dealer.renault.cz

- Renault Ceska republika, a.s. -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 68:41:50:63:93:85:d4:ae:bd:52:1b:31:cc:d8:b7:76 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Renault Ceska republika, a.s.

Organization: Renault Ceska republika, a.s.
Organization unit: DOI
State / Province: Praha 8
Locality: Praha 8
Country: CZ

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:41:50:63:93:85:d4:ae:bd:52:1b:31:cc:d8:b7:76
Serial Number (int): 138578841339448483566470058166497884022
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 2b:60:e1:06:4c:56:5e:39:8d:12:ea:c5:fc:79:f5:17:ba:dd:0f:9d
Fingerprint (sha256): 08:e4:f5:3d:0f:67:21:6b:01:01:66:2a:68:00:6a:4f:c4:c7:8c:ed:f0:74:c1:00:13:15:91:e1:cf:a4:ea:15

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate dealer.renault.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dealer.renault.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dealer.renault.cz

Other certificates including the domain name renault.cz

(limited to 100 certificates)
seznamka.renault.cz
disky.renault.cz
soutez.renault.cz
pneumatiky.renault.cz
multi-sense.renault.ch
www.autosalonkromexim.cz
ojetevozy.renault.cz
www.autoinzat.cz
motrio-uat.renault.com
helios.renault.cz
espace.renault.com
clio365.renault.cz
dealer.renault.cz
www.renaultvysocina.cz
pneumatiky.renault.cz
www.renault.dk
clio365.renault.cz
nouvellegamme.renault.fr
ojete-vozy.cz
www.ramachauto.cz
media.renault-local.cz
kadjar.renault.fr
ojete-vozy.cz
pneumatiky.renault.cz
RENAULT s.a.s
archivprislusenstvi.renault.cz
multi-sense.renault.ch
renault-local.cz
odc-ctrl.alpinecars.at
disky.renault.cz
accessoires.renault.fr
nouvellegamme.renault.fr
renault-local.cz
motrio-pprod.renault.com
seznamka.renault.cz
renault-local.cz
www.rpz.cz
www.francecar.cz
disky.renault.cz
bezcekani.renault.cz
autaborek.cz
advent.renault.cz
www.kncar.cz
RENAULT s.a.s
advent.renault.cz
easyconnect.renault.ch
seznamka.renault.cz
media.renault-local.cz
accessoires.renault.fr
soutez.renault.cz
easyconnect.renault.com
pneumatiky.renault.cz
ojete-vozy.cz
espace.renault.com
pneumatiky.renault.cz
easyconnect-staging.renault.ch
ojete-vozy.cz
RENAULT s.a.s
disky.renault.cz
*.servisnismlouvy.renault.cz
ojete-vozy.cz
seznamka.renault.cz
renault-local.cz
advent.renault.cz
www.primocar.cz
autaborek.cz
ojete-vozy.cz
www.autorn.cz
seznamka.renault.cz
ojete-vozy.cz
disky.renault.cz
*.wrd-aws.com
bezcekani.renault.cz
easyconnect-staging.renault.ch
scenic.renault.cz
selection.renault.cz
gdl.renault.fr
www.autoposik.cz
servis5plus.renault.cz
renault-connect.renault.fr
media.renault-local.cz
clio365.renault.cz
daciapruhonice.cz
advent.renault.cz
gdl-ctrl.renault.fr
motrio-pprod.renault.com
r-link2.renault.com
clio-rs.renault.com
media.renault-local.cz
kalkulackasplatek.renault.cz
www.opportunity.cz
motrio-uat.renault.com
disky.renault.cz
soutez.renault.cz
conf.renault.fr
gdl-ctrl.renault.fr
kalkulackasplatek.renault.cz
ojete-vozy.cz
kalkulackasplatek.renault.cz
media.renault-local.cz

Certificate

The complete raw certificate details for dealer.renault.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfXrDQaqywwm3VKMVl2C
E9jTEOeQoP3/nIm7cMvSMrfdj84RCrqGPsTDFDMG2n0TrUJO04J/Qb+SfHakYLHn
d+D21RArx3PLZUr2kNosUIwHzTd7ANI1/ScjGOWDERp0MO3FpBdiWErHUyRzjhDR
JBR0oDC9GFON7NCyB6JqJ6F+8vHRNN4Re6Qy0AP9MZ6cgHtur/MhUwg4/0Jy30W3
DPeYIqpi8qg7Uptzevrec7hawAW8PGkfxbhoqJHeC5UZyVJA1DEi6zTV/dcOuQ7z
rkqA0we4ZEF0C6En0FElW1Qro/FdRR8yGcrl24yCP+jxQo4fxXq6bllePeL59h+W
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138578841339448483566470058166497884022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Renault Ceska republika, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DOI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dealer.renault.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20950587087474009234515908237282753951853767410962402046391929735206481786379221756351074182972093116507084147455826686378575479043500888347981545247273926603235927299499820604349360423683161073184354790100903514171363667838061034197277064527314060589166707286761684180291460926134986601088505428436559404192689032230710934784806966828423708810492326416275781731935524314629054558570011882468405785630253269896512923204859984731838706089717662573565160507337877619897782080602517740956275715662450711338194017399225256075225742505617069305256556179382297529150924873554815049700915175261944169866511472127766238828229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.renault.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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