www.glow.cz
Issued by R3
About this certificate
This digital certificate with serial number 04:39:4a:00:14:16:f3:92:14:a9:68:58:52:11:43:e1:e2:f0 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.glow.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:39:4a:00:14:16:f3:92:14:a9:68:58:52:11:43:e1:e2:f0Serial Number (int): 367943601920689155884978655105426623947504
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b0:78:66:41:17:85:e2:5e:00:4b:ee:f2:32:88:6e:29:54:d7:3b:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 91:34:f8:18:51:8f:ef:ce:4f:69:e0:21:cf:cf:67:a3:19:9a:5d:30
Fingerprint (sha256): 3e:ec:79:a6:ae:19:18:57:60:64:2c:ca:ae:65:44:4f:7a:cb:0f:60:5f:00:17:e3:28:83:59:0f:78:71:96:8c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.glow.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.glow.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
glow.cz
www.glow.cz
www.glow.cz
Other certificates including the domain name glow.cz
(limited to 100 certificates)
hamu.prob-amu.glow.cz
*.glow.cz
ranec.glow.cz
majak.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
t.glow.cz
webmail.glow.cz
oko2.glow.cz
www.glow.cz
www.glow.cz
reader.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
famu.prob-amu.glow.cz
doosancms.online.rev-doosan.glow.cz
webmail.glow.cz
reader.glow.cz
www.glow.cz
altmail.glow.cz
2itwiki.glow.cz
git.glow.cz
adastracorp.com
git.glow.cz
mail.glow.cz
altmail.glow.cz
adastra-web-sk.prob-prod.glow.cz
amu.prob-amu.glow.cz
mail.glow.cz
ranec.glow.cz
ranec.glow.cz
webmail.glow.cz
reader.glow.cz
jabber.glow.cz
adastra-web-sk.prob-prod.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
mail.glow.cz
mail.glow.cz
ranec.glow.cz
www.glow.cz
altmail.glow.cz
sekac.glow.cz
altmail.glow.cz
www.glow.cz
www.glow.cz
t.glow.cz
www.glow.cz
adastra-web-sk.prob-prod.glow.cz
tmobile-spolecenska-odpovednost.prob-prod.glow.cz
sekac.glow.cz
webmail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
ranec.glow.cz
amu.prob-amu.glow.cz
webmail.glow.cz
2itwiki.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
sekac.glow.cz
doosancms.online.rev-doosan.glow.cz
altmail.glow.cz
www.glow.cz
mail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
*.glow.cz
obrik.glow.cz
majak.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
obrik.glow.cz
webmail.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
webmail.glow.cz
adastracorp.com
reader.glow.cz
sekac.glow.cz
mail.glow.cz
www.glow.cz
t.glow.cz
reader.glow.cz
www.glow.cz
majak.glow.cz
obrik.glow.cz
ranec.glow.cz
dev.glow.cz
adastra-web-sk.prob-prod.glow.cz
*.glow.cz
ranec.glow.cz
majak.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
t.glow.cz
webmail.glow.cz
oko2.glow.cz
www.glow.cz
www.glow.cz
reader.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
famu.prob-amu.glow.cz
doosancms.online.rev-doosan.glow.cz
webmail.glow.cz
reader.glow.cz
www.glow.cz
altmail.glow.cz
2itwiki.glow.cz
git.glow.cz
adastracorp.com
git.glow.cz
mail.glow.cz
altmail.glow.cz
adastra-web-sk.prob-prod.glow.cz
amu.prob-amu.glow.cz
mail.glow.cz
ranec.glow.cz
ranec.glow.cz
webmail.glow.cz
reader.glow.cz
jabber.glow.cz
adastra-web-sk.prob-prod.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
mail.glow.cz
mail.glow.cz
ranec.glow.cz
www.glow.cz
altmail.glow.cz
sekac.glow.cz
altmail.glow.cz
www.glow.cz
www.glow.cz
t.glow.cz
www.glow.cz
adastra-web-sk.prob-prod.glow.cz
tmobile-spolecenska-odpovednost.prob-prod.glow.cz
sekac.glow.cz
webmail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
ranec.glow.cz
amu.prob-amu.glow.cz
webmail.glow.cz
2itwiki.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
sekac.glow.cz
doosancms.online.rev-doosan.glow.cz
altmail.glow.cz
www.glow.cz
mail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
*.glow.cz
obrik.glow.cz
majak.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
obrik.glow.cz
webmail.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
webmail.glow.cz
adastracorp.com
reader.glow.cz
sekac.glow.cz
mail.glow.cz
www.glow.cz
t.glow.cz
reader.glow.cz
www.glow.cz
majak.glow.cz
obrik.glow.cz
ranec.glow.cz
dev.glow.cz
adastra-web-sk.prob-prod.glow.cz
Certificate
The complete raw certificate details for www.glow.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISBDlKABQW85IUqWhYUhFD4eLwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDYwMjE2NDNaFw0yNDA4MDQwMjE2NDJaMBYxFDASBgNVBAMT C3d3dy5nbG93LmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqI7f P1Y4mjkT9Xx9Ck1R4e4a7VB7bnuM2JNbSUYnj23iT3NbbTHzoR0vSO9e/bCT8IBm iDM0vw9msginOIPFCLD8BjPQ+kGu0QROV7K67UWdEB1mY6rRCHzsNeUF50wrDedn WGdaVPGTX/vRNO0v+8TM/0iUyfX7pAw0qmhqAgyiXUS5pUs+CG+n/FVmpsUI+uQ8 1Eg9ehFWjBfeypRUTWu2yD3LfQxMlk2vL385sh2deQ2QsRDE/sWbnI9qlRtLzlj5 9qOlyEWY1DBFA6bB0cv7E8ZCFTEyH9ClJ/K4TC1OeZGRnJvJXE1mBkqn+aYgH2p5 B+Jmi6L27LfKcNaqSpquUiZZOErZ+Q+w2lSzlH8ix4GRDPe6ZI75lkONFrWS3bT4 NfhcoPqvFZTAyHzyhoDZZQK+9l3vLJjybxsvij1yn1n6X6rpynl0Tbp2DenrK1pl B8tntA1EGNcMP46gGqGl+HmqhTKqRg9ZVItMcdrHUYGCzljQBzqBD4PVM0utlIUW 3OYZJaFJWSZruCaZ0hqI1Gj6fKsaAzqjuxH9fBullhGfRmZcD0Rr9E+Ypvl/NX7Q 9/2mlPLtMwg1BLOOU1aW4yq406SaY9JUmlsefFg9cbqJfVgv4EMn3bKK2rtySa6g Xj8OeHhzCPsLlLQPXFFVPqLlRJVWp5svh0HKrk8CAwEAAaOCAhUwggIRMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUsHhmQReF4l4AS+7yMohuKVTXO+MwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wHwYDVR0RBBgwFoIHZ2xvdy5jeoILd3d3Lmdsb3cuY3ow EwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBI sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY9L51fUAAAEAwBGMEQC IALFxXPYwXvTyhq3JkavTOXSlZAk3t1nzpoNnkk+onoAAiAfeGW9kR5jpPHUuzd1 VwmO0t33re6WH2Xcd9XCZEVEigB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABj0vnV9oAAAQDAEcwRQIhAOy59VWkf4+PlwiRG99BIPye/0dyKmFY a2GfBPYDcdoxAiAr8PO9qe9ctwes3ukYOxaD9+J8RVcTbHUykjLSUfWPgzANBgkq hkiG9w0BAQsFAAOCAQEAHrf81TPYA3xBH6ITJZvQ08c/jK6GGMhOD4Vkj1NoscXY yVlFoako0axkWFdgiYbMLZh7p9qPQAlKBVCBOANrnHmpFDUIPbsVix+wtlRWG2wu xg0YtAX9DQ0fLVMOGFp9ODXB6jJKQkX67WDvw89Bpd59zcsJ5ALNx+C2HXORnMwm c4MeAq8KU91pZKh4QBIZw3LuqW/bd/s/joXyqseLT/eCU9yJ9bb2lKxbRd53X2zd sU312BXRfxBJRn8gpYmECcajIeRFAY1IDKUTrrmGBGKHOYNcvFCUUR8QP7L/aMrJ 5wsBeuyhvP3AYQBLic5DDG65V1aooMlrUkS1q7YNBQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqI7fP1Y4mjkT9Xx9Ck1R 4e4a7VB7bnuM2JNbSUYnj23iT3NbbTHzoR0vSO9e/bCT8IBmiDM0vw9msginOIPF CLD8BjPQ+kGu0QROV7K67UWdEB1mY6rRCHzsNeUF50wrDednWGdaVPGTX/vRNO0v +8TM/0iUyfX7pAw0qmhqAgyiXUS5pUs+CG+n/FVmpsUI+uQ81Eg9ehFWjBfeypRU TWu2yD3LfQxMlk2vL385sh2deQ2QsRDE/sWbnI9qlRtLzlj59qOlyEWY1DBFA6bB 0cv7E8ZCFTEyH9ClJ/K4TC1OeZGRnJvJXE1mBkqn+aYgH2p5B+Jmi6L27LfKcNaq SpquUiZZOErZ+Q+w2lSzlH8ix4GRDPe6ZI75lkONFrWS3bT4NfhcoPqvFZTAyHzy hoDZZQK+9l3vLJjybxsvij1yn1n6X6rpynl0Tbp2DenrK1plB8tntA1EGNcMP46g GqGl+HmqhTKqRg9ZVItMcdrHUYGCzljQBzqBD4PVM0utlIUW3OYZJaFJWSZruCaZ 0hqI1Gj6fKsaAzqjuxH9fBullhGfRmZcD0Rr9E+Ypvl/NX7Q9/2mlPLtMwg1BLOO U1aW4yq406SaY9JUmlsefFg9cbqJfVgv4EMn3bKK2rtySa6gXj8OeHhzCPsLlLQP XFFVPqLlRJVWp5svh0HKrk8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367943601920689155884978655105426623947504 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 02:16:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 02:16:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.glow.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687657028243208421648792965185254357926710220344510765829547655580845053243573869323127043210589917932422246242881094561738745388702033330730067687301359555639110932446851596875536909230611691822604612923708180768823116059492088888344535682469377854599650037625515388593562455340724783069241002230351859870482888482292298864018616383756689461499538784708719500045121612951776213713020846298495458713970309074345192281515337412191513690565018727541380200325653853816114349470674193781201360828826285501382732284304230520572092005857251754429125211664219944935169336008595577041748626115718303007321159336940865001828212079276877160320277892802956097633658174038011682836528564011007906902155397534875418020786070312438031384413614960322293821123255635181369487940770785017234549644285381579492654839567444926115913592215582556004624350093844619433935338263435449719525054159220726389136679565161042783301844283391514392798319256315167019026997023210626611678055190707710396716109981086902154651621486150820134838785130343126203799984551407957134831062140629001775721834904021459651353261856471766286476900374082870956197992990700252592491809827513666920298192457935750173144246742000130593396866735828743147211289079862584161856040527 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b07866411785e25e004beef232886e2954d73be3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glow.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glow.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f4be757d40000040300463044022002c5c573d8c17bd3ca1ab72646af4ce5d2959024dedd67ce9a0d9e493ea27a0002201f7865bd911e63a4f1d4bb377557098ed2ddf7adee961f65dc77d5c26445448a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f4be757da0000040300473045022100ecb9f555a47f8f8f9708911bdf4120fc9eff47722a61586b619f04f60371da3102202bf0f3bda9ef5cb707acdee9183b1683f7e27c4557136c75329232d251f58f83 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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