bonnet.cz
- Jelly IT, spol. s r. o. -
Issued by StartCom Class 3 OV Server CA
About this certificate
This digital certificate with serial number 41:38:86:51:12:a2:b7:37:bf:ea:de:6c:c3:e8:dd:a7 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Jelly IT, spol. s r. o.
Organization:
Jelly IT, spol. s r. o.
State / Province:
Hlavni mesto Praha
Locality: Praha
Country: CZ
Locality: Praha
Country: CZ
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 41:38:86:51:12:a2:b7:37:bf:ea:de:6c:c3:e8:dd:a7Serial Number (int): 86693312616232976446221501248358112679
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 76:59:72:05:2f:eb:21:60:d5:4a:dc:b3:7e:e8:3a:20:4c:c5:af:4b
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51
Fingerprint (sha1): ac:5e:59:68:df:2a:0b:6c:52:fa:73:3b:23:14:ec:e0:8f:49:23:09
Fingerprint (sha256): 2d:3c:22:52:e4:d9:34:e2:16:20:01:e4:65:c5:87:ba:1d:d4:f4:f7:44:77:fd:fb:04:b4:fa:ce:7b:5c:fc:ec
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server3.crl
Check the revocation status for certificate bonnet.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bonnet.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bonnet.cz
*.bonnet.cz
*.bonnet.cz
Other certificates including the domain name bonnet.cz
(limited to 100 certificates)
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
sogo.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
fsus-1.freshservice.com
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
maxx.bonnet.cz
mail.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
fsus-1.freshservice.com
eshop.bonnet.cz
mail.bonnet.cz
fsus-1.freshservice.com
maxx.honzovakancelar.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
fsus-1.freshservice.com
fsus-1.freshservice.com
fsus-1.freshservice.com
www.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
*.bonnet.cz
maxx.honzovakancelar.cz
podpora.bonnet.cz
eshop.bonnet.cz
eshop.bonnet.cz
maxx.honzovakancelar.cz
fsus-1.freshservice.com
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
fsus-1.freshservice.com
fsus-1.freshservice.com
*.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
sogo.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
fsus-1.freshservice.com
podpora.bonnet.cz
*.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
maxx.bonnet.cz
mail.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
fsus-1.freshservice.com
eshop.bonnet.cz
mail.bonnet.cz
fsus-1.freshservice.com
maxx.honzovakancelar.cz
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
fsus-1.freshservice.com
fsus-1.freshservice.com
fsus-1.freshservice.com
www.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
podpora.bonnet.cz
eshop.bonnet.cz
podpora.bonnet.cz
*.bonnet.cz
maxx.honzovakancelar.cz
podpora.bonnet.cz
eshop.bonnet.cz
eshop.bonnet.cz
maxx.honzovakancelar.cz
fsus-1.freshservice.com
eshop.bonnet.cz
podpora.bonnet.cz
fsus-1.freshservice.com
podpora.bonnet.cz
fsus-1.freshservice.com
fsus-1.freshservice.com
Certificate
The complete raw certificate details for bonnet.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIQQTiGURKitze/6t5sw+jdpzANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDMgT1YgU2VydmVyIENBMB4XDTE2MDgxNjExNDYzNFoXDTE5MDgx NjExNDYzNFowcDELMAkGA1UEBhMCQ1oxGzAZBgNVBAgMEkhsYXZuaSBtZXN0byBQ cmFoYTEOMAwGA1UEBwwFUHJhaGExIDAeBgNVBAoMF0plbGx5IElULCBzcG9sLiBz IHIuIG8uMRIwEAYDVQQDDAlib25uZXQuY3owggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbtC5i3HwLQcnoMB8QwrNii08dh47trrpntkKSHfgO5KxKcBDB 6QDJsna3n7K1Yga3Fgn05GCtPun6M3NyO821LvYTswu/eidCMTPmy5xYf9wHhddf FGcP0krl5xCZQsd0GNBREu7k/VVe3/aIlI3zoe4+7gW3VFeDbWUswSMwjxhTSqEO bB4MO94zF2iqxm3YJaPGF7R1zoXLClaFpr3pXQpvX5+YoN8cCr6CcC47wbPU1Pc7 UwU1c+t4QMKnnWP7oGAOHebME42B7rSKUsgR44ScHytZdh0NdC3cHiEdv7odi7Dz pthnOjFRhz4wip5OGNU363lVYeTclajHaUTbAgMBAAGjggLOMIICyjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAkGA1UdEwQC MAAwHQYDVR0OBBYEFHZZcgUv6yFg1Urcs37oOiBMxa9LMB8GA1UdIwQYMBaAFLE/ HJJ7krBaJbM4+5wHpCZQMuNRMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYY aHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vYWlh LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2Euc2VydmVyMy5jcnQwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLXNlcnZlcjMuY3JsMCEG A1UdEQQaMBiCCWJvbm5ldC5jeoILKi5ib25uZXQuY3owIwYDVR0SBBwwGoYYaHR0 cDovL3d3dy5zdGFydHNzbC5jb20vMFEGA1UdIARKMEgwCAYGZ4EMAQICMDwGCysG AQQBgbU3AQIFMC0wKwYIKwYBBQUHAgEWH2h0dHBzOi8vd3d3LnN0YXJ0c3NsLmNv bS9wb2xpY3kwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwCkuQmQtBhYFIe7E6LM Z3AKPDWYBPkb37jjd80OyA3cEAAAAVaTR0GSAAAEAwBIMEYCIQCE2q/EKr+2Gafw dhg1F8zUZaP73YRA1FIy5L49q434cgIhALwFSNItPW5qH7SiVn70riXd7iTSPhxI D1NFX/Rtw3VnAHcAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFW k0dCngAABAMASDBGAiEAi3aC86bNN2Mh6hmNOezQOlEit4hy1yXBGuZh4sDZi7kC IQCH7Wca451yVYPSuXxc04n8/3y6GnaXZ3nNh2Px5S9KNDANBgkqhkiG9w0BAQsF AAOCAQEAS3qTqNJklh4a2ugp9ID+sNp/3Kqw1yi1QwQ7obWN2sG5EXh/tZux8N94 xykmhQbdc0FKOxc6e+gosj7benZ6iog8z4BlW+n/ZjEiOHJdjC8Cernc7NVUYXrt gi6BI3juq3sB/cdvlJ+AztKcZixj7qqytQ85kNs5N8Se9K/G9EVPuSCj97+Z4b9j KaCeQLDMTUytr5dhW5OvLTEdRHNHp4xu6OXzdufFujZjmN6uqOKc+eGSAPnA5u+/ 0GLccIgwYj9/G2lUtbpOcADeCIbd3Vv1Nj2vzyOmkysmWP0jndeykK6D3TlZaLkA u+2PZ/55J3j49dEnOcnmK6u06X0mwQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27QuYtx8C0HJ6DAfEMKz YotPHYeO7a66Z7ZCkh34DuSsSnAQwekAybJ2t5+ytWIGtxYJ9ORgrT7p+jNzcjvN tS72E7MLv3onQjEz5sucWH/cB4XXXxRnD9JK5ecQmULHdBjQURLu5P1VXt/2iJSN 86HuPu4Ft1RXg21lLMEjMI8YU0qhDmweDDveMxdoqsZt2CWjxhe0dc6FywpWhaa9 6V0Kb1+fmKDfHAq+gnAuO8Gz1NT3O1MFNXPreEDCp51j+6BgDh3mzBONge60ilLI EeOEnB8rWXYdDXQt3B4hHb+6HYuw86bYZzoxUYc+MIqeThjVN+t5VWHk3JWox2lE 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 86693312616232976446221501248358112679 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-16 11:46:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 11:46:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hlavni mesto Praha' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jelly IT, spol. s r. o.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bonnet.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27735039446825451889636508958208827622808525084611017982016879802644684300877220602928140048278757517262471367065292702229223025799753134594898623600762409958017176078071245293559384799983483940933160683470789957658196187356486867288514205972681589723167437917243963552679782530728987557441220163339489499916176020956264492422942368002069612269832339340018708041868610567677276103068625631179176770421699214197068376518333141031200625960229155410390707515351952418593784442015955619294951805899056034067780781497201714577518483905193254629729611698703681988307080055570360627070982871912557784969161507152525710148827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 765972052feb2160d54adcb37ee83a204cc5af4b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnet.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonnet.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015693474192000004030048304602210084daafc42abfb619a7f076183517ccd465a3fbdd8440d45232e4be3dab8df872022100bc0548d22d3d6e6a1fb4a2567ef4ae25ddee24d23e1c480f53455ff46dc3756700770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001569347429e00000403004830460221008b7682f3a6cd376321ea198d39ecd03a5122b78872d725c11ae661e2c0d98bb902210087ed671ae39d725583d2b97c5cd389fcff7cba1a76976779cd8763f1e52f4a34 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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