premium.rwe.cz

- RWE Interní služby, s.r.o. -

Issued by I.CA - Standard Certification Authority, 09/2009

About this certificate

This digital certificate with serial number 1b:59:fe was issued on by První certifikační autorita, a.s..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

RWE Interní služby, s.r.o.

Company registration number: ICA - 744393
Organization: RWE Interní služby, s.r.o.
Organization unit: Prosecká 68
Locality: Prague
Country: CZ

První certifikační autorita, a.s.

Organization: První certifikační autorita, a.s.
Organization unit: I.CA - Provider of Certification Services
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:59:fe
Serial Number (int): 1792510
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 97:b7:ae:43:5f:79:9d:3c:fc:a7:51:ec:19:38:f2:6d:a5:0b:56:4e
AuthorityKeyId: c1:4c:38:94:d5:80:86:48:d9:22:90:2c:d3:ee:19:10:db:67:47:87

Fingerprint (sha1): 2c:2f:0b:de:60:1e:5b:cc:48:ed:24:94:d0:1c:c2:9e:e2:02:70:f1
Fingerprint (sha256): 27:d2:c8:d8:b8:91:ab:77:19:7c:17:b3:95:b8:c8:eb:85:d6:79:9e:af:cf:2e:09:a7:ea:56:d1:7a:99:26:a1


Revocation information

CRL Distribution Point: http://scrldp1.ica.cz/sica09.crl
CRL Distribution Point: http://scrldp2.ica.cz/sica09.crl

Check the revocation status for certificate premium.rwe.cz

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premium.rwe.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name rwe.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for premium.rwe.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubkZWH2O7n5Pqk6K1DFM
i/q5z602oeBWJswIyGBOfidgALbWUNu+jWrWhkI0Fasuk0JPVJHbFPEZsPQj00hk
tlh65hW8LCuuWN/eXrn8vCKyyRCqTDfsmWhc7XejXTIC2MFGpB7D39+FKYmiDP68
6Vu+FHlZjQH0C0fPeAobTUDcRlXsC66rn48C611unbgj3G7MZNFiD4sbq3h6X4s/
hacFJwfOjgK0dUtWsKaDYSw98S1iAegA12AYo0u8XhwMB3xNilV2KG1RzNAD99Ca
JjfP/iSBzMQTHmZLN6ayHGvMQ0uXyD4Pc2trv8K1K9PGUovP3f6f1q0Tu7Yyg9gY
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1792510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Standard Certification Authority, 09/2009'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'První certifikační autorita, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Provider of Certification Services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-18 07:25:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-18 07:25:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'premium.rwe.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prague'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RWE Interní služby, s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prosecká 68'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICA - 744393'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23445362140722339739429293260715264751573991582878000380141732299110893754704164237821673612463141166248900796978028902395451078021694452248557853529838346585421991776130410529340645614148617384708848836489465291178208171928966572175508164706447805302415990409703191227205542397622095232255360448794162445716730142195696675629313098546560209774913531610160444368999973913702299570508918743553310855119999374796461932247065260843527390244758617722241510358210636451226918401733380696903156904072759321255608087458998329443600731772179851838536738898131384110678769463820910250178020337315349268992662554775554352486641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c14c3894d5808648d922902cd3ee1910db674787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97b7ae435f799d3cfca751ec1938f26da50b564e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23624.1.1.60.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp1.ica.cz/sica09.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp2.ica.cz/sica09.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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