ssl.cheb.cz
- Město Cheb [IČ 00253979] -
Issued by PostSignum Public CA 2
About this certificate
This digital certificate with serial number 0b:0b:46 was issued on by Česká pošta, s.p. [IČ 47114983].
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Město Cheb [IČ 00253979]
Company registration number:
D25897
Organization: Město Cheb [IČ 00253979]
Organization unit: Město Cheb
Organization: Město Cheb [IČ 00253979]
Organization unit: Město Cheb
Country:
CZ
Česká pošta, s.p. [IČ 47114983]
Organization:
Česká pošta, s.p. [IČ 47114983]
Country:
CZ
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:0b:46Serial Number (int): 723782
Serial Number lenght: 20 bits, 3 octets
SubjectKeyId: 45:45:1b:3f:2f:4d:b4:29:db:a4:28:64:bc:2a:8b:75:5a:c2:f1:62
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1
Fingerprint (sha1): 4b:f7:fa:61:63:d8:1e:bb:3c:1a:10:8d:fc:4d:5a:86:30:48:b4:35
Fingerprint (sha256): 02:d8:2c:2d:7b:cc:dc:00:77:9a:af:14:1e:d4:0d:df:7e:78:3a:f9:bf:9a:ba:12:43:1e:37:a8:fc:91:54:91
Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt
Revocation information
OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl
Check the revocation status for certificate ssl.cheb.cz
0
DNS Names
1
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl.cheb.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
[email protected]
Other certificates including the domain name cheb.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for ssl.cheb.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIDCwtGMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAkNa MSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQ3MTE0OTgzXTEf MB0GA1UEAxMWUG9zdFNpZ251bSBQdWJsaWMgQ0EgMjAeFw0xNDExMDcxMjEyMjFa Fw0xNTExMjcxMjEyMjFaMG8xCzAJBgNVBAYTAkNaMSMwIQYDVQQKDBpNxJtzdG8g Q2hlYiBbScSMIDAwMjUzOTc5XTEUMBIGA1UECwwLTcSbc3RvIENoZWIxFDASBgNV BAMTC3NzbC5jaGViLmN6MQ8wDQYDVQQFEwZEMjU4OTcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCYwLBA18EZ5/nvabf9b7+jbwQpfMbwede+N4kGj/tm ywumY7U+rybvxmeH/kZfOAbXouLhx8vJoopHo9JxM56hC9LL5aGpS5Uyf+eGwGVc M9k9ir/JXQG72H68AucbIms0cx8JCZmqdZUCKyGkLRoz0QaMDc/lqf6KyeKhI6Bk NpR8vIn1fM240P2fsI9kFDnigTlcAl4l0pc5vOFN78ZOBiGXl1ObzbBBbAX4gwKO HvTvkZ4mbuKqLT7KTfh5Mzt+IRBnYOnH38uYyb/S43wme8HRifCMOVr8ubGCr246 BxnxMqn7t1iUTDKmVO3L+x8DgPC0LGifR1MYl6zGn/DFAgMBAAGjggKHMIICgzAn BgNVHREEIDAegRFwb2RhdGVsbmFAY2hlYi5jeqAJBgNVBA2gAhMAMD4GA1UdIAQ3 MDUwMwYJZ4EGAQIBCYFIMCYwJAYIKwYBBQUHAgEWGGh0dHA6Ly93d3cucG9zdHNp Z251bS5jejCB/QYIKwYBBQUHAQEEgfAwge0wOAYIKwYBBQUHMAKGLGh0dHA6Ly93 d3cucG9zdHNpZ251bS5jei9jcnQvcHNwdWJsaWNjYTIuY3J0MDkGCCsGAQUFBzAC hi1odHRwOi8vd3d3Mi5wb3N0c2lnbnVtLmN6L2NydC9wc3B1YmxpY2NhMi5jcnQw OAYIKwYBBQUHMAKGLGh0dHA6Ly9wb3N0c2lnbnVtLnR0Yy5jei9jcnQvcHNwdWJs aWNjYTIuY3J0MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5wb3N0c2lnbnVtLmN6 L09DU1AvVkNBMi9PQ1NQX3B1YmxpYy8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRI7z7U6omJo+niP9vv jEKxCvjI0TCBqAYDVR0fBIGgMIGdMDKgMKAuhixodHRwOi8vd3d3LnBvc3RzaWdu dW0uY3ovY3JsL3BzcHVibGljY2EyLmNybDAzoDGgL4YtaHR0cDovL3d3dzIucG9z dHNpZ251bS5jei9jcmwvcHNwdWJsaWNjYTIuY3JsMDKgMKAuhixodHRwOi8vcG9z dHNpZ251bS50dGMuY3ovY3JsL3BzcHVibGljY2EyLmNybDAdBgNVHQ4EFgQURUUb Py9NtCnbpChkvCqLdVrC8WIwDQYJKoZIhvcNAQELBQADggEBAJ/KQMcXkUNvFx32 0cnbYKps58kykMDY4OUUkWkp8RlI/9XWGPyO1K4jrImucCjnL0eILk9/fev0XVt4 KrPtLSjbIVx65EkB339++YcwVTrA7LOUdONPIfaVXRvBfRRiyNYJSip3IXZ9A2VI LodDtfa6+/ekhbHIQlEZGsz3xwvm8TLPnYxyUVywR0mv4y8FYlxxhQbNj4EkXne/ is2nsem5ZvbRhxvaWTT0nJcxaJaMOoHIILCAhaLrjF9gJQysTRoJB+fLBj3zSrPm IgvdQEDZtTu9Te/7gJmNNSBMirdH5otIdn9U+k8BqbWVCNFwL5I0qFuAnoeq4V+V soo9K5s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMCwQNfBGef572m3/W+/ o28EKXzG8HnXvjeJBo/7ZssLpmO1Pq8m78Znh/5GXzgG16Li4cfLyaKKR6PScTOe oQvSy+WhqUuVMn/nhsBlXDPZPYq/yV0Bu9h+vALnGyJrNHMfCQmZqnWVAishpC0a M9EGjA3P5an+isnioSOgZDaUfLyJ9XzNuND9n7CPZBQ54oE5XAJeJdKXObzhTe/G TgYhl5dTm82wQWwF+IMCjh7075GeJm7iqi0+yk34eTM7fiEQZ2Dpx9/LmMm/0uN8 JnvB0YnwjDla/Lmxgq9uOgcZ8TKp+7dYlEwyplTty/sfA4DwtCxon0dTGJesxp/w xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 723782 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-07 12:12:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-27 12:12:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Město Cheb [IČ 00253979]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Město Cheb' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.cheb.cz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D25897' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19283240590353260106196914009911614044203320320477205597315072819320750779814612340109499996892147191427600164892036349328437063669308854283891189170623035724062529347058369288380757532889828994079350621742497864109379870951742869707823975952258843383929225293775882048883912735119662115387600143284231708037877301226002727083434411932215486942279456751038992106277918871277098443398354013158576496417859761163129685686800075840206888397728279264431896639464272591178140370788209605007991716314254469457289463715836222405316227327087983458916202344199586049462720447025523217355059434454625566548415060587737828552901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45451b3f2f4db429dba42864bc2a8b755ac2f162 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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