odtvs.opac.nm.cz
Issued by R3
About this certificate
This digital certificate with serial number 04:79:8a:a8:ec:04:ab:74:e6:99:39:58:6c:a4:5a:05:56:c7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=odtvs.opac.nm.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:79:8a:a8:ec:04:ab:74:e6:99:39:58:6c:a4:5a:05:56:c7Serial Number (int): 389807620680783735279962821788145495135943
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e3:ad:35:df:98:aa:1b:cf:bb:6d:c2:22:7d:b4:00:d7:5c:e5:bd:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ee:54:88:de:25:af:a4:1c:a4:ad:ca:1c:21:48:45:54:e9:ad:0d:a4
Fingerprint (sha256): 20:66:f8:e5:88:50:b0:7b:dc:cf:24:0f:73:22:61:5b:da:39:7e:2c:1b:90:b5:ea:77:a7:29:ea:0f:72:b1:2f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate odtvs.opac.nm.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for odtvs.opac.nm.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
odtvs.opac.nm.cz
Other certificates including the domain name nm.cz
(limited to 100 certificates)
nm.opac.nm.cz
mbssceny.opac.nm.cz
rezervace.benesovavila.nm.cz
kanesh.nm.cz
kanesh.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
vademecum.nm.cz
intro.nm.cz
nm.opac.nm.cz
vavobd.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
kanesh.nm.cz
nm.cz
stt.opac.nm.cz
npm.opac.nm.cz
nm.cz
npm.opac.nm.cz
prazskestopyantoninadvoraka.nm.cz
kanesh.nm.cz
sumerian.nm.cz
nm.cz
cmhdok.opac.nm.cz
posta.nm.cz
antonindvorak.nm.cz
kanesh.nm.cz
amusing.nm.cz
publikace.nm.cz
nm.cz
botanika.opac.nm.cz
android-app.nm.cz
amusing.nm.cz
intro.nm.cz
mbssceny.opac.nm.cz
entomologie.opac.nm.cz
oncd.opac.nm.cz
kanesh.nm.cz
kerio.nm.cz
edukace.benesovavila.nm.cz
grepo.nm.cz
mbs.opac.nm.cz
botanika.opac.nm.cz
publikace.nm.cz
botanika.opac.nm.cz
cmh.opac.nm.cz
nm.cz
*.opac.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
intro.nm.cz
helpdesk.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
csds.opac.nm.cz
eshop.nm.cz
posta.nm.cz
odtvs.opac.nm.cz
antonindvorak.nm.cz
stt.opac.nm.cz
odtvs.opac.nm.cz
zbraslav.opac.nm.cz
odtvs.opac.nm.cz
bedrichsmetana.nm.cz
rad.nm.cz
*.opac.nm.cz
navigation-app.nm.cz
mad.opac.nm.cz
no.opac.nm.cz
t.mailkit.com
no.opac.nm.cz
admin.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
ms.nm.cz
kanesh.nm.cz
amusing.nm.cz
mad.opac.nm.cz
npm.opac.nm.cz
antonindvorak.nm.cz
onedrive.nm.cz
p.pozvanky.nm.cz
intro.nm.cz
helpdesk.nm.cz
rezervace.pamatnikpalackeho.nm.cz
t.mailkit.com
prazskestopyantoninadvoraka.nm.cz
amusing.nm.cz
intro.nm.cz
t.mailkit.com
oncd.opac.nm.cz
ms.nm.cz
rd-gw.nm.cz
onedrive.nm.cz
mbs.opac.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
muzeum3000.nm.cz
oncd.opac.nm.cz
helpdesk.nm.cz
mbssceny.opac.nm.cz
rezervace.benesovavila.nm.cz
kanesh.nm.cz
kanesh.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
vademecum.nm.cz
intro.nm.cz
nm.opac.nm.cz
vavobd.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
kanesh.nm.cz
nm.cz
stt.opac.nm.cz
npm.opac.nm.cz
nm.cz
npm.opac.nm.cz
prazskestopyantoninadvoraka.nm.cz
kanesh.nm.cz
sumerian.nm.cz
nm.cz
cmhdok.opac.nm.cz
posta.nm.cz
antonindvorak.nm.cz
kanesh.nm.cz
amusing.nm.cz
publikace.nm.cz
nm.cz
botanika.opac.nm.cz
android-app.nm.cz
amusing.nm.cz
intro.nm.cz
mbssceny.opac.nm.cz
entomologie.opac.nm.cz
oncd.opac.nm.cz
kanesh.nm.cz
kerio.nm.cz
edukace.benesovavila.nm.cz
grepo.nm.cz
mbs.opac.nm.cz
botanika.opac.nm.cz
publikace.nm.cz
botanika.opac.nm.cz
cmh.opac.nm.cz
nm.cz
*.opac.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
intro.nm.cz
helpdesk.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
csds.opac.nm.cz
eshop.nm.cz
posta.nm.cz
odtvs.opac.nm.cz
antonindvorak.nm.cz
stt.opac.nm.cz
odtvs.opac.nm.cz
zbraslav.opac.nm.cz
odtvs.opac.nm.cz
bedrichsmetana.nm.cz
rad.nm.cz
*.opac.nm.cz
navigation-app.nm.cz
mad.opac.nm.cz
no.opac.nm.cz
t.mailkit.com
no.opac.nm.cz
admin.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
ms.nm.cz
kanesh.nm.cz
amusing.nm.cz
mad.opac.nm.cz
npm.opac.nm.cz
antonindvorak.nm.cz
onedrive.nm.cz
p.pozvanky.nm.cz
intro.nm.cz
helpdesk.nm.cz
rezervace.pamatnikpalackeho.nm.cz
t.mailkit.com
prazskestopyantoninadvoraka.nm.cz
amusing.nm.cz
intro.nm.cz
t.mailkit.com
oncd.opac.nm.cz
ms.nm.cz
rd-gw.nm.cz
onedrive.nm.cz
mbs.opac.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
muzeum3000.nm.cz
oncd.opac.nm.cz
helpdesk.nm.cz
Certificate
The complete raw certificate details for odtvs.opac.nm.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgISBHmKqOwEq3TmmTlYbKRaBVbHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA5MjgyMTI2MzhaFw0yMTEyMjcyMTI2MzdaMBsxGTAXBgNVBAMT EG9kdHZzLm9wYWMubm0uY3owggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC AQDPOM0awZClWnBAwSHd7FxLslQexY/39rTHk08wiEHRky7iPeLMKsAkVu/Yu4bA PpJ8pwf3zbQeliLcAHt/bdI5PeGDmnml/zN1jpIUY8TaRxJ1yto9KBfmImE/R//j 89tttXSwVzK3TJ8TKuyjxqI8py75dIjWqX3W88AuijtLxVi8TfRubaKXkMzHhMhh hWxChpPsmsMzvozmmLzsCTSg7QF6F8osFx2/Q1gYnzgoT2DWNbDw/tezh6iNS08+ w2uQ/oJXAADmsbn/84zlE0TCeY45YKKqO5NCxjTGoaHAfBngaCWGq7HyGZU9ZyX8 tQ91TsGKn6osm54z4R/lOlo0M5gUt6ZFVbioKHrHpb13Q/KkFBW2hFTYTJmiyBa7 LESSo6wkVyRq6y4P3AF/vcqQN+c0dcyr/VhHR6SDdJzWyDsEECIfgog9TN9pPgkB aSU90W4vpB9h6Sm4/MsZpwoS5y8u8ZyfIDAGsJxE9A6Go3Qb3uXXNS9thp/KhUxY zLjNluzEcHNgwqYKfc6bv5xby02qGcDBqsVC5BS3TNrGh+W6qzWDn0ezpbsO4yVc 5Pl9K9tSnjNJ0ywMKVu03HTXp4kBH7qDl7Fd6a8IqUKzvqPcyDM8lDTReMIPUn9t jUSP1maaYI+W1yO4g4TafmMq1RNDYrjqpScYaQ31l1p5QwIDAQABo4ICSzCCAkcw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTjrTXfmKobz7ttwiJ9tADXXOW9zTAfBgNV HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0 cDovL3IzLmkubGVuY3Iub3JnLzAbBgNVHREEFDASghBvZHR2cy5vcGFjLm5tLmN6 MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtOL1hNosIAAAF8LoRb wQAABAMARzBFAiEA351mMP9UpPEBuDjW1ZDFNz8ZXADQNGA1kp+qDocEv5ICIB2p NqvwWVKhCK6uFrcJIgz27F9gJolYVydFfI7w+bSLAHYA9lyUL9F3MCIUVBgIMJRW juNNExkzv98MLyALzE7xZOMAAAF8LoRbugAABAMARzBFAiEA4xpNW+eFGh5DsdXz q/tinoeJnUa2lrKJiPCIooF+npYCIGD+DZR6QzhAx3v7r7CcZi+rTDesl7LU1QPJ ZO2yFjULMA0GCSqGSIb3DQEBCwUAA4IBAQACJ0PVfCvgpc6ZVuQbVFMlsq0hQOW5 3weCg1DwgTuwSTWH+KU0By6k71L5TW01vlPdfayZjU3zPfrthlaZihYdPFV2BGwM cLJjMB9Dr4W5h/TplR4NPYtqtKR4vsMMb2NE755qyA2Yi8+/W8Z181yL2xkOYZog vSqYESfas0W6C8yidC3Xxwxr0/SSSKpnRKvrCEJzTjfbtjSy5JFmqJ51OQkPKAyv 6RocOXkx9J2TfztDS3lHDvD5hseOBI2gs5kyes8B1ae6+mCaw0PPQSH8fSDSD2oS h+EAbcJnsIeQSIxy64VoAhoHGJyAHC1setsdqOmCFE+fHlcQkPkz5ozQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzzjNGsGQpVpwQMEh3exc S7JUHsWP9/a0x5NPMIhB0ZMu4j3izCrAJFbv2LuGwD6SfKcH9820HpYi3AB7f23S OT3hg5p5pf8zdY6SFGPE2kcSdcraPSgX5iJhP0f/4/PbbbV0sFcyt0yfEyrso8ai PKcu+XSI1ql91vPALoo7S8VYvE30bm2il5DMx4TIYYVsQoaT7JrDM76M5pi87Ak0 oO0BehfKLBcdv0NYGJ84KE9g1jWw8P7Xs4eojUtPPsNrkP6CVwAA5rG5//OM5RNE wnmOOWCiqjuTQsY0xqGhwHwZ4Gglhqux8hmVPWcl/LUPdU7Bip+qLJueM+Ef5Tpa NDOYFLemRVW4qCh6x6W9d0PypBQVtoRU2EyZosgWuyxEkqOsJFckausuD9wBf73K kDfnNHXMq/1YR0ekg3Sc1sg7BBAiH4KIPUzfaT4JAWklPdFuL6QfYekpuPzLGacK EucvLvGcnyAwBrCcRPQOhqN0G97l1zUvbYafyoVMWMy4zZbsxHBzYMKmCn3Om7+c W8tNqhnAwarFQuQUt0zaxofluqs1g59Hs6W7DuMlXOT5fSvbUp4zSdMsDClbtNx0 16eJAR+6g5exXemvCKlCs76j3MgzPJQ00XjCD1J/bY1Ej9ZmmmCPltcjuIOE2n5j KtUTQ2K46qUnGGkN9ZdaeUMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389807620680783735279962821788145495135943 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-28 21:26:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-27 21:26:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odtvs.opac.nm.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845391512064013893852389498444248425665541983310385981658637352987443472093029586348846457984216385709329509579203932316192951055691492574865089092185189467931027547882415493430366426066219615282888518851252757717149436339447230901238119737316985991384269543719551379910040239798331088599032970489118262516975584934709685947151055450700645393925800743419916706287200597219776903556202869229986614195469067611116360137334578027009607478076610348667806589168565253073261490164050392575349583051186398998355597661548860028098956098695031438221870758067917634502683108844067348507289246614468134777078345267139071430482311825875920863872764985196318425485903592613350901112872243046229758815695315133686216791846356001561099064113063988303371823948404328581159799683742544508583695044775225575622344018516984665942331408321686836244586886437278065163343823832073331688749533141669548755948356170718047644123672658249859954599245421647679325834582758125559198291929202195504822806304048935813519717220766626514644717267129115664891981826400277105351003973846078148385888453457612588556247419435574959260062329295615452613796104344375641900742089373957529784047935649925037313458064112439248461514989832044485295024288310654405495599298883 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3ad35df98aa1bcfbb6dc2227db400d75ce5bdcd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odtvs.opac.nm.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017c2e845bc10000040300473045022100df9d6630ff54a4f101b838d6d590c5373f195c00d0346035929faa0e8704bf9202201da936abf05952a108aeae16b709220cf6ec5f602689585727457c8ef0f9b48b007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c2e845bba0000040300473045022100e31a4d5be7851a1e43b1d5f3abfb629e87899d46b696b28988f088a2817e9e96022060fe0d947a433840c77bfbafb09c662fab4c37ac97b2d4d503c964edb216350b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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