fw.compet.cz

- Česká republika, Úřad pro ochranu hospodářské soutěže -

Issued by PostSignum Public CA 5

About this certificate

This digital certificate with serial number a7:f4:38 was issued on by Česká pošta, s.p..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Česká republika, Úřad pro ochranu hospodářské soutěže

Company registration number: D6638
Organization: Česká republika, Úřad pro ochranu hospodářské soutěže
Locality: Brno
Country: CZ

Česká pošta, s.p.

Organization: Česká pošta, s.p.
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): a7:f4:38
Serial Number (int): 11007032
Serial Number lenght: 24 bits, 3 octets

SubjectKeyId: 04:6d:d4:a6:3e:cd:bd:0d:b3:5c:c5:81:bf:7d:84:4b:e8:fa:cf:71
AuthorityKeyId: e3:ce:31:51:f3:4c:91:f5:7d:b7:05:89:b1:78:d0:a3:0a:c6:43:99

Fingerprint (sha1): 48:13:72:98:4f:7b:48:d4:b4:0a:22:e0:14:61:f8:41:bc:c6:9b:34
Fingerprint (sha256): 3b:e8:4e:9a:88:f9:5b:c6:ee:20:9f:b8:8d:78:b4:ee:68:81:0e:61:b5:6f:72:20:f5:62:04:8f:fd:bb:11:a7

Issuing Certificate URL: http://crt.postsignum.cz/crt/pspublicca5.crt

Revocation information

OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA5/
CRL Distribution Point: http://crl.postsignum.cz/crl/pspublicca5.crl
CRL Distribution Point: http://crl2.postsignum.cz/crl/pspublicca5.crl
CRL Distribution Point: http://crl.postsignum.eu/crl/pspublicca5.crl

Check the revocation status for certificate fw.compet.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fw.compet.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fw.compet.cz

Other certificates including the domain name compet.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for fw.compet.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DY5lSQmIYn5BDSOGmyP
Qi2ryQV4vLES+BlCcnue9xFz0s+2pIuCOfkU7Jjo08mSdVK6EcvJ6zQqHKYth0wm
eDXM6AzDc3qI3ZMfbL8BOT90/BB38YXOyWkL5uIWe2mCkb73KAtCNn60wXq8eRSy
lyCmJh1PefYtrdqSCr5BMD3aysFLUySv9PRgtE+3LGVS7+LgwI4VShyr0jTpr8iE
fp+OVRekxhntkc1KOA/Fj+GwVw/s+ssKEZm4C6c+abKB+rxTQ4AfaztNPrZ9AVGX
vOmlf1JiFrFbmcQFwKi3DXbGN5HZZCWZ7Ma5juf9Uyu7AwrFdMBfPzum3rbgQcK1
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11007032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCZ-47114983'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 12:51:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 12:51:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCZ-65349423'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká republika, Úřad pro ochranu hospodářské soutěže'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fw.compet.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D6638'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27294213183207968769891477243861465946253921205950674425596674496333316634796194179480707347191787700249028972130284004171914801256844375700211136441889025283199529645834450791926536975697258372652822579622734519471856695088944721933725571448029181630254725424354447459042282180509568864943930816618972773250496927403764725311300804054971533870567534261777461461366231505444072551891710067737806557129864798182568370471390560823679168838981296883400470009833475532491612944058095024064133208210420606467371077393364343784323320667250146890083709440031193586599343446665468221589577893486228216675902713699871676871961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw.compet.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.500
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.postsignum.cz/crt/pspublicca5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA5/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e3ce3151f34c91f57db70589b178d0a30ac64399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.postsignum.cz/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.postsignum.cz/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.postsignum.eu/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							046dd4a63ecdbd0db35cc581bf7d844be8facf71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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