avcr.cz

- Středisko společných činností AV ČR, v. v. i. -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ce:54:82:87:bc:10:36:1a:7d:97:b3:da:52:c8:b0:f8 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Středisko společných činností AV ČR, v. v. i.

Organization: Středisko společných činností AV ČR, v. v. i.
State / Province: Praha, Hlavní město
Country: CZ

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): ce:54:82:87:bc:10:36:1a:7d:97:b3:da:52:c8:b0:f8
Serial Number (int): 274259767535062789637803531971347394808
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5c:c7:2c:2b:f2:a0:f5:4a:11:df:8a:65:5b:fe:8d:0b:3a:26:7d:0d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 23:8c:af:f9:a2:68:07:ac:49:83:f5:b8:67:34:7b:12:e8:97:06:7a
Fingerprint (sha256): 08:f3:51:19:90:05:7b:45:73:db:ac:bc:35:23:cb:c8:09:bb:4b:ce:ea:d2:a5:79:15:13:f2:4d:b6:96:1b:45

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate avcr.cz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avcr.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avcr.cz
cas.cz
www.avcr.cz
www.cas.cz

Other certificates including the domain name avcr.cz

(limited to 100 certificates)
avcr.cz
strategie.avcr.cz
avcr.cz
academy2.cas.cz
mail.zamek-liblice.cz
eduroam2.ssc.avcr.cz
vpn.ssc.avcr.cz
kit.avcr.cz
list.avcr.cz
kis.avcr.cz
app.ssc.avcr.cz
list.avcr.cz
kis.avcr.cz
avcr.cz
kit.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
da.ssc.avcr.cz
s-drive.ssc.avcr.cz
list.avcr.cz
academy2.cas.cz
academy2.cas.cz
app.ssc.avcr.cz
app.ssc.avcr.cz
mail.ssc.avcr.cz
radius.ise.ssc.avcr.cz
mail.avcr.cz
ziva.avcr.cz
academy3.cas.cz
vpn-eis.ssc.avcr.cz
akademicky-snem.avcr.cz
isar.cas.cz
ziva.avcr.cz
portal.ssc.avcr.cz
smtp.ssc.avcr.cz
kit.avcr.cz
academy2.cas.cz
oeba.avcr.cz
orient.cas.cz
www.otevrenaveda.cz
academy5.avcr.cz
jola.ssc.avcr.cz
dotazniky.eis.cas.cz
www.tydenavcr.cz
vpn.ssc.avcr.cz
portal.ssc.avcr.cz
eduroam1.ssc.avcr.cz
strategie.avcr.cz
hoste.ise.ssc.avcr.cz
portal.ssc.avcr.cz
mail.ssc.avcr.cz
airwatch.ssc.avcr.cz
strategie.avcr.cz
vpn.ssc.avcr.cz
s-disk.ssc.avcr.cz
portal.ssc.avcr.cz
app.ssc.avcr.cz
*.ise.ssc.avcr.cz
academy5.avcr.cz
kis.avcr.cz
list.avcr.cz
mail.ssc.avcr.cz
vpn.ssc.avcr.cz
cms2.avcr.cz
app.ssc.avcr.cz
www.ei.cas.cz
avcr.cz
teater.arub.avcr.cz
portal.ssc.avcr.cz
arub.avcr.cz
www.otevrenaveda.cz
dspb.avcr.cz
smtp.ssc.avcr.cz
www.tydenavcr.cz
s-disk.ssc.avcr.cz
strategie.avcr.cz
mail.ssc.avcr.cz
cms2.avcr.cz
kis.avcr.cz
app3.ssc.avcr.cz
kis.avcr.cz
sponsor.ise.ssc.avcr.cz
www.ei.cas.cz
vpn.ssc.avcr.cz
mail.ssc.avcr.cz
academy2.cas.cz
list.avcr.cz
app2.ssc.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
academy2.cas.cz
academy2.cas.cz
rd.academia.cz

Certificate

The complete raw certificate details for avcr.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb1ZZGfTXPNCuLZprxlp
Q3vuToG3MbivdcoyBc894rKBoh8tSNPfPBnNxxuP1oFbXRqk2yTGiq4FbriOWFWy
uWgdv5L2AS5wxoPeQy4csDMJMlRDAR2wt0WqkI4p45waVDSggBgdlb2ZxgKibeIj
5zU4xpSQI0r1FuOau//gJmD4qImZp3g74yX4+voYNibV6Sb4uR8yMOMqI0t4zpmQ
sY7T+uEeYSnkrTjlg3lP1yddX22eGaXaog1GVEw1VKmgiq1rg2exJEan5KC2r92m
pDsgkvkUBwsrjtiVasKIG/IbEIfJg0IzHcHc7/Jzk/TyY8G3ByvOeCSzzaaOM3hz
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274259767535062789637803531971347394808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha, Hlavní město'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Středisko společných činností AV ČR, v. v. i.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avcr.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21427645104029091380098042152139979848760517150049068639772013730095532407388136975179187248141050960355887188831554165326507965590926343092440668840660445028053445545487864472358107842776629612901259778045680584811845753212181207923592945538322055111091395068988342392526769896747598936321488026657374229483048139000240356007681285036538490135173753931397139850833772150160348386685738366649083074028577784007523974024869457831996058210815462439135715391751406142580333411128189919262852902303468022122584250412954594018917005511393035511770208739340894518795670777011371635996447281349743749487205716644078225486707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cc72c2bf2a0f54a11df8a655bfe8d0b3a267d0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cas.cz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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