szu.cz

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:90:90:73:74:85:2b:f2:94:40:2b:d9:7c:bb:4f:88 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=szu.cz

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:90:90:73:74:85:2b:f2:94:40:2b:d9:7c:bb:4f:88
Serial Number (int): 3409076553481717715094066667697426312
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3a:21:b4:11:cd:c7:71:41:9a:9b:f0:ea:11:b2:fc:b0:93:c4:40:a0
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 96:bc:1f:aa:0e:19:d1:28:df:28:d1:d3:f6:94:c6:60:81:30:c5:c1
Fingerprint (sha256): 3c:46:60:f4:5c:bc:21:1a:01:d6:30:70:44:ea:01:b8:37:56:c7:62:82:7b:e4:f9:47:26:45:fb:ee:52:d7:30

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate szu.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for szu.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

szu.cz
www.szu.cz

Other certificates including the domain name szu.cz

(limited to 100 certificates)
autorizace.szu.cz
mail.szu.cz
cejph.szu.cz
cejph.szu.cz
katalog.szu.cz
mail.szu.cz
katalogpers.szu.cz
autorizace.szu.cz
katalog.szu.cz
autorizace.szu.cz
earss.szu.cz
katalog.szu.cz
apps.szu.cz
cejph.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
hygiena.szu.cz
mail.szu.cz
indi.szu.cz
cejph.szu.cz
mail.szu.cz
szu.cz
autorizace.szu.cz
epoz.szu.cz
mail.szu.cz
cejph.szu.cz
hygiena.szu.cz
katalog.szu.cz
mail.szu.cz
autorizace.szu.cz
hygiena.szu.cz
autorizace.szu.cz
szu.cz
katalogpers.szu.cz
apps.szu.cz
*.szu.cz
katalog.szu.cz
earss.szu.cz
cejph.szu.cz
autorizace.szu.cz
hygiena.szu.cz
earss.szu.cz
epoz.szu.cz
www.szu.cz
mail.szu.cz
apps.szu.cz
autorizace.szu.cz
mail.szu.cz
archiv.szu.cz
autorizace.szu.cz
autorizace.szu.cz
hygiena.szu.cz
cejph.szu.cz
szu.cz
autorizace.szu.cz
earss.szu.cz
apps.szu.cz
apps.szu.cz
earss.szu.cz
mail.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
epoz.szu.cz
autorizace.szu.cz
hygiena.szu.cz
katalog.szu.cz
hygiena.szu.cz
hygiena.szu.cz
katalog.szu.cz
cejph.szu.cz
katalogpers.szu.cz
hygiena.szu.cz
katalogpers.szu.cz
mail.szu.cz
cejph.szu.cz
mail.szu.cz
autorizace.szu.cz
cejph.szu.cz
www.szu.cz
katalogpers.szu.cz
mail.szu.cz

Certificate

The complete raw certificate details for szu.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsRVfUY/WWTlc+qJeI0k
aNFE4HIk4Lmni2w67vNMqDoCK6nZ8JS7KaKVtMoUbFL7bQ4yqkJ6Rpn0mM371aNH
MlqokjmgvlYP2+s7w8TGWy3tFtFmBBm1pHnJoSc5wgSRzZHPotD/dT6+XY66AoCD
L1H9sgshfcwFiw6R9MyhDW5EJ2Wd7+/DjUK4vnTOQl6CuxoLzt/vEnZr3LFTuw5K
wK8WS3wTbWY0RRvtgDjXdJSbzQ5Ag/UMknjUKHCBvoNBxaJZjVpVsJTyP7xUE2WR
mH+ssmE6AmDttKbXbQPlnJLb94NKMyd5T+pGDWKS075QUvgNfWVLWUGcaPnl5Aco
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3409076553481717715094066667697426312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'szu.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25092000258844337125997029345527455492079961251101828857628040657498677841226109919201155520019387528830226753362257251796973551277954865841360317973185676936716494389693971901684511379666662666000919771241293530320462915693173067627464686958867531850828959813680419812838806032317160757689034379177501916131243607288764431402271510869241160785536743249697873098339114127305505947015600290662932434870974385929270545484132852939801881341248029449611359575788170418147616448496230336808192417980024417270110874728609441994057453403337711516512972603027289419384598096532704790143613469328434891367824131372279010895989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a21b411cdc771419a9bf0ea11b2fcb093c440a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szu.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szu.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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