zakazky.cheb.cz

- Město Cheb [IČ 00253979] -

Issued by PostSignum Public CA 2

About this certificate

This digital certificate with serial number 0a:32:61 was issued on by Česká pošta, s.p. [IČ 47114983].

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Město Cheb [IČ 00253979]

Company registration number: S25897
Organization: Město Cheb [IČ 00253979]
Organization unit: Město Cheb
Country: CZ

Česká pošta, s.p. [IČ 47114983]

Organization: Česká pošta, s.p. [IČ 47114983]
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:32:61
Serial Number (int): 668257
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 7f:87:ca:14:0c:23:5c:a9:57:dc:94:57:46:db:4e:fa:6f:4f:1b:ae
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1

Fingerprint (sha1): dd:e4:03:0c:11:86:b7:be:d5:95:b0:16:cb:66:52:0b:d1:d1:56:09
Fingerprint (sha256): 0e:11:71:0e:da:83:cf:43:7d:88:6a:6a:3c:a8:04:60:b8:f3:fb:17:c1:41:bb:2d:b3:04:b9:b3:6d:b4:55:fd

Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt

Revocation information

CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl

Check the revocation status for certificate zakazky.cheb.cz

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zakazky.cheb.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name cheb.cz

(limited to 100 certificates)
ssl.cheb.cz
cheb.cz
zakazky.cheb.cz
*.cheb.cz
cheb.cz
zapisyzs.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
anonymizace.cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
tic.cheb.cz
cheb.cz

Certificate

The complete raw certificate details for zakazky.cheb.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAyVgWKTakOU7Z/QvguY
xlBJS3gHtX78AVdRpCPeMMXQB4KVKUPhK415eW7sjh45oxgYgJllgX2dp4jJ6qQo
USDBpLMvAOWl5JokJqAVzfuaXArl3hvIZkViZwPhYdzXjsA+RZjREAX03NOMfLyk
HjPDCZ24WnEnhh+hLIJkPa8ox08+QXpbP96HgxHMUyLDcitPagY75i1G9zD9bFSU
oJ/2JO89MKMfYnCyh9QgyiAt5hmL+E+8UX7iCfktLbVIPbIG2jfCMJECDSFo6BWb
NuQc1jt/RfuCHqZNPiUZuWIrNaJVGJKZ/kMjl+AdzlrO+M89vDZqRJY/kHdPWH2u
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 668257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-18 08:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-07 08:06:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Město Cheb [IČ 00253979]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Město Cheb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zakazky.cheb.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S25897'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22224147078421575462311395265945586184036231742288333367131855677848836213125403718904358859372864135346294983862147551270149076605937796981698361979496336477887691058085885760358689150386443048296188377885125765369963509826942172661806721688395392122232314118900604727383900883658791249485041674278941102637261223685914913537486913231546504181196330787116436947482760079551504149526835515008808413048955968359180768391437179620421108952447941810902465737135177928236824102966511700551437131571458327649313672848419056119796395174199931381773225842852279983810643439880633572526635812307013952066009953140112197791343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString ''
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.8.210 (postSignumCommercialServerPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f87ca140c235ca957dc945746db4efa6f4f1bae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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