vop.rwe.cz

- RWE Interní služby, s.r.o. -

Issued by I.CA - Standard Certification Authority, 09/2009

About this certificate

This digital certificate with serial number 1c:32:6d was issued on by První certifikační autorita, a.s..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

RWE Interní služby, s.r.o.

Company registration number: ICA - 766382
Organization: RWE Interní služby, s.r.o.
Organization unit: Prosecká 855/68, Praha 9
Locality: Praha
Country: CZ

První certifikační autorita, a.s.

Organization: První certifikační autorita, a.s.
Organization unit: I.CA - Provider of Certification Services
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:32:6d
Serial Number (int): 1847917
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 60:9f:63:69:74:34:20:ea:dc:95:bd:1a:b7:df:40:e0:4b:2d:71:f7
AuthorityKeyId: c1:4c:38:94:d5:80:86:48:d9:22:90:2c:d3:ee:19:10:db:67:47:87

Fingerprint (sha1): 7e:5c:10:f3:fd:73:14:bc:ab:f2:a5:36:de:92:a1:e0:11:38:97:61
Fingerprint (sha256): 08:9b:73:1d:67:3d:3f:95:e9:12:e8:7d:c8:9b:47:a3:0b:d4:29:d2:c1:30:02:a1:8a:0d:6e:f5:ab:ee:d5:fa


Revocation information

CRL Distribution Point: http://scrldp1.ica.cz/sica09.crl
CRL Distribution Point: http://scrldp2.ica.cz/sica09.crl

Check the revocation status for certificate vop.rwe.cz

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vop.rwe.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name rwe.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for vop.rwe.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv/mGCY9LGla31BYsf2G
BgH0ebTjMxhLVdH0X2UjVZXAwnNQGtewj804RwTDxO3WjKY2kbw1YO9urdrnxuLG
p7O2uJQuu53RXMcTraadeKHbXjbMpU2CbSaMPPxJq+CUqfHLaP8lOXmUiU68aEpX
6x7/hWKxlmb6BIOIKD+KbNiwtqeohgJKnSOSRn+HtYsbzizxNdCdM8NOo14OSKeE
l87+0QYnyJfbY+/KVzIvEQ+MJacJlQ6OvbE4Abvi32Je2mCTWectIkjembS3T8KV
ZkamOgzew2Xp9EPKJJvobuS0aYt3HypYYmhVvk8nwklTNMv9SE1+2trJCAnzWql0
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1847917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Standard Certification Authority, 09/2009'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'První certifikační autorita, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Provider of Certification Services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-30 08:22:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-30 08:22:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vop.rwe.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RWE Interní služby, s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prosecká 855/68, Praha 9'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICA - 766382'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18052027709520307628737538876539409119440603191942787211339478781882643081363807920265874985563521357950270643264311566888261154328270121975351781075994042329240315406907149221001887041907626335853630737595748812792214059662940385171253689105710043869374114936527034842294017089203370348667816944070972760556105249287671707383488771477866407361810957526476866628788826158634064264920349725674849789082816359196266461427890585111660447678546639106213839801501535591462478874847878175599287231312788084948382825919620353838107461184755857560008445300292205461940468447102119846558905688960170414640658638636924170499289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c14c3894d5808648d922902cd3ee1910db674787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							609f6369743420eadc95bd1ab7df40e04b2d71f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23624.1.1.60.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp1.ica.cz/sica09.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp2.ica.cz/sica09.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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