09:52:42 2025 GMT

        Subject: CN = aaa.hrnecek.cz

        Subject Public Key Info:

            Public Key Algorithm: id-ecPublicKey

                Public-Key: (256 bit)

                pub:

                    04:33:db:72:7f:78:af:96:5e:9e:b3:db:ed:85:10:

                    c1:b8:3b:3f:ae:ff:cf:df:25:5d:28:f9:62:b0:11:

                    f0:73:da:31:9d:8c:a7:5e:83:22:ed:f1:5a:ec:8a:

                    f8:80:53:d0:4c:ac:24:63:1e:5f:d6:eb:42:73:7a:

                    8c:dc:73:a0:dd

                ASN1 OID: prime256v1

                NIST CURVE: P-256

        X509v3 extensions:

            X509v3 Key Usage: critical

                Digital Signature

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Subject Key Identifier:

                C6:1D:4C:A3:9D:BA:12:DA:6D:1D:14:6A:A8:13:A0:41:22:71:57:B4

            X509v3 Authority Key Identifier:

                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D

            Authority Information Access:

                CA Issuers - URI:http://e5.i.lencr.org/

            X509v3 Subject Alternative Name:

                DNS:aaa.hrnecek.cz, DNS:country.hrnecek.cz, DNS:files.hrnecek.cz, DNS:hrnecek.cz, DNS:radio.hrnecek.cz, DNS:www.hrnecek.cz, DNS:zoner.hrnecek.cz

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://e5.c.lencr.org/19.crl

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:

                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34

                    Timestamp : Jul  6 10:51:13.844 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:69:5B:E3:54:2C:CC:21:7C:18:83:E1:3C:

                                20:74:F1:4B:64:0E:51:41:4F:99:D5:C3:A2:26:C8:79:

                                5D:7B:CE:EA:02:20:41:74:2C:A8:84:D1:79:D4:D1:0A:

                                4D:C8:C2:CD:ED:A1:D6:29:FB:BC:C2:3A:96:2A:C2:C9:

                                3E:35:54:63:E2:AE

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:

                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A

                    Timestamp : Jul  6 10:51:13.903 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:20:03:65:BC:BB:7C:9C:91:E5:A7:5E:F7:13:

                                2B:C6:8F:7B:13:D7:B6:4C:C8:48:BD:A9:25:C9:68:A7:

                                ED:6B:B8:C2:02:21:00:F4:7D:70:18:3A:D2:72:A7:30:

                                12:2B:88:B1:99:6F:71:82:41:91:3F:80:BD:6D:37:2E:

                                47:ED:FA:45:19:86:A6

    Signature Algorithm: ecdsa-with-SHA384

    Signature Value:

        30:64:02:30:69:2f:74:4f:f9:d8:16:dc:34:dc:23:86:32:0c:

        36:e2:78:c8:1f:26:c8:ec:46:23:26:97:26:91:12:e8:49:d9:

        4d:d8:c2:44:44:f8:a4:3d:9f:74:00:b9:3e:ba:ad:27:02:30:

        61:fb:1f:38:c7:9e:2d:da:bc:a6:85:2b:90:99:f3:80:9e:b5:

        51:00:18:79:a4:16:7e:f3:a9:46:63:86:c6:35:c3:34:a6:7f:

        06:e8:d1:0d:b0:bd:2c:b6:a0:e0:aa:89

-----BEGIN CERTIFICATE-----

MIID7TCCA3SgAwIBAgISBXzKaXEIE06CwZEwI1lnieWSMAoGCCqGSM49BAMDMDIx

CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF

NTAeFw0yNTA3MDYwOTUyNDNaFw0yNTEwMDQwOTUyNDJaMBkxFzAVBgNVBAMTDmFh

YS5ocm5lY2VrLmN6MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEM9tyf3ivll6e

s9vthRDBuDs/rv/P3yVdKPlisBHwc9oxnYynXoMi7fFa7Ir4gFPQTKwkYx5f1utC

c3qM3HOg3aOCAoEwggJ9MA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEF

BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxh1Mo526Etpt

HRRqqBOgQSJxV7QwHwYDVR0jBBgwFoAUnytfzzwhT50Et+0rLMTGcIvS1w0wMgYI

KwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRwOi8vZTUuaS5sZW5jci5vcmcv

MH8GA1UdEQR4MHaCDmFhYS5ocm5lY2VrLmN6ghJjb3VudHJ5LmhybmVjZWsuY3qC

EGZpbGVzLmhybmVjZWsuY3qCCmhybmVjZWsuY3qCEHJhZGlvLmhybmVjZWsuY3qC

Dnd3dy5ocm5lY2VrLmN6ghB6b25lci5ocm5lY2VrLmN6MBMGA1UdIAQMMAowCAYG

Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9lNS5jLmxlbmNyLm9yZy8x

OS5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQAN4fIwK9MNwUBiEgnqVS78

R3R8sdfpMO8OQh60fk6qNAAAAZffXIw0AAAEAwBGMEQCIGlb41QszCF8GIPhPCB0

8UtkDlFBT5nVw6ImyHlde87qAiBBdCyohNF51NEKTcjCze2h1in7vMI6lirCyT41

VGPirgB2AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciysu8gqAAABl99cjG8A

AAQDAEcwRQIgA2W8u3yckeWnXvcTK8aPexPXtkzISL2pJclop+1ruMICIQD0fXAY

OtJypzASK4ixmW9xgkGRP4C9bTcuR+36RRmGpjAKBggqhkjOPQQDAwNnADBkAjBp

L3RP+dgW3DTcI4YyDDbieMgfJsjsRiMmlyaREuhJ2U3YwkRE+KQ9n3QAuT66rScC

MGH7HzjHni3avKaFK5CZ84CetVEAGHmkFn7zqUZjhsY1wzSmfwbo0Q2wvSy2oOCq

iQ==

-----END CERTIFICATE-----