hankey.wk.cz
Issued by StartCom Class 2 Primary Intermediate Server CA
About this certificate
This digital certificate with serial number 06:32 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=hankey.wk.cz,OU=StartCom Verified Certificate Member,L=Praha,ST=Praha,C=CZ,1.2.840.113549.1.9.1=#0c176a6f7365662e6a616e6f73656340676d61696c2e636f6d
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Organization unit: Secure Digital Certificate Signing
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 06:32Serial Number (int): 1586
Serial Number lenght: 11 bits, 2 octets
SubjectKeyId: 3d:d1:6a:d3:d6:db:f6:dd:be:44:23:83:4c:e5:66:8f:0d:20:f5:72
AuthorityKeyId: 11:db:23:45:fd:54:cc:6a:71:6f:84:8a:03:d7:be:f7:01:2f:26:86
Fingerprint (sha1): a5:18:53:aa:4e:35:f0:e6:12:4d:2b:bf:ca:e2:3e:b8:43:15:0d:8e
Fingerprint (sha256): 11:06:4c:90:96:92:6e:37:27:d6:15:bc:b0:80:b7:1f:5f:e7:a0:ae:23:55:47:51:b0:9b:9d:f0:00:cc:ca:93
Issuing Certificate URL: http://www.startssl.com/certs/sub.class2.server.ca.crt
Revocation information
OCSP Server: http://ocsp.startssl.com/sub/class2/server/caCRL Distribution Point: http://www.startssl.com/crt2-crl.crl
CRL Distribution Point: http://crl.startssl.com/crt2-crl.crl
Check the revocation status for certificate hankey.wk.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hankey.wk.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Key Agreement
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hankey.wk.cz
wk.cz
wk.cz
Other certificates including the domain name wk.cz
(limited to 100 certificates)
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
rig.wk.cz
mail3.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
kyle.wk.cz
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
kyle.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
mail2.wk.cz
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
mail.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
www.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
ike.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
oc.wk.cz
sni67230.cloudflaressl.com
cloud.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
mail.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
rig.wk.cz
mail3.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
kyle.wk.cz
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
kyle.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
mail2.wk.cz
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
mail.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
www.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
hankey.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
i1.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
ike.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
oc.wk.cz
sni67230.cloudflaressl.com
cloud.wk.cz
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
sni67230.cloudflaressl.com
mail.wk.cz
Certificate
The complete raw certificate details for hankey.wk.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIMDCCBxigAwIBAgICBjIwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklM MRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAy IFByaW1hcnkgSW50ZXJtZWRpYXRlIFNlcnZlciBDQTAeFw0wOTA2MjIxNzQ5Mzda Fw0xMDA2MjIxNzQ5MzdaMIGbMQswCQYDVQQGEwJDWjEOMAwGA1UECBMFUHJhaGEx DjAMBgNVBAcTBVByYWhhMS0wKwYDVQQLEyRTdGFydENvbSBWZXJpZmllZCBDZXJ0 aWZpY2F0ZSBNZW1iZXIxFTATBgNVBAMTDGhhbmtleS53ay5jejEmMCQGCSqGSIb3 DQEJARYXam9zZWYuamFub3NlY0BnbWFpbC5jb20wggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQCyNC0fT3nU1qkhWKAGhChA7lek89tBoUOWxJyUn4N5sV0L Y7aIokg8NwdNFqmx7Owm052gGsFlG0lTwxRaHf1XMQZ+CJziXTAxxBSNdCLHYnWo 8yQt5l6rbTG4tdkHnRHP1ruL96/lAapljz2iU3Yc8019pAEFGh9xN2FeU/8sFj1y RjdN/fHRAk1gZ/QlIrGwFyzxBHuytQFL3P+fp3nV+A7WIcWVLlgOHEhNtHLqwhcW b84uDAqm+A7YooATbNXJTJ2tmqvIpBuRVilY3gTQ8BuHJEdCLvmuCY/SHfozWqdX nNUlfm4/v7E+G2jFhHdMfbFWvrXRPCVDFFhNpPNXhj4VEwj21a5lHE7ggzsmmGQv Ltg4hxsFYfmhXVNDkkvMQbp0eLE/449PV99vjThm+xSZcL4hTG1qGbb8kKFTcV3r 1+lUoPhjBfbECsfhZRbeLnHZdTBYuYyppQHgAeHXONyEKnx2Noan8soAuqNyfIKM PVQ8w075ixlPoaSlKN2mqHBicCgdnRTbKDHUq3GNGvT6l5lQ/nPVVqlFhoo0QDuG 8WcK/tn96exadYvg1ymZ49/pmnzK+Ie6zhrmOgUYXZF1CFEp52GjC4SPS7du8oYk U2kE8TWrLW1Gz3bV11hVjhySkpDntT3Sj60D/1PCZBTo34R5jBTPHrRagO/sCQID AQABo4IDiTCCA4UwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwHQYDVR0lBBYwFAYI KwYBBQUHAwIGCCsGAQUFBwMBMB0GA1UdDgQWBBQ90WrT1tv23b5EI4NM5WaPDSD1 cjCBqAYDVR0jBIGgMIGdgBQR2yNF/VTManFvhIoD1773AS8mhqGBgaR/MH0xCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1 cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENv bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eYIBCzAeBgNVHREEFzAVggxoYW5rZXku d2suY3qCBXdrLmN6MIIBRwYDVR0gBIIBPjCCATowggE2BgsrBgEEAYG1NwECADCC ASUwLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5w ZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL2ludGVybWVk aWF0ZS5wZGYwgbwGCCsGAQUFBwICMIGvMBQWDVN0YXJ0Q29tIEx0ZC4wAwIBARqB lkxpbWl0ZWQgTGlhYmlsaXR5LCByZWFkIHRoZSBzZWN0aW9uICpMZWdhbCBMaW1p dGF0aW9ucyogb2YgdGhlIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 IFBvbGljeSBhdmFpbGFibGUgYXQgaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9s aWN5LnBkZjBhBgNVHR8EWjBYMCqgKKAmhiRodHRwOi8vd3d3LnN0YXJ0c3NsLmNv bS9jcnQyLWNybC5jcmwwKqAooCaGJGh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL2Ny dDItY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDov L29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczIvc2VydmVyL2NhMEIGCCsGAQUF BzAChjZodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MyLnNl cnZlci5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20v MA0GCSqGSIb3DQEBBQUAA4IBAQDScg3SYllM6WBU0CQrCAIbYhLjpVUn/2rfWQVA WYng5pDNL+SbNfkjII4HSJVBl72h6qDpWEm5S5uUf0oqhedyXAtzmJ3zLvIRlo7q IjTFL0fyLGacavpoYY+ah54XJ7/Cmka+4en7gsmksExIcwThEu26n9ton9IE4rYn luzD+zWs2KmzfKRPOu3aeulZnJO8v7DwA/Z1KGRK+PlmpqHx7i6bRSfYOGJQknrK J2pMRy4mtnJ0xUIJGRDHjSkpx7R3dSrcD7od3rGpqOl72lCjjd3ncd4Gpp/3i9oo sKvou5TvW6l1siCj1TeG0dXZYE7e8jtRE5tkEuXQO99e8m/3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsjQtH0951NapIVigBoQo QO5XpPPbQaFDlsSclJ+DebFdC2O2iKJIPDcHTRapsezsJtOdoBrBZRtJU8MUWh39 VzEGfgic4l0wMcQUjXQix2J1qPMkLeZeq20xuLXZB50Rz9a7i/ev5QGqZY89olN2 HPNNfaQBBRofcTdhXlP/LBY9ckY3Tf3x0QJNYGf0JSKxsBcs8QR7srUBS9z/n6d5 1fgO1iHFlS5YDhxITbRy6sIXFm/OLgwKpvgO2KKAE2zVyUydrZqryKQbkVYpWN4E 0PAbhyRHQi75rgmP0h36M1qnV5zVJX5uP7+xPhtoxYR3TH2xVr610TwlQxRYTaTz V4Y+FRMI9tWuZRxO4IM7JphkLy7YOIcbBWH5oV1TQ5JLzEG6dHixP+OPT1ffb404 ZvsUmXC+IUxtahm2/JChU3Fd69fpVKD4YwX2xArH4WUW3i5x2XUwWLmMqaUB4AHh 1zjchCp8djaGp/LKALqjcnyCjD1UPMNO+YsZT6GkpSjdpqhwYnAoHZ0U2ygx1Ktx jRr0+peZUP5z1VapRYaKNEA7hvFnCv7Z/ensWnWL4NcpmePf6Zp8yviHus4a5joF GF2RdQhRKedhowuEj0u3bvKGJFNpBPE1qy1tRs921ddYVY4ckpKQ57U90o+tA/9T wmQU6N+EeYwUzx60WoDv7AkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1586 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Digital Certificate Signing' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 2 Primary Intermediate Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-06-22 17:49:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-06-22 17:49:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Verified Certificate Member' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hankey.wk.cz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727008130691801241750157872977993033574322730730159455280887186498816449998991963694999534082434287272419603970604080899640772122099462045095020072561956915917328914622388295507880288186572389522165635055774835272278546016587221922306073901648916331291110197865142433115145045196096481247131360672682737033041499059022657956785348007032315687177806581006970585931650189004890903889127885043244376396620247276172851418752261680248366990358445708127670615432010256048086012727201066020682207281697430006389685724873684312957659359688637798934199114481010330253511159337118752067897652084965416813008472342193272752393006817862637263321168982824807508717949628899591432250984436472559245175814262763754552397135333498266389083971147520596288431415966532325518399970324079516007799467299350546608739254810089659839542105111507537896782484184604149767961739692986136557262693122921221772619959470653881876901916091734891645868008162675975997210653954115137299729865200265961282406367019995839727480985797848605582518626121544697145875059987688568422966883055560565174953452980261803291103659303300441917872648298034407306914564026928986145467336019165731055789886711363295305146536979986748305777208483804481870185863280839414876101143561 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3dd16ad3d6dbf6ddbe4423834ce5668f0d20f572 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 11db2345fd54cc6a716f848a03d7bef7012f2686 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Digital Certificate Signing' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hankey.wk.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wk.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/intermediate.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'StartCom Ltd.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [76 105 109 105 116 101 100 32 76 105 97 98 105 108 105 116 121 44 32 114 101 97 100 32 116 104 101 32 115 101 99 116 105 111 110 32 42 76 101 103 97 108 32 76 105 109 105 116 97 116 105 111 110 115 42 32 111 102 32 116 104 101 32 83 116 97 114 116 67 111 109 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 65 117 116 104 111 114 105 116 121 32 80 111 108 105 99 121 32 97 118 97 105 108 97 98 108 101 32 97 116 32 104 116 116 112 58 47 47 119 119 119 46 115 116 97 114 116 115 115 108 46 99 111 109 47 112 111 108 105 99 121 46 112 100 102] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/crt2-crl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/crt2-crl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com/sub/class2/server/ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/certs/sub.class2.server.ca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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