premium.rwe.cz
- RWE Interní služby, s.r.o. -
Issued by I.CA - Standard Certification Authority, 09/2009
About this certificate
This digital certificate with serial number 1b:59:fe was issued on by První certifikační autorita, a.s..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
- Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
RWE Interní služby, s.r.o.
Company registration number:
ICA - 744393
Organization: RWE Interní služby, s.r.o.
Organization unit: Prosecká 68
Organization: RWE Interní služby, s.r.o.
Organization unit: Prosecká 68
Locality:
Prague
Country: CZ
Country: CZ
První certifikační autorita, a.s.
Organization:
První certifikační autorita, a.s.
Organization unit: I.CA - Provider of Certification Services
Organization unit: I.CA - Provider of Certification Services
Country:
CZ
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:59:feSerial Number (int): 1792510
Serial Number lenght: 21 bits, 3 octets
SubjectKeyId: 97:b7:ae:43:5f:79:9d:3c:fc:a7:51:ec:19:38:f2:6d:a5:0b:56:4e
AuthorityKeyId: c1:4c:38:94:d5:80:86:48:d9:22:90:2c:d3:ee:19:10:db:67:47:87
Fingerprint (sha1): 2c:2f:0b:de:60:1e:5b:cc:48:ed:24:94:d0:1c:c2:9e:e2:02:70:f1
Fingerprint (sha256): 27:d2:c8:d8:b8:91:ab:77:19:7c:17:b3:95:b8:c8:eb:85:d6:79:9e:af:cf:2e:09:a7:ea:56:d1:7a:99:26:a1
Revocation information
CRL Distribution Point: http://scrldp1.ica.cz/sica09.crlCRL Distribution Point: http://scrldp2.ica.cz/sica09.crl
Check the revocation status for certificate premium.rwe.cz
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for premium.rwe.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Key Agreement
Extended Key Usages
Extensions
5 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name rwe.cz
(limited to 100 certificates)
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
vop.rwe.cz
sip.innogy.com
lyncweb.rwe.com
ets.rwe.cz
access02.rwe.com
gsn.rwe.cz
iave.rwe.cz
lyncweb.rwe.com
premium.rwe.cz
premium.rwe.cz
gsn.rwe.cz
gsnbackup.rwe.cz
svb-cross.rwe.cz
vop.rwe.cz
access02.rwe.com
*.rwe.cz
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
moje.rwe.cz
sip.innogy.com
lyncweb.rwe.com
lyncweb.rwe.com
iave.rwe.cz
onlineservis.rwe.cz
www.rwe.cz
svb-cross.rwe.cz
gsn.rwe.cz
ets-test.rwe.cz
vop.rwe.cz
ets.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
premium.rwe.cz
vop.rwe.cz
ets.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
ets.rwe.cz
iave.rwe.cz
www.rwe.cz
esb.rwe.cz
migrace.rwe.cz
www.rwe.cz
wallboard.rwe.cz
mdm.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
svb-cross.rwe.cz
test-wms.rwe.cz
access02.rwe.com
iave.rwe.cz
lyncweb.rwe.com
sip.innogy.com
wallboard.rwe.cz
ets.rwe.cz
www.rwe.cz
iave.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
gsn.rwe.cz
ets.rwe.cz
email.rwe.cz
www.rwe.cz
gsn.rwe.cz
iave.rwe.cz
wms.rwe.cz
www.rwe.cz
lyncweb.rwe.com
vop.rwe.cz
sip.innogy.com
lyncweb.rwe.com
ets.rwe.cz
access02.rwe.com
gsn.rwe.cz
iave.rwe.cz
lyncweb.rwe.com
premium.rwe.cz
premium.rwe.cz
gsn.rwe.cz
gsnbackup.rwe.cz
svb-cross.rwe.cz
vop.rwe.cz
access02.rwe.com
*.rwe.cz
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
moje.rwe.cz
sip.innogy.com
lyncweb.rwe.com
lyncweb.rwe.com
iave.rwe.cz
onlineservis.rwe.cz
www.rwe.cz
svb-cross.rwe.cz
gsn.rwe.cz
ets-test.rwe.cz
vop.rwe.cz
ets.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
premium.rwe.cz
vop.rwe.cz
ets.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
ets.rwe.cz
iave.rwe.cz
www.rwe.cz
esb.rwe.cz
migrace.rwe.cz
www.rwe.cz
wallboard.rwe.cz
mdm.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
svb-cross.rwe.cz
test-wms.rwe.cz
access02.rwe.com
iave.rwe.cz
lyncweb.rwe.com
sip.innogy.com
wallboard.rwe.cz
ets.rwe.cz
www.rwe.cz
iave.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
gsn.rwe.cz
ets.rwe.cz
email.rwe.cz
www.rwe.cz
gsn.rwe.cz
iave.rwe.cz
wms.rwe.cz
Certificate
The complete raw certificate details for premium.rwe.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgTCCA2mgAwIBAgIDG1n+MA0GCSqGSIb3DQEBCwUAMIGrMQswCQYDVQQGEwJD WjE5MDcGA1UEAwwwSS5DQSAtIFN0YW5kYXJkIENlcnRpZmljYXRpb24gQXV0aG9y aXR5LCAwOS8yMDA5MS0wKwYDVQQKDCRQcnZuw60gY2VydGlmaWthxI1uw60gYXV0 b3JpdGEsIGEucy4xMjAwBgNVBAsMKUkuQ0EgLSBQcm92aWRlciBvZiBDZXJ0aWZp Y2F0aW9uIFNlcnZpY2VzMB4XDTEyMTAxODA3MjUyOVoXDTEzMTAxODA3MjUyOVow gYwxCzAJBgNVBAYTAkNaMRcwFQYDVQQDDA5wcmVtaXVtLnJ3ZS5jejEPMA0GA1UE BwwGUHJhZ3VlMSUwIwYDVQQKDBxSV0UgSW50ZXJuw60gc2x1xb5ieSwgcy5yLm8u MRUwEwYDVQQLDAxQcm9zZWNrw6EgNjgxFTATBgNVBAUTDElDQSAtIDc0NDM5MzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALm5GVh9ju5+T6pOitQxTIv6 uc+tNqHgVibMCMhgTn4nYAC21lDbvo1q1oZCNBWrLpNCT1SR2xTxGbD0I9NIZLZY euYVvCwrrljf3l65/LwisskQqkw37JloXO13o10yAtjBRqQew9/fhSmJogz+vOlb vhR5WY0B9AtHz3gKG01A3EZV7Auuq5+PAutdbp24I9xuzGTRYg+LG6t4el+LP4Wn BScHzo4CtHVLVrCmg2EsPfEtYgHoANdgGKNLvF4cDAd8TYpVdihtUczQA/fQmiY3 z/4kgczEEx5mSzemshxrzENLl8g+D3Nra7/CtSvTxlKLz93+n9atE7u2MoPYGPEC AwEAAaOByjCBxzAOBgNVHQ8BAf8EBAMCA/gwHwYDVR0jBBgwFoAUwUw4lNWAhkjZ IpAs0+4ZENtnR4cwHQYDVR0OBBYEFJe3rkNfeZ08/KdR7Bk48m2lC1ZOMBoGA1Ud IAQTMBEwDwYNKwYBBAGBuEgBATwDATBZBgNVHR8EUjBQMCagJKAihiBodHRwOi8v c2NybGRwMS5pY2EuY3ovc2ljYTA5LmNybDAmoCSgIoYgaHR0cDovL3NjcmxkcDIu aWNhLmN6L3NpY2EwOS5jcmwwDQYJKoZIhvcNAQELBQADggEBAEfpOLzA+eWdtVUA dimNuZTRqZqAdJTS7BiS5Du9zAisRdSlt/rsTBTfOftHqvyf9tKd9Ii3W45usKAu WVJQ4kEzIvLUQG27ffqDoi4ZSi41szLYmhjMMYI4oR1F7lOcpDKijS38OEMND9+Z P0gb1nJEaXWPC4Ai0Z8u0rk1C5ITd6OS4Tsovr9l6wWMLmnLJ+/BVkzqOUxV0oP7 u3MAQd45PLh2Lyh0YIFTQuz/QG/kur8qh0lQv33UpdVmK1WpY5D7vIlkxhvh+lwo FjN7/hMtG8hGxCXRaM+OpobKHoBvYds5Asqa0RRe83WwRjgnLOwMxJXH1k1JvzSq 1447Clw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubkZWH2O7n5Pqk6K1DFM i/q5z602oeBWJswIyGBOfidgALbWUNu+jWrWhkI0Fasuk0JPVJHbFPEZsPQj00hk tlh65hW8LCuuWN/eXrn8vCKyyRCqTDfsmWhc7XejXTIC2MFGpB7D39+FKYmiDP68 6Vu+FHlZjQH0C0fPeAobTUDcRlXsC66rn48C611unbgj3G7MZNFiD4sbq3h6X4s/ hacFJwfOjgK0dUtWsKaDYSw98S1iAegA12AYo0u8XhwMB3xNilV2KG1RzNAD99Ca JjfP/iSBzMQTHmZLN6ayHGvMQ0uXyD4Pc2trv8K1K9PGUovP3f6f1q0Tu7Yyg9gY 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1792510 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Standard Certification Authority, 09/2009' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'První certifikační autorita, a.s.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Provider of Certification Services' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-18 07:25:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-18 07:25:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'premium.rwe.cz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prague' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RWE Interní služby, s.r.o.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prosecká 68' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICA - 744393' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23445362140722339739429293260715264751573991582878000380141732299110893754704164237821673612463141166248900796978028902395451078021694452248557853529838346585421991776130410529340645614148617384708848836489465291178208171928966572175508164706447805302415990409703191227205542397622095232255360448794162445716730142195696675629313098546560209774913531610160444368999973913702299570508918743553310855119999374796461932247065260843527390244758617722241510358210636451226918401733380696903156904072759321255608087458998329443600731772179851838536738898131384110678769463820910250178020337315349268992662554775554352486641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c14c3894d5808648d922902cd3ee1910db674787 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97b7ae435f799d3cfca751ec1938f26da50b564e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23624.1.1.60.3.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp1.ica.cz/sica09.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp2.ica.cz/sica09.crl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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