martell.bc.cas.cz

- Biologické centrum AV ČR, v. v. i. -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 7a:c2:c4:f2:ec:17:e7:76:e6:d0:f6:2c:08:ab:f0:2a was issued on by GEANT Vereniging.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Biologické centrum AV ČR, v. v. i.

Organization: Biologické centrum AV ČR, v. v. i.
State / Province: Jihočeský kraj
Country: CZ

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:c2:c4:f2:ec:17:e7:76:e6:d0:f6:2c:08:ab:f0:2a
Serial Number (int): 163177115674880497905266149309660524586
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 45:ed:74:bc:e0:06:7f:ed:3b:b9:d5:e4:34:c0:2d:47:fd:9b:fb:10
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 93:26:79:7a:2d:1b:83:11:a1:1c:43:70:f5:6a:08:83:ae:30:e2:5b
Fingerprint (sha256): 09:d0:37:24:38:ba:ae:0c:61:28:55:70:57:08:43:be:09:09:7f:e6:8a:f9:ab:8b:2e:1c:8c:e9:f1:e8:4b:90

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate martell.bc.cas.cz

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for martell.bc.cas.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

martell.bc.cas.cz
dnacode.bc.cas.cz
jez-ko-ve.bc.cas.cz
kalendar-lem.paru.cas.cz
modbiolin.bc.cas.cz
mozgovalab.umbr.cas.cz
paradny.paru.cas.cz
rs.bc.cas.cz
rs.entu.cas.cz
rs.hbu.cas.cz
rs.paru.cas.cz
rs.thsbp.cas.cz
rs.umbr.cas.cz
rs.upb.cas.cz
ttm.bc.cas.cz
www.dnacode.bc.cas.cz
www.jez-ko-ve.bc.cas.cz
www.kalendar-lem.paru.cas.cz
www.martell.bc.cas.cz
www.modbiolin.bc.cas.cz
www.mozgovalab.umbr.cas.cz
www.paradny.paru.cas.cz
www.rs.bc.cas.cz
www.rs.entu.cas.cz
www.rs.hbu.cas.cz
www.rs.paru.cas.cz
www.rs.thsbp.cas.cz
www.rs.umbr.cas.cz
www.rs.upb.cas.cz

Other certificates including the domain name cas.cz

(limited to 100 certificates)
tbase.iic.cas.cz
www.astroplate.cz
sympa.utia.cas.cz
ecbd.img.cas.cz
www.iic.cas.cz
dev.herv.img.cas.cz
wtserv1.tok.ipp.cas.cz
breberka.site.cas.cz
avcr.cz
jiftach.cas.cz
radius1.iach.cas.cz
www.astroplate.cz
clb.ucl.cas.cz
matsrv.math.cas.cz
*.irsm.cas.cz
ds-uchp-backup.asuch.cas.cz
logbook.tok.ipp.cas.cz
allsky-bart.asu.cas.cz
*.lib.cas.cz
bibliografie.ujc.cas.cz
m3art.utia.cas.cz
filosofia.flu.cas.cz
arclib-test.lib.cas.cz
www.ibot.cas.cz
albina.uochb.cas.cz
reflexe.flu.cas.cz
fgusrvmail.fgu.cas.cz
fermium.iic.cas.cz
redmine.nh.cas.cz
rukovet.cms.flu.cas.cz
etno.eu.cas.cz
orbis.img.cas.cz
mail.flu.cas.cz
folia.paru.cas.cz
hroch486.icpf.cas.cz
sslvpn.cs.cas.cz
lhr.ueb.cas.cz
engmech.cz
projects.asu.cas.cz
www.udu.cas.cz
tok.ipp.cas.cz
durotest.img.cas.cz
web-lb04.img.cas.cz
ancientmedieval.flu.cas.cz
biblio.hiu.cas.cz
ds-uchp-an.asuch.cas.cz
aplab.ueb.cas.cz
madla.ujc.cas.cz
m3art.utia.cas.cz
www.uochb.cas.cz
sda.soc.cas.cz
idpmain.icpf.cas.cz
vosvrdaweb.utia.cas.cz
web-lb04.img.cas.cz
radius.slu.cas.cz
lexy.uochb.cas.cz
vocloud-dev.asu.cas.cz
pallas.ujc.cas.cz
login.lib.cas.cz
allsky-bart.asu.cas.cz
post2.ilaw.cas.cz
postak.ujc.cas.cz
fw1.ujf.cas.cz
vestlon.img.cas.cz
*.ezproxy.lib.cas.cz
archiv.soc.cas.cz
ca.icpf.cas.cz
kolbaba.utia.cas.cz
logbook.tok.ipp.cas.cz
wiki.eis.cas.cz
sumo.orient.cas.cz
fe.nh.cas.cz
ulozdata.ujc.cas.cz
vpnportal.img.cas.cz
avcr.cz
ftp5.cs.cas.cz
refugee.mua.cas.cz
ojs.irsm.cas.cz
academy2.cas.cz
ciel.biomed.cas.cz
www.math.cas.cz
chemspace.img.cas.cz
illias.icpf.cas.cz
martell.bc.cas.cz
application.math.cas.cz
ds-uchp-aero.asuch.cas.cz
alfresco1.eis.cas.cz
gemma.ujf.cas.cz
sova1.cs.cas.cz
users.canam.ujf.cas.cz
netmon.ujf.cas.cz
ironport.img.cas.cz
www4.ucl.cas.cz
fw.flu.cas.cz
d50.asu.cas.cz
filr.cs.cas.cz
*.libj.cas.cz
korpus.vokabular.ujc.cas.cz
mail.zamek-liblice.cz
kramerius.lib.cas.cz

Certificate

The complete raw certificate details for martell.bc.cas.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dwq1zflTGupO+ZXGjkh
ZIg+03g+wWRnsGXq5zV/I1qd5TUM7N9PBiOt/gYlMU54AoyiHYo2q6BR9OhMZw1G
ho5kih6uDI2g74zTG2G6vRcBps2vSPKHkpl1MI2KitbXrL7U+u1uXAORXCPpz2v3
KPETcseTsoCXo1cPxnbQbDwXdkSw+i3oCLDccOpv6ax1jDtGk5OtKB/7QUZS1B4v
RJuqVhGel2m2dEpAdS5tFqAoS5zu7VDwNohd39H0RQOnm7PcRlkaS90SDSYmcWXP
yQyRtUwcEBJcXqWQGkcYeQOZ6lpfGWfd7eoH8sNp6q01pWwfrjGFXsLO77yTR8Ps
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163177115674880497905266149309660524586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jihočeský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Biologické centrum AV ČR, v. v. i.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'martell.bc.cas.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30532000061770951413581070045711628264612716007952654043731454381935500440879739008564588937148903151166328636294469514635886797315545489954422147350625876307372627616760916771727259522603692763196134757691698010394649734487122453461247361435525020460482466216278727120391917320942387429480427109811727337656150890384622081963083827521275954480778612127616272552641852539597365478905922883875747081108385788445463281352824991646495399475063301611760641798045182009518037173036183464629532587208955065644883976192609675837113374174047406685654129057691088723325475044057548886681359133885768348540485831822488677641373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45ed74bce0067fed3bb9d5e434c02d47fd9bfb10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (595 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martell.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnacode.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jez-ko-ve.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalendar-lem.paru.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modbiolin.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozgovalab.umbr.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradny.paru.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.entu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.hbu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.paru.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.thsbp.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.umbr.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs.upb.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttm.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnacode.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jez-ko-ve.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalendar-lem.paru.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martell.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modbiolin.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mozgovalab.umbr.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradny.paru.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.bc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.entu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.hbu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.paru.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.thsbp.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.umbr.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs.upb.cas.cz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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