*.dialtelecom.cz

- Dial Telecom a.s. [IČ 28175492] -

Issued by PostSignum Public CA 3

About this certificate

This digital certificate with serial number 06:45:ca was issued on by Česká pošta, s.p. [IČ 47114983].

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • AttributeValue in subject RelativeDistinguishedName sequence SHOULD NOT have trailing whitespace (lint.AWSLabs certlint)

Dial Telecom a.s. [IČ 28175492]

Company registration number: D259271
Organization: Dial Telecom a.s. [IČ 28175492]
Organization unit: Dial Telecom, a.s.
Locality: Praha 8
Country: CZ

Česká pošta, s.p. [IČ 47114983]

Organization: Česká pošta, s.p. [IČ 47114983]
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 06:45:ca
Serial Number (int): 411082
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: 25:e0:5c:85:ca:5b:fc:2a:b2:f1:68:2c:81:cf:64:9c:16:13:c2:4c
AuthorityKeyId: 15:ef:89:3e:ba:db:b9:9a:e7:36:ac:17:66:5b:e3:f8:0c:35:dc:35

Fingerprint (sha1): de:31:d6:77:b6:b9:70:8e:d9:36:a2:75:4b:c0:05:b5:f9:14:97:60
Fingerprint (sha256): 14:fe:f9:8f:0a:85:34:64:d4:b5:d0:68:03:3f:f7:f4:ce:fc:0a:b7:fb:b2:9e:6c:f1:33:9c:0a:fa:a1:10:90

Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca3.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca3.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca3.crt

Revocation information

OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA3/OCSP_public/
CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca3.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca3.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca3.crl

Check the revocation status for certificate *.dialtelecom.cz

1

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dialtelecom.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dialtelecom.cz [email protected]

Other certificates including the domain name dialtelecom.cz

(limited to 100 certificates)
dialtelecom.cz
cloud.dialtelecom.cz
mail-new.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
*.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
exchange.gigant.cz
mail-new.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
exchange.gigant.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
smtp-out.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
speedtest.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
*.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
exchange.gigant.cz
exchange.gigant.cz
webex-meetings.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz

Certificate

The complete raw certificate details for *.dialtelecom.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgIDBkXKMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAkNa
MSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQ3MTE0OTgzXTEf
MB0GA1UEAxMWUG9zdFNpZ251bSBQdWJsaWMgQ0EgMzAeFw0xODAxMTUxNDE0NDJa
Fw0yMTAyMDMxNDE0NDJaMIGVMQswCQYDVQQGEwJDWjERMA8GA1UEBxMIUHJhaGEg
OCAxKTAnBgNVBAoMIERpYWwgVGVsZWNvbSBhLnMuIFtJxIwgMjgxNzU0OTJdMRsw
GQYDVQQLExJEaWFsIFRlbGVjb20sIGEucy4xGTAXBgNVBAMMECouZGlhbHRlbGVj
b20uY3oxEDAOBgNVBAUTB0QyNTkyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCFSSfrTPZRNGnBcVwvOFNApPIAjTDEviF3zc6ikm/7tqJ2jcaweHgG
Mu6vetFs3GojUJqWu5+3jBaCvehM6w/qAkwjEImNVYpeP1eE7edSysQcW5jmfE06
8nd6CbjpUb+WhfaQgSUKo1JJvhrWTz4H3aymXYdBEzy8b/8wBKhQA0dofLfVBCfc
g+iig8Nv7hz1r5FFvCq3m7xl1oUBpyIXFmq4MSgH5j1kXJuceJ/MUOofJ6BbYrDn
P8NWkLfqUBSVNUeQ7Y2aP2s6iTKD3HUIZyKwSUPy0nKumOBFwZ4jVVr4O78b2gCq
hlUvVDu74NDNweyWWf/RR0VsQECKPl19AgMBAAGjggKaMIICljAwBgNVHREEKTAn
ghAqLmRpYWx0ZWxlY29tLmN6gRNpc2l0QGRpYWx0ZWxlY29tLmN6MEgGA1UdIARB
MD8wMwYJZ4EGAQIBCYIsMCYwJAYIKwYBBQUHAgEWGGh0dHA6Ly93d3cucG9zdHNp
Z251bS5jejAIBgZngQwBAgIwgf0GCCsGAQUFBwEBBIHwMIHtMDgGCCsGAQUFBzAC
hixodHRwOi8vd3d3LnBvc3RzaWdudW0uY3ovY3J0L3BzcHVibGljY2EzLmNydDA5
BggrBgEFBQcwAoYtaHR0cDovL3d3dzIucG9zdHNpZ251bS5jei9jcnQvcHNwdWJs
aWNjYTMuY3J0MDgGCCsGAQUFBzAChixodHRwOi8vcG9zdHNpZ251bS50dGMuY3ov
Y3J0L3BzcHVibGljY2EzLmNydDA8BggrBgEFBQcwAYYwaHR0cDovL29jc3AucG9z
dHNpZ251bS5jei9PQ1NQL1ZDQTMvT0NTUF9wdWJsaWMvMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUFe+J
PrrbuZrnNqwXZlvj+Aw13DUwgagGA1UdHwSBoDCBnTAyoDCgLoYsaHR0cDovL3d3
dy5wb3N0c2lnbnVtLmN6L2NybC9wc3B1YmxpY2NhMy5jcmwwM6AxoC+GLWh0dHA6
Ly93d3cyLnBvc3RzaWdudW0uY3ovY3JsL3BzcHVibGljY2EzLmNybDAyoDCgLoYs
aHR0cDovL3Bvc3RzaWdudW0udHRjLmN6L2NybC9wc3B1YmxpY2NhMy5jcmwwHQYD
VR0OBBYEFCXgXIXKW/wqsvFoLIHPZJwWE8JMMA0GCSqGSIb3DQEBCwUAA4IBAQBK
7qYOucDsTJw2LcV6MEkz00cBqjx9j0+jV1H6JkPPx1jXiv93/U9Ql5ENXDyOd4wf
i4sqWU5lWZSyoFSTLx92VUMI/o3r6+JvdlJMjsNJAZgNXwAAPPuJ3qrNO7TzF7I3
qYd2HhgIgpyBEGXYSno5fwgY/JDq7wVpokY+p6l0ik3evVzSMGGpZMVt2COVHkxJ
Nr2ssYRWCOe//Ph/Pkzs1DcTINppqgI2roBHFRHEjz1LIztkAFo5DptM/PcoTU6Q
4wSaTYlouUzilSRzcqco4j3pCfGkPHLoGOE4Yp6Au1NRiqMkAVkDZubII76uXFpr
RdZpjkYkWhd9esOsZ/hu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUkn60z2UTRpwXFcLzhT
QKTyAI0wxL4hd83OopJv+7aido3GsHh4BjLur3rRbNxqI1Calruft4wWgr3oTOsP
6gJMIxCJjVWKXj9XhO3nUsrEHFuY5nxNOvJ3egm46VG/loX2kIElCqNSSb4a1k8+
B92spl2HQRM8vG//MASoUANHaHy31QQn3IPoooPDb+4c9a+RRbwqt5u8ZdaFAaci
FxZquDEoB+Y9ZFybnHifzFDqHyegW2Kw5z/DVpC36lAUlTVHkO2Nmj9rOokyg9x1
CGcisElD8tJyrpjgRcGeI1Va+Du/G9oAqoZVL1Q7u+DQzcHslln/0UdFbEBAij5d
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-15 14:14:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-03 14:14:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha 8 '
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dial Telecom a.s. [IČ 28175492]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dial Telecom, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dialtelecom.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D259271'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16825769096132865500783959897932591514768628214460450858738226556992063028243525021823659466813011460566036432131014436411666112982668886322412207892734063614323509422150667274481000913240286985010989021070924593548854120555229701482789463928689153967371021016886338712715327841429763960214601115129317043221864562694162783042256705175039361261639431178121740450334119046424548196185827738191831616176032733295584781480422547801234888520226649902387497291168395648256989372336386692054069920460864989032281067904978887998022743202703746427697267480341698105725679759566433448541158693508857609022292819364701416611197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dialtelecom.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.300
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA3/OCSP_public/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 15ef893ebadbb99ae736ac17665be3f80c35dc35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25e05c85ca5bfc2ab2f1682c81cf649c1613c24c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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