mail.compet.cz

- Úřad pro ochranu hospodářské soutěže -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 06:73:2e:45:a3:5d:23:8a:ec:b6:d9:9d:a3:9e:8b:b7 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Úřad pro ochranu hospodářské soutěže

Company registration number: 65349423
Organization: Úřad pro ochranu hospodářské soutěže
Organization unit: Created by SSLmarket
Locality: Brno
Country: CZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:73:2e:45:a3:5d:23:8a:ec:b6:d9:9d:a3:9e:8b:b7
Serial Number (int): 8573420621584636423420694202312199095
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 25:fe:74:9a:8c:59:73:d8:67:07:e8:f8:8f:72:4c:45:f9:68:55:7e
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): e7:85:40:e5:70:9d:bf:45:5b:50:f7:f2:f8:ef:55:6d:69:b7:4c:3f
Fingerprint (sha256): 19:72:c8:18:d9:d0:2f:c2:75:9f:2a:4b:6b:07:f5:86:c4:95:28:0d:06:5d:8d:cb:d4:87:e2:33:22:2f:c6:6e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate mail.compet.cz

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.compet.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.compet.cz
mail.uohs.cz
autodiscover.domurad.compet.cz
autodiscover.uohs.cz
email.domurad.compet.cz
autodiscover.compet.cz

Other certificates including the domain name compet.cz

(limited to 100 certificates)
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
fw.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
fw.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
compet.cz
awuohs.compet.cz

Certificate

The complete raw certificate details for mail.compet.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDaQIe69JNH76g6BhkkH
mVaxh9nj4L4w60Ca1hH/Twlg5mh7nMSn22DXZ+b7EvYMK7G+ZG4OFfD3xHcNDVvd
/+daLSiy0dTEWUeBdID4X6TZDZQ1er2cIMVCdMcrHRxlV18vTVl74O0gKdhxJGkv
jZonwfNyLM3jyGjpAuFciRs7gHvaB1XuX9SPflVARLtWRvcX70sbu2znFwVr5+n2
3yjaZtDc6x3RFqZcxu3L92xvb2w6ucl1ZqGVOlBSx/BT7eXR6y/BrNEEqggQiAco
5sQ+OaVEg+TNUc9UHoY+3YaOpzgnyV05gi25fudNK4fOPeklCNpr+4N1rAw93kn0
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8573420621584636423420694202312199095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '65349423'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Úřad pro ochranu hospodářské soutěže'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Created by SSLmarket'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.compet.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25779520239939691714691423293211342989879565158958549222618625115256506889809452391277202798615290691449652103333449207952275889172778242276398359799603796595855698034341373222994140249920838432183556913156803764136163173117366647111537933357330912796625620384028521042112314031966559386088465712189268918416534510059632711252723777705909459801690804286721892174605117332654963672505098972360806613014367327091051763625997950281603164668562082280259846914167917121047393677759943517522488368191497243689108505269646292687853032287391081957031456927544909194387303115163843745047080874636950477932967592418914417112283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25fe749a8c5973d86707e8f88f724c45f968557e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.compet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.uohs.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.domurad.compet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.uohs.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.domurad.compet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.compet.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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