activesync.mpo.cz

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:b5:7e:c5:7d:71:3b:08:0f:f4:9e:6e:37:e7:66:85 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=activesync.mpo.cz

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:b5:7e:c5:7d:71:3b:08:0f:f4:9e:6e:37:e7:66:85
Serial Number (int): 14234656919624551563980760307403810437
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2d:33:86:ac:46:5c:ff:ec:2a:d0:ae:7f:e4:a7:a6:13:f5:2c:e5:43
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): e1:31:3e:ef:f3:91:02:b3:80:cd:13:49:8f:f1:d4:3d:2c:17:f0:70
Fingerprint (sha256): 27:5e:45:d1:43:0b:35:c2:1f:3a:33:3d:76:64:76:50:86:5e:6e:56:29:bc:b9:0f:f5:52:64:96:d3:c7:8d:7e

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate activesync.mpo.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activesync.mpo.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activesync.mpo.cz
www.activesync.mpo.cz

Other certificates including the domain name mpo.cz

(limited to 100 certificates)
druhotnasurovina.mpo.cz
druhotnasurovina.mpo.cz
adfs.mpo.cz
www.mpo.cz
miss.mpo.cz
trio.mpo.cz
cafe.mpo.cz
monitoring.mpo.cz
mis.mpo.cz
druhotnasurovina.mpo.cz
druhotnasurovina.cz
cafe.mpo.cz
registr.mpo.cz
druhotnasurovina.mpo.cz
monitoring.mpo.cz
monitoring.mpo.cz
foreigners.mpo.cz
aimapa.mpo.cz
vykazy.mpo.cz
activesync.mpo.cz
monitoring.mpo.cz
trio.mpo.cz
cafe.mpo.cz
aisportal.mpo.cz
adfs.mpo.cz
monitoring.mpo.cz
aisportal.mpo.cz
monitoring.mpo.cz
vykazy.mpo.cz
foreigners.mpo.cz
druhotnasurovina.mpo.cz
adfs.mpo.cz
foreigners.mpo.cz
druhotnasurovina.cz
ais.mpo.cz
blockchain.mpo.cz
www.mpo.gov.cz
druhotnasurovina.mpo.cz
trio.mpo.cz
aimapa.mpo.cz
druhotnasurovina.cz
mapi.mpo.cz
www.mpo.cz
monitoring.mpo.cz
registr.mpo.cz
mpo.cz
www.mpo.cz
foreigners.mpo.cz
cafe.mpo.cz
trios.mpo.cz
adfs.mpo.cz
foreigners.mpo.cz
foreigners.mpo.cz
cafe.mpo.cz
druhotnasurovina.mpo.cz
cafe.mpo.cz
foreigners.mpo.cz
miss.mpo.cz
autodiscover.mpo.cz
www.mpo.cz
ews.mpo.cz
druhotnasurovina.mpo.cz
aimapa.mpo.cz
trio.mpo.cz
monitoring.mpo.cz
trio.mpo.cz
monitoring.mpo.cz
druhotnasurovina.cz
elisportal.mpo.cz
druhotnasurovina.cz
vykazy.mpo.cz
monitoring.mpo.cz
foreigners.mpo.cz
miss.mpo.cz
spintra.mpo.cz
foreigners.mpo.cz
www.mpo.cz
druhotnasurovina.cz
mis.mpo.cz
druhotnasurovina.cz
druhotnasurovina.cz
homeoffice.mpo.cz
tip.mpo.cz
miss.mpo.cz
druhotnasurovina.cz
monitoring.mpo.cz
foreigners.mpo.cz
monitoring.mpo.cz
vykazy.mpo.cz
owa.mpo.cz
cafe.mpo.cz
cafe.mpo.cz
vykazy.mpo.cz
trio.mpo.cz
blockchain.mpo.cz
www.mpo.cz
druhotnasurovina.cz
monitoring.mpo.cz
forms.mpo.cz

Certificate

The complete raw certificate details for activesync.mpo.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14234656919624551563980760307403810437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activesync.mpo.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811347133548322830366958277202607358239548578495059533617615943157885165337049425288233634920376587289286368586991110492618554893460946697792810012980187696249384240957807970723571494702935949923394991407279552281416427002490035648488725077422453074237907480459884754488963075935459733657325816294791340054670689212678846397321807625305220938956051315335383885114819088969712364336338658692791538001193101317969000425890082631719553512252101096439929763678421478034229871374021565674909563093176887674816245055867984556483307925171770969618871922745264116872290218166585023406087963482794316744748464059444472472857722201655372743181382558925111042379344657148951795315035933631320403292610227270248755518327069469023009725014393409508494690111931063779440920914149735007646021246358328894607453769076881178079120598177367670829779980836623282624852314617823338522091712826765895924138827105378387527302101840747043226343088578902702883961292025719359223271453201386522460056333634389521953837582430785624353192725485781141828628244639613389140135647194411372380833683821114984550454313586278553247112551042098803829162277822203886336795029243997408664062191122148089766542960075894414971295427763448232296245211413673505763284631337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d3386ac465cffec2ad0ae7fe4a7a613f52ce543
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesync.mpo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activesync.mpo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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