*.ezproxy.techlib.cz

- Národní technická knihovna -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 92:f9:66:90:c5:e1:e8:c6:49:75:1f:fd:04:05:fd:50 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Národní technická knihovna

Organization: Národní technická knihovna
State / Province: Praha, Hlavní město
Country: CZ

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 92:f9:66:90:c5:e1:e8:c6:49:75:1f:fd:04:05:fd:50
Serial Number (int): 195362249578249518538898575040736263504
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cf:95:94:a3:04:1a:71:16:d1:30:39:58:b8:f4:88:7a:02:f8:d3:e7
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 9d:b2:bc:eb:30:6b:54:8b:81:d1:5c:be:2c:4a:bd:c3:04:2e:ef:ad
Fingerprint (sha256): 2c:dc:28:ce:39:eb:ff:50:62:05:0d:ea:49:f3:ca:3d:92:8e:12:4b:49:01:7f:62:2b:2f:16:3f:2d:ed:33:43

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.ezproxy.techlib.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ezproxy.techlib.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ezproxy.techlib.cz
ezproxy.techlib.cz

Other certificates including the domain name techlib.cz

(limited to 100 certificates)
elag2011.techlib.cz
vykukator.techlib.cz
icolc.techlib.cz
sfx.techlib.cz
matrix.techlib.cz
old.techlib.cz
elag2011.techlib.cz
caslin2013.techlib.cz
techlib.cz
space.techlib.cz
bigclean.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
blog.techlib.cz
bigclean.techlib.cz
*.ezproxy.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
old.techlib.cz
eod2013.techlib.cz
*.ezproxy.techlib.cz
caslin2013.techlib.cz
repozitar.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
ezproxy1.ntkcz.cz
summon-custom.techlib.cz
eod2013.techlib.cz
vykukator.techlib.cz
summon-custom.techlib.cz
indico.techlib.cz
blog.techlib.cz
liber-lag2012.techlib.cz
stanik.techlib.cz
bigclean.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
old.techlib.cz
space.techlib.cz
bigclean.techlib.cz
stanik.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
elag2011.techlib.cz
doc.techlib.cz
matrix.techlib.cz
mail.ntkcz.cz
techlib.cz
bigclean.techlib.cz
vykukator.techlib.cz
liber-lag2012.techlib.cz
liber-lag2012.techlib.cz
psh.techlib.cz
eod2013.techlib.cz
stanik.techlib.cz
psh.techlib.cz
elag2011.techlib.cz
kramerius.techlib.cz
ifis.techlib.cz
matrix.techlib.cz
safeq.ntkcz.cz
techlib.cz
liber-lag2012.techlib.cz
vykukator.techlib.cz
*.ezproxy.techlib.cz
old.techlib.cz
rs.techlib.cz
elag2011.techlib.cz
eod2013.techlib.cz
blog.techlib.cz
blog.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
nrgl.techlib.cz
psh.techlib.cz
old.techlib.cz
nejtek.techlib.cz
www.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
vufind.techlib.cz
www.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
techlib.cz
aleph.techlib.cz
techlib.cz

Certificate

The complete raw certificate details for *.ezproxy.techlib.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHgTCCBWmgAwIBAgIRAJL5ZpDF4ejGSXUf/QQF/VAwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTI0MDExNjAwMDAwMFoXDTI1MDExNTIz
NTk1OVowdDELMAkGA1UEBhMCQ1oxHjAcBgNVBAgMFVByYWhhLCBIbGF2bsOtIG3E
m3N0bzEmMCQGA1UECgwdTsOhcm9kbsOtIHRlY2huaWNrw6Ega25paG92bmExHTAb
BgNVBAMMFCouZXpwcm94eS50ZWNobGliLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA40o2ZMgE5mFh4geSEYHPkx/YRXbLUSYQClKSIn8xHgMfCYR4
N97e7EPLATMqGTMdMeMYlRu7a9sHm3H2palPgwAjXZ80W9xOOH3agjETMvQch5ky
lqQPv3Jk1uKg7/NChh9CuTagdMuFDVbikn5g6GbNDPmKTPnT/5oUX+msHZA7MUOJ
Fz0cNVBOO1ToBGSogNe2PrkRcah2m7ehQfZEQ7+horqYHaNjHiuFPSWv4A49uKIX
OCuH7CIRYFIWfe0NhKDf1/08w8vj4m0vU6jg7sFcbocl1SrU3FaBTDyxnNEY3csm
1XytDn/fcBaYVZ2hQNlOJCIie0U0LdFtaTrnTwIDAQABo4IDPDCCAzgwHwYDVR0j
BBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYEFM+VlKMEGnEW0TA5
WLj0iHoC+NPnMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJP
MCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAEC
AjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29t
L0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcwAoYu
aHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNydDAp
BggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20wMwYDVR0R
BCwwKoIUKi5lenByb3h5LnRlY2hsaWIuY3qCEmV6cHJveHkudGVjaGxpYi5jejCC
AX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYAzxFW7tUufK/zh1vZaS6b6RpxZ0qw
F+ysAdJbd87MOwgAAAGNEYLKgAAABAMARzBFAiEA7lKdaGoMls7mMDY6ZykTumBd
GFNns6g6J1MoNRRtytYCIGgOQn1VzOFCBC1GtJagKYI3Z1pUf4+tyhWXwcue3Z6w
AHYAouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzEuVCkR+cAAAGNEYLKTgAABAMA
RzBFAiEAt+z/qAmNbZXYIyD7UiVVS7yNz0cQpHn8YAyok2HJH3QCIBye8IpUnhND
rrlb60+jHYlK5jpnonellNS8HefOHm8pAHcATnWjJ1yaEMM4W2zU3z9S6x3w4I4b
jWnAsfpksWKaOd8AAAGNEYLKXAAABAMASDBGAiEAnPuiSQNe4iZrPiObYQXZ4vqI
nJHBQaZ9n969pkKInDUCIQC6eRyt3WXWJ7LSxCBHB85CnHpVvIShhIiKkQDuqcFG
7zANBgkqhkiG9w0BAQwFAAOCAgEAn50840u0t03U1sCT0A0Y9lph68E0ZX0wkKuM
bYgLJlWwX27usPy1vxHObtVNNnVBMbkQqqyNQib7xAzvumrHj/mJUHWZtuSUJM9R
LePBALHXmgRMwjVn/bKtmTOXLhplCUHeue5wzmCCpv1O4G9R9OQuR4MyzXMmMEIR
htAenWSTi1uGoBnJHPwR1c/0ds2BHIZxft9pBiBfe4MTdWzPdTG2iRa2DeabIYsb
Iqnk5N4HLUTttidiCfgr049d2D3W0esJECh8K84VruYi7yXzTG18xQujJOKmoxfo
Ucbe5kt/GXyvjv5Y6EfkX84npIN5XzjM6CMlaPGXZhJIG3RDRwxD8kVwE3kU4UNL
GhgShniKtAX8myGZXglz9PPrjQhL7W6F7Nu0NQAGkSBb5zsfUQBZ7mEundHWfUbH
rLWJqj22r61iQBdI1IROorH6hShj04sdvn3YkxkYJG3ZOUuoettToUz24DPyYTKY
L2BQtqkGKyjcB+8KPgAcgcClqG/T5ClBs1fTf8NTc72WYOESumOm+vkPZ/OZXTDv
YFvekvt6pNZLrzaHbDEV4cCsURxtw7uiSNYtJyKblu6NEdc6jUUXvQaL5+/UMSA8
HvEkisPNFXt/4W4AZ19ic2lGY5qzKJ2dQVUeIj7o/jVYaCXla3T68PIr1ZljDLOc
Cj28Vfc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40o2ZMgE5mFh4geSEYHP
kx/YRXbLUSYQClKSIn8xHgMfCYR4N97e7EPLATMqGTMdMeMYlRu7a9sHm3H2palP
gwAjXZ80W9xOOH3agjETMvQch5kylqQPv3Jk1uKg7/NChh9CuTagdMuFDVbikn5g
6GbNDPmKTPnT/5oUX+msHZA7MUOJFz0cNVBOO1ToBGSogNe2PrkRcah2m7ehQfZE
Q7+horqYHaNjHiuFPSWv4A49uKIXOCuH7CIRYFIWfe0NhKDf1/08w8vj4m0vU6jg
7sFcbocl1SrU3FaBTDyxnNEY3csm1XytDn/fcBaYVZ2hQNlOJCIie0U0LdFtaTrn
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 195362249578249518538898575040736263504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha, Hlavní město'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Národní technická knihovna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ezproxy.techlib.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28692690762800505335696009370663400974367427536470227785340144407515396429775251843839460431351282536118774136626694921266728055851526282022801277648757061680913929295701255526959531441630302072366069572078364372598390375608771922546118472831112772224620369719220895614216729031727019531444081029565550473254750102796319303026380392387258417929469922106352556788063517691184278933382724611037183948040493642889372610983716962415234711916558850237158455485358825327254633144826675277183193573065896372581379314753612244169410913321905680086502516475124028174855469538454210189348355956213480301491886160481545545770831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf9594a3041a7116d1303958b8f4887a02f8d3e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezproxy.techlib.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezproxy.techlib.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d1182ca800000040300473045022100ee529d686a0c96cee630363a672913ba605d185367b3a83a27532835146dcad60220680e427d55cce142042d46b496a0298237675a547f8fadca1597c1cb9edd9eb0007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018d1182ca4e0000040300473045022100b7ecffa8098d6d95d82320fb5225554bbc8dcf4710a479fc600ca89361c91f7402201c9ef08a549e1343aeb95beb4fa31d894ae63a67a277a594d4bc1de7ce1e6f290077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d1182ca5c00000403004830460221009cfba249035ee2266b3e239b6105d9e2fa889c91c141a67d9fdebda642889c35022100ba791caddd65d627b2d2c4204707ce429c7a55bc84a184888a9100eea9c146ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009f9d3ce34bb4b74dd4d6c093d00d18f65a61ebc134657d3090ab8c6d880b2655b05f6eeeb0fcb5bf11ce6ed54d36754131b910aaac8d4226fbc40cefba6ac78ff989507599b6e49424cf512de3c100b1d79a044cc23567fdb2ad9933972e1a650941deb9ee70ce6082a6fd4ee06f51f4e42e478332cd732630421186d01e9d64938b5b86a019c91cfc11d5cff476cd811c86717edf6906205f7b8313756ccf7531b68916b60de69b218b1b22a9e4e4de072d44edb6276209f82bd38f5dd83dd6d1eb0910287c2bce15aee622ef25f34c6d7cc50ba324e2a6a317e851c6dee64b7f197caf8efe58e847e45fce27a483795f38cce8232568f1976612481b7443470c43f24570137914e1434b1a181286788ab405fc9b21995e0973f4f3eb8d084bed6e85ecdbb435000691205be73b1f510059ee612e9dd1d67d46c7acb589aa3db6afad62401748d4844ea2b1fa852863d38b1dbe7dd8931918246dd9394ba87adb53a14cf6e033f26132982f6050b6a9062b28dc07ef0a3e001c81c0a5a86fd3e42941b357d37fc35373bd9660e112ba63a6faf90f67f3995d30ef605bde92fb7aa4d64baf36876c3115e1c0ac511c6dc3bba248d62d27229b96ee8d11d73a8d4517bd068be7efd431203c1ef1248ac3cd157b7fe16e00675f62736946639ab3289d9d41551e223ee8fe35586825e56b74faf0f22bd599630cb39c0a3dbc55f7