brvpn.ros.egon.gov.cz

- CR - Cesky statisticky urad -

Issued by I.CA - Standard root certificate

About this certificate

This digital certificate with serial number 1c:58:73 was issued on by Prvni certifikacni autorita a.s..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

CR - Cesky statisticky urad

Company registration number: ICA - 769947
Organization: CR - Cesky statisticky urad
Organization unit: CR - Cesky statisticky urad - ROS-IAIS
State / Province: Czech Republic
Locality: Praha
Country: CZ

Prvni certifikacni autorita a.s.

Organization: Prvni certifikacni autorita a.s.
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:58:73
Serial Number (int): 1857651
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: e3:c3:dd:96:fa:67:44:20:3d:b8:d5:96:b1:fe:0a:eb:09:4c:1f:1e
AuthorityKeyId: eb:37:a4:be:b9:6f:60:17:fb:d3:ff:2d:60:e1:04:1e:af:cf:c6:d3

Fingerprint (sha1): c2:2a:8f:21:01:fc:f3:3f:9b:af:7c:b0:d0:2d:fb:c2:d5:1d:37:c1
Fingerprint (sha256): 1e:37:3e:c9:a1:42:e0:ae:db:d3:11:cc:32:43:f4:4a:bc:96:71:c3:0a:95:a6:ae:2c:25:1c:69:28:82:b4:6e


Revocation information

CRL Distribution Point: http://scrldp1.ica.cz/sica08.crl
CRL Distribution Point: http://scrldp2.ica.cz/sica08.crl

Check the revocation status for certificate brvpn.ros.egon.gov.cz

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brvpn.ros.egon.gov.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gov.cz

(limited to 100 certificates)
copernicus.gov.cz
zony-idsjk.kraj-jihocesky.gov.cz
ctu.gov.cz
rpp-ais.egon.gov.cz
odok.cz
eru.gov.cz
ov.gov.cz
data.gov.cz
pruvodce.udh.gov.cz
cms.gov.cz
ov.gov.cz
data.mvcr.gov.cz
portal.gov.cz
smlouvy.gov.cz
rpp-aism-pub-test.egon.gov.cz
cert-externalauthapi.caais-test-int.gov.cz
irop.gov.cz
data.gov.cz
upv.gov.cz
frs.gov.cz
digitalnicesko.gov.cz
zakony.gov.cz
vzdelavani.gov.cz
data.mvcr.gov.cz
slovnik.gov.cz
voda.gov.cz
*.gov.cz
geoportal.gov.cz
xn--slovnk-7va.gov.cz
data.kraj-jihocesky.gov.cz
testrs.gov.cz
rpp-ais-test.egon.gov.cz
twist-gp.kraj-jihocesky.gov.cz
mids.gov.cz
zony.kraj-jihocesky.gov.cz
www.gov.cz
code.gov.cz
viap1p.ros-iais.egon.gov.cz
vea801.gov.cz
desu.gov.cz
viap1t.ros-iais.egon.gov.cz
biap1t.ros-iais.egon.gov.cz
opendata.gov.cz
ext-mattermost.nic.cz
ria.gov.cz
admin.gov.cz
rrtv.gov.cz
*.szpi.gov.cz
covid.gov.cz
www.gov.cz
vea801.gov.cz
zony.kraj-jihocesky.gov.cz
*.kraj-jihocesky.gov.cz
spektrum.ctu.gov.cz
vyzkum.gov.cz
razr-pub.egon.gov.cz
testrs.gov.cz
ra.gov.cz
mids.gov.cz
archi.gov.cz
zds.kraj-jihocesky.gov.cz
nap.gov.cz
rpp-opendata-test.egon.gov.cz
cms.gov.cz
opendata.gov.cz
rpp-aism.egon.gov.cz
museion.kraj-jihocesky.gov.cz
prod.frs.gov.cz
tsl.gov.cz
isnipi.gov.cz
testrs.gov.cz
vea801.gov.cz
rpp-ais.egon.gov.cz
www.snsu.cz
tsl.gov.cz
uohs.cz
registrace.udh.gov.cz
gov.cz
admin.pruvodcepripojenim.gov.cz
vyzkum.gov.cz
smlouvy.gov.cz
rpp-aism-pub.egon.gov.cz
brvpn.ros.egon.gov.cz
uzsvm.cz
scitani.gov.cz
eru.gov.cz
mids.gov.cz
obcan.portal.gov.cz
upv.gov.cz
voda.gov.cz
code.gov.cz
ares.gov.cz
chciidentitu.gov.cz
biap1t.ros-iais.egon.gov.cz
viap1p.ros-iais.egon.gov.cz
czechtourism.gov.cz
anonymizace.gov.cz
*.kraj-jihocesky.gov.cz
mk.gov.cz
isdv.upv.gov.cz

Certificate

The complete raw certificate details for brvpn.ros.egon.gov.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkiy/DFaslTlutALD9Dd
uyiKKClpie1RCrqyYBFQ4YiIjKAVnOH+vk83RoSMSQAhqm9fCejIYZKFasxGiCwf
fbQeFMHmMxelf93iHgxHs9sfWHmzvY+vwQziIC7vu10U31Zn4saNRAUDQI8sSR8x
E+b0BYqr0W87N9gRO/hvz5ByeHLDUU51vFZYfYt5L5csf3n8dBv7BKO0VIAQmEFO
HIHgojAhLi7TKU/EtHjcvfg1+++Ib64BzCgmU85zWDDXRdXnCb/m7d4s3JWwZxFJ
G6kW/SJ5VW3O753hEVyMMNf6Ed+FR/xDCrpuNPLagA3xtJcU5mEhR2cVYVf5XsPd
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1857651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I.CA - Standard root certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Prvni certifikacni autorita a.s.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-04 16:22:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-04 16:22:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brvpn.ros.egon.gov.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Czech Republic'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CR - Cesky statisticky urad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CR - Cesky statisticky urad - ROS-IAIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICA - 769947'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26040940115249259326332230367978189138742125046687956453015049320164460723307694411977895135270472391094680436557409732462926052887982281300449464112144559083371063225330563662061874668131808352865064490306578507743707757500854591142139627668231033177174273016325632169609512932468742117078504746256408758046029769500602089318006169301964531210241044885164143885826466579197755690819000091168532560251363602787744523957226878383338203332570833296654928163707433440954531587017223371175580994048630025158925825662318838358983499147046307550312842217908755336634823638488705541767692759134947042773355245232946980052383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eb37a4beb96f6017fbd3ff2d60e1041eafcfc6d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3c3dd96fa6744203db8d596b1fe0aeb094c1f1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23624.1.1.1.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp1.ica.cz/sica08.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp2.ica.cz/sica08.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00572eb58e08ea8d06ee0836bb26f0db80c8d0c1a12bec88517c2af6a6d8d48b9ea99dcbaf31c8f3e08df6dd0af531fa3aab55554f7ee543a8e2980265839f2871b26d9ca5764ddde0ccc84b79bd5b6505a11cd3af155cef5c81cb272512c4f18413ff24ec3f3eb092bd72f78e6937909f2b5d2e228651da118387447a07ea100c5adfa3bc13b9e4356316ec55912b0774eaf8b81371cecf8442b93d5f638d4116397f3bd22edf37b82ae21c143419c70c82f4a11811cf9e534c58ed813d7f33f8c3a086fc2736157c975d8d64f11c9151e0316fb023c6ec6bc85680ef08b81a01ddf5570a88bb4a1f0b3a7ffbd03c29576cd0ae908ef612621ea86a6c4012e26b