www.mikulasske.cz

- Gymnázium, Plzeň, Mikulášské nám. 23 -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a2:bf:4f:8c:b6:6d:34:44:e6:2b:2b:dc:82:19:30:55 was issued on by GEANT Vereniging.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Gymnázium, Plzeň, Mikulášské nám. 23

Organization: Gymnázium, Plzeň, Mikulášské nám. 23
State / Province: Plzeňský kraj
Country: CZ

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): a2:bf:4f:8c:b6:6d:34:44:e6:2b:2b:dc:82:19:30:55
Serial Number (int): 216328277475896255502280725093852721237
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 64:87:36:09:b8:7b:29:bf:fe:ec:84:c0:2c:6f:5c:83:c1:a9:bf:8d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b9:b8:ad:ea:19:3e:7b:74:8e:67:00:e4:3d:4d:b0:de:ad:3f:5d:0e
Fingerprint (sha256): 1f:c8:ea:9b:ee:38:cd:e4:3b:2d:a8:e6:61:25:7f:ad:07:dd:87:17:44:8a:6d:56:f9:ec:44:c7:2c:5a:a8:58

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.mikulasske.cz

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mikulasske.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mikulasske.cz
admin.mikulasske.cz
bakalari.mikulasske.cz
cache.mikulasske.cz
esf.mikulasske.cz
mikulasske.cz
provoz.mikulasske.cz
weblogin.mikulasske.cz
webmail.mikulasske.cz

Other certificates including the domain name mikulasske.cz

(limited to 100 certificates)
mail.mikulasske.cz
www.mikulasske.cz
mail.mikulasske.cz
www.mikulasske.cz
idp.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
mail.mikulasske.cz
mail.mikulasske.cz
www.mikulasske.cz
radius.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
radius.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
radius.mikulasske.cz
radius.mikulasske.cz
mail.mikulasske.cz

Certificate

The complete raw certificate details for www.mikulasske.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZi0FRfIdiLAt2KOYhfN
qLBztRcv5L4cileIRHDXhiIu3jpoZQxjfx3zF3l7w/11+yv1BigXD1H7KgGQ7XSJ
wgWkJzsUqb7O34C0M8dttNullRfNJlmeOBv0jISBTy2uOgDngRVA0j47JM3PbuvJ
xEqKZLIvNz+/f5PEPOqojnQUPRwhbnP7uwdU7wBK5vhxUfKlEy73KIfea8Ejl7xV
7VLQKPWAwi0g8A1qLjFHq0W072JhH3J8ghfy3av6drUmfE6yQgV/TTHrxQ1kFDJI
gESHFBRIiCLnyR3B3I8n01bvCVCfnOfBmEnsU9wvTU9lQrzhYJyZ2kTwEgybTEqO
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216328277475896255502280725093852721237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Plzeňský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gymnázium, Plzeň, Mikulášské nám. 23'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mikulasske.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25954153394186900871602878679156757321553980523547712935568693809109589947923106067883838998655407659222351447570525040463201249088939564065042293938600524814677457312644854736720243886585183713328513421846823810039731130781940952012280651774208730291189629670652359225139755254423476402927297005719101730121294344431041417182468989538657686794649239000975285850110607629221427816819496599197298455176195243530610155401231120755546380975095955570325294305594096350229400510225386682456534762316776161572494518863337502213860311942198452408910129357140280164925280809967066451880040726427507460457442685969912916774457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64873609b87b29bffeec84c02c6f5c83c1a9bf8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakalari.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provoz.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogin.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mikulasske.cz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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