prihlaseni.itesco.cz
- Tesco Stores CR a.s. -
Issued by Entrust Certification Authority - L1M
About this certificate
This digital certificate with serial number 39:3c:ee:02:82:d1:48:40:9b:9f:24:3a:75:c1:3b:ad was issued on by Entrust, Inc..
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Tesco Stores CR a.s.
Company registration number:
45308314
Organization: Tesco Stores CR a.s.
Organization: Tesco Stores CR a.s.
Locality:
Praha 10
Country: CZ
Country: CZ
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 39:3c:ee:02:82:d1:48:40:9b:9f:24:3a:75:c1:3b:adSerial Number (int): 76082360983680346514584832042906762157
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 35:29:da:dc:7e:2f:92:70:5f:06:ce:a1:a3:f1:d3:f0:2d:2a:92:ab
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a
Fingerprint (sha1): e1:5e:7a:7c:3b:19:35:99:01:c7:b8:dc:8e:91:94:1a:95:a2:9f:a9
Fingerprint (sha256): 10:3d:38:43:c1:9e:16:a1:33:91:0d:2c:5c:b8:8f:69:bb:f0:ea:23:33:ec:c8:84:96:f9:c8:55:c1:0f:0d:e9
Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1m.crl
Check the revocation status for certificate prihlaseni.itesco.cz
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prihlaseni.itesco.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prihlaseni.itesco.cz
www.prihlaseni.itesco.cz
cz.stage.mojetesco.com
itesco.cz
m.prihlaseni.itesco.cz
m.zabezpeceni.itesco.cz
moje-ppe.itesco.cz
moje.itesco.cz
nakup.itesco.cz
stage.mojetesco.cz
tescodocuments.com
www-ppe.itesco.cz
www.itesco.cz
www.moje-ppe.itesco.cz
www.moje.itesco.cz
www.tescodocuments.com
zabezpeceni.itesco.cz
www.prihlaseni.itesco.cz
cz.stage.mojetesco.com
itesco.cz
m.prihlaseni.itesco.cz
m.zabezpeceni.itesco.cz
moje-ppe.itesco.cz
moje.itesco.cz
nakup.itesco.cz
stage.mojetesco.cz
tescodocuments.com
www-ppe.itesco.cz
www.itesco.cz
www.moje-ppe.itesco.cz
www.moje.itesco.cz
www.tescodocuments.com
zabezpeceni.itesco.cz
Other certificates including the domain name itesco.cz
(limited to 100 certificates)
soutez-pedigree.itesco.cz
service.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
*.itesco.cz
www.tescocommunityfund.eu
tescovalue.sk
enterprise1.ui.itesco.cz
tescovalue.sk
service.itesco.cz
tescovalue.sk
origin-www.itesco.cz
zabezpeceni.itesco.cz
pomahame.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
prihlaseni.itesco.cz
tescovalue.sk
www.click-and-collect.cz
enterprise1.ui.itesco.cz
enterprise1.ui.itesco.cz
*.itesco.cz
nws.itesco.cz
predsevzeti.itesco.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
clubcard.cz
m.nakup.itesco.cz
tescovalue.sk
vanoce2019.itesco.cz
zadostopujcku.itesco.cz
*.itesco.cz
soutez-pedigree.itesco.cz
card.tesco.com
enterprise1.ui.itesco.cz
nws.itesco.cz
corporate.itesco.cz
www.itesco.cz
*.itesco.cz
clubcard.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
www-ppe.itesco.cz
enterprise.ui.itesco.cz
www2.itesco.cz
tescovalue.sk
card.tesco.com
clubcard.cz
card.tesco.com
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
predsevzeti.itesco.cz
card.tesco.com
enterprise.ui.itesco.cz
enterprise.ui.itesco.cz
mimoni.itesco.cz
enterprise1.ui.itesco.cz
predsevzeti.itesco.cz
tescovalue.sk
tescovalue.sk
tescovalue.sk
tescovalue.sk
origin-zabezpeceni.itesco.cz
kariera.itesco.cz
card.tesco.com
prihlaseni.itesco.cz
prihlaseni.itesco.cz
www.tescocommunityfund.eu
www.tescocommunityfund.eu
prihlaseni.itesco.cz
link.homecredit.cz
soutez-pedigree.itesco.cz
vanoce2019.itesco.cz
predsevzeti.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
www.click-and-collect.cz
predsevzeti.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
prihlaseni.itesco.cz
clubcard.cz
vanoce2019.itesco.cz
enterprise.ui.itesco.cz
www.click-and-collect.cz
service.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
card-ppe.tesco.com
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
enterprise.ui.itesco.cz
service.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
*.itesco.cz
www.tescocommunityfund.eu
tescovalue.sk
enterprise1.ui.itesco.cz
tescovalue.sk
service.itesco.cz
tescovalue.sk
origin-www.itesco.cz
zabezpeceni.itesco.cz
pomahame.itesco.cz
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
prihlaseni.itesco.cz
tescovalue.sk
www.click-and-collect.cz
enterprise1.ui.itesco.cz
enterprise1.ui.itesco.cz
*.itesco.cz
nws.itesco.cz
predsevzeti.itesco.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
clubcard.cz
m.nakup.itesco.cz
tescovalue.sk
vanoce2019.itesco.cz
zadostopujcku.itesco.cz
*.itesco.cz
soutez-pedigree.itesco.cz
card.tesco.com
enterprise1.ui.itesco.cz
nws.itesco.cz
corporate.itesco.cz
www.itesco.cz
*.itesco.cz
clubcard.cz
origin-prihlaseni.itesco.cz
tescovalue.sk
www2.itesco.cz
www-ppe.itesco.cz
enterprise.ui.itesco.cz
www2.itesco.cz
tescovalue.sk
card.tesco.com
clubcard.cz
card.tesco.com
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
predsevzeti.itesco.cz
card.tesco.com
enterprise.ui.itesco.cz
enterprise.ui.itesco.cz
mimoni.itesco.cz
enterprise1.ui.itesco.cz
predsevzeti.itesco.cz
tescovalue.sk
tescovalue.sk
tescovalue.sk
tescovalue.sk
origin-zabezpeceni.itesco.cz
kariera.itesco.cz
card.tesco.com
prihlaseni.itesco.cz
prihlaseni.itesco.cz
www.tescocommunityfund.eu
www.tescocommunityfund.eu
prihlaseni.itesco.cz
link.homecredit.cz
soutez-pedigree.itesco.cz
vanoce2019.itesco.cz
predsevzeti.itesco.cz
soutez-pedigree.itesco.cz
enterprise.ui.itesco.cz
soutez-pedigree.itesco.cz
www.click-and-collect.cz
predsevzeti.itesco.cz
tescovalue.sk
soutez-pedigree.itesco.cz
prihlaseni.itesco.cz
clubcard.cz
vanoce2019.itesco.cz
enterprise.ui.itesco.cz
www.click-and-collect.cz
service.itesco.cz
tescovalue.sk
prihlaseni.itesco.cz
card-ppe.tesco.com
enterprise.ui.itesco.cz
prihlaseni.itesco.cz
enterprise.ui.itesco.cz
Certificate
The complete raw certificate details for prihlaseni.itesco.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIISTCCBzGgAwIBAgIQOTzuAoLRSECbnyQ6dcE7rTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0y NDAzMjAxNTU5MTJaFw0yNTA0MjAxNTU5MTFaMIGlMQswCQYDVQQGEwJDWjERMA8G A1UEBxMIUHJhaGEgMTAxEzARBgsrBgEEAYI3PAIBAxMCQ1oxHTAbBgNVBAoTFFRl c2NvIFN0b3JlcyBDUiBhLnMuMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlv bjERMA8GA1UEBRMINDUzMDgzMTQxHTAbBgNVBAMTFHByaWhsYXNlbmkuaXRlc2Nv LmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0GF342gvRRMy4/q lnCpRW/515VElrhqF1bvajINo6mMQ2K2X5Y8gMMp7YNJsa9no0MHKEt3EHeqGGjr BvguLye1Gx30Mgjc9Tr3GUXohhFkS+HHDGdFxjND9ip1/3/5nQ8EDjgeoLXDLbDm IAM9lL8DxJ3iN2Qc3khXeeC67A15LvpfzF1VUaYDN2VLw6I1E9K04/N6BoHJpAVQ sMpZVQpA16tuX+0KajwJ2PlYJdaDvnEz5WbkV11+G3Fng254Gqskz4X+A0mISHIM yVBWipFaW6aSlUSDPdoyhQaLyxY+XAx0M49LB41t+OmsqCYEtqZNZm4NvIHOJxbg tUvcewIDAQABo4IEXDCCBFgwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUNSna3H4v knBfBs6ho/HT8C0qkqswHwYDVR0jBBgwFoAUw/fQtSowra8NkSFwOVTdvIlwxzow aAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0 Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMW0tY2hh aW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5u ZXQvbGV2ZWwxbS5jcmwwggFrBgNVHREEggFiMIIBXoIUcHJpaGxhc2VuaS5pdGVz Y28uY3qCGHd3dy5wcmlobGFzZW5pLml0ZXNjby5jeoIWY3ouc3RhZ2UubW9qZXRl c2NvLmNvbYIJaXRlc2NvLmN6ghZtLnByaWhsYXNlbmkuaXRlc2NvLmN6ghdtLnph YmV6cGVjZW5pLml0ZXNjby5jeoISbW9qZS1wcGUuaXRlc2NvLmN6gg5tb2plLml0 ZXNjby5jeoIPbmFrdXAuaXRlc2NvLmN6ghJzdGFnZS5tb2pldGVzY28uY3qCEnRl c2NvZG9jdW1lbnRzLmNvbYIRd3d3LXBwZS5pdGVzY28uY3qCDXd3dy5pdGVzY28u Y3qCFnd3dy5tb2plLXBwZS5pdGVzY28uY3qCEnd3dy5tb2plLml0ZXNjby5jeoIW d3d3LnRlc2NvZG9jdW1lbnRzLmNvbYIVemFiZXpwZWNlbmkuaXRlc2NvLmN6MA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYD VR0gBEQwQjAHBgVngQwBATA3BgpghkgBhvpsCgECMCkwJwYIKwYBBQUHAgEWG2h0 dHBzOi8vd3d3LmVudHJ1c3QubmV0L3JwYTCCAXwGCisGAQQB1nkCBAIEggFsBIIB aAFmAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGOXJaI3gAA BAMARzBFAiEApTJO0Sp97nKEWurS6UyTsYmyspgZUx31x86OaLNwDxQCICreDGx+ sM2CkfR3dsOYEUikOvEmrcj36BkbLSGvFjQeAHUA5tIxY0B3jMEQQQbXcbnOwdJA 9paEhvu6hzId/R43jlAAAAGOXJaI8wAABAMARjBEAiA1blAhHxMAkL25DP/rdBoW pgOcbyMpCevnoNgMeFoUOgIgKhWG+FdJYT3at69L3cwb7m1rn7M/zmQ40V5fs+/O BPcAdQCi4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAAAY5clojzAAAE AwBGMEQCIDg3h25njO7c0h2RdWal8mgtTSAq2Fqedl7twqeOSVQEAiALG1wWEY35 oth4F3B6njEn3hXOVC2ShBDl0Rvmwui5YDANBgkqhkiG9w0BAQsFAAOCAQEAwedf miW9N90VkL9GLkc+IEiMXtb8YlMT4W8f4FRd+UlNfQQUJsE+5wAR1y0anohyUfFr jWzO9yw/njeR3z3iLnTzqZbqz02d7kDogiavCEMQQMc1JmwfmVNUorOx0GsvyYMs bgCH/Q/d/vouDg6+EaP8C0Qf3QVMmSP7YyADoZsgASpTUeAHePnOCyFvXkP+sGDZ FjgG/j7OdI9JCrbBcnwXu4k9S5YxDmWeUy3AW6aNNVBPqlffcUWfADaMJUhDvC+d LA4Tig4wo1LXxSmxRQfEzcaOoxb6NqCuzy8kX3YEiwj6RAkL5Y1BRmbUHNf84fHt gZOybjj8lrSb7zImjQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0GF342gvRRMy4/qlnCp RW/515VElrhqF1bvajINo6mMQ2K2X5Y8gMMp7YNJsa9no0MHKEt3EHeqGGjrBvgu Lye1Gx30Mgjc9Tr3GUXohhFkS+HHDGdFxjND9ip1/3/5nQ8EDjgeoLXDLbDmIAM9 lL8DxJ3iN2Qc3khXeeC67A15LvpfzF1VUaYDN2VLw6I1E9K04/N6BoHJpAVQsMpZ VQpA16tuX+0KajwJ2PlYJdaDvnEz5WbkV11+G3Fng254Gqskz4X+A0mISHIMyVBW ipFaW6aSlUSDPdoyhQaLyxY+XAx0M49LB41t+OmsqCYEtqZNZm4NvIHOJxbgtUvc ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 76082360983680346514584832042906762157 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 15:59:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-20 15:59:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha 10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco Stores CR a.s.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45308314' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prihlaseni.itesco.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26163639695103712211235648443088647665854083443946535060639798725524213957229975495600554104922879604862109086856052690564265949150558341617839353171733934248429648073689966826038652966243162694755614032407919298523888325145550820894213441577492487478532045548689138741773047089529079407921217339657946206475559500169850196418181441757477347561870194212631995756360068908644735867225053731665484916532961523116648622949270373028352988655578503601674710486958342942038792920480281225109178311133118006705548789663801982224634530579177947225081693053788400267691026682135855409483902188172257985811157116617271578188923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3529dadc7e2f92705f06cea1a3f1d3f02d2a92ab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prihlaseni.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prihlaseni.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.stage.mojetesco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.prihlaseni.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zabezpeceni.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moje-ppe.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moje.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakup.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mojetesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescodocuments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ppe.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moje-ppe.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moje.itesco.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescodocuments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zabezpeceni.itesco.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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