*.cheb.cz

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:1d:7d:5f:5a:86:62:f6:41:1f:18:cc:4a:fb:a6:27 was issued on by Trust Provider B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cheb.cz

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1d:7d:5f:5a:86:62:f6:41:1f:18:cc:4a:fb:a6:27
Serial Number (int): 1482347460574435466302532701789070887
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 4e:dc:5c:9d:f3:77:ad:e4:39:88:78:87:f9:ae:fe:e6:3a:e5:1b:61
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): 24:b9:c7:fd:44:b0:94:19:3b:93:08:f8:09:8b:c5:1b:ac:ef:0a:12
Fingerprint (sha256): 33:4f:b5:ce:11:bd:73:22:b7:36:8b:b7:37:ea:8e:00:8d:d9:f0:a4:bd:69:7b:98:8d:fa:c4:7f:9d:62:a8:52

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate *.cheb.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cheb.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cheb.cz
cheb.cz

Other certificates including the domain name cheb.cz

(limited to 100 certificates)
ssl.cheb.cz
cheb.cz
zakazky.cheb.cz
*.cheb.cz
cheb.cz
zapisyzs.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
anonymizace.cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
tic.cheb.cz
cheb.cz

Certificate

The complete raw certificate details for *.cheb.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+BNAnV806w/7inyj6s2
9C1BEz155BxbIaKLjXHnHHA8Q/mSqjDQCCTc2fcGO0hM0bsImN3bbK254NRFPjq/
jC+OKxQE3cN9tNySenbIw/JDnReg7ML6eGfc9mfPWHHoIZqk41WSA/NS5d8WktWf
eGdk7YugzEnQNlh2sNtbwzdakyFJH6AunIOB05KrNO68dxP9W4G0WCr1JCFlYbR7
nBRxEIWg99QVEeXBngXFumqvN+Pp/PjZW1j1Xh4PRD/U1Ulja2UWW/aWbHrDlUPW
vSYhOwGQjgMeOnhJrWD2vpuVD9+Vvb8BMekxPuFMtFYu3lWq3cJ/RPw9TrMIu0Lu
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1482347460574435466302532701789070887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cheb.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23717169884762620636609807136527765616141289923792936315912951457941398742137302947064436006520453915085016314280603646779822293340411517684241567500038512689770784741407575625441935272945599671300741296711968146789916196836705395652279815501324253630947946238405299713563419614880373236653110698127229939997706233887022361048505088126154584255230702003069566214031016080590310851427219048622625364152199288093237445510938829240798903544239110746830565167378230377391375631811684355877704912587005419991985196584262712327529165902719252012036976103687207878822362912182703947400951415536307814732253295633351802285589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4edc5c9df377ade439887887f9aefee63ae51b61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheb.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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