Česká spořitelna a.s.

- Česká spořitelna a.s. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0c:90:fc:04:fc:8f:26:19:ff:b4:53:89:8d:bb:1e:48 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Česká spořitelna a.s.

Company registration number: 45244782
Organization: Česká spořitelna a.s.
Address: Olbrachtova 1929/62
Locality: Praha
Country: CZ

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:90:fc:04:fc:8f:26:19:ff:b4:53:89:8d:bb:1e:48
Serial Number (int): 16703538259344054728062505281889443400
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:32:f9:a6:15:59:94:a5:ae:27:51:0c:70:04:18:c5:6e:c3:54:7a
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 02:4d:ff:78:1b:04:14:16:b0:ee:d4:fe:1f:c8:98:46:34:ca:ba:27
Fingerprint (sha256): 3f:22:6d:10:88:7d:51:a8:ad:cd:5d:ba:17:73:04:ca:41:30:02:60:e9:76:14:7f:b1:3f:4c:33:7c:cb:a8:44

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Česká spořitelna a.s.

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Česká spořitelna a.s.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csast.cz
csas.cz

Other certificates including the domain name Česká spořitelna a.s

(limited to 100 certificates)

Certificate

The complete raw certificate details for Česká spořitelna a.s. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRZzCCD0+gAwIBAgIQDJD8BPyPJhn/tFOJjbseSDANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjIxMTE1MDAwMDAwWhcNMjMxMjE2MjM1OTU5WjCCARgxEzARBgsrBgEEAYI3
PAIBAxMCQ1oxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMREwDwYDVQQF
Ewg0NTI0NDc4MjELMAkGA1UEBhMCQ1oxDjAMBgNVBAcTBVByYWhhMRwwGgYDVQQJ
ExNPbGJyYWNodG92YSAxOTI5LzYyMSEwHwYDVQQKDBjEjGVza8OhIHNwb8WZaXRl
bG5hIGEucy4xITAfBgNVBAMMGMSMZXNrw6Egc3BvxZlpdGVsbmEgYS5zLjEfMB0G
CisGAQQBg55fAQ0TD1JlZ2lzdGVyZWQgTWFyazESMBAGCisGAQQBg55fAQMTAkVN
MRkwFwYKKwYBBAGDnl8BBBMJMDE4NjUxNjczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsNGQM6zujx0rgob4XRxpq8k2yMQIf47gNhIrY/ZfHlaDThtl
ztZ01iW/gOpQB7yV9BUGuYc/+mb8K0YyHhx0UOa2c/VnLu2gz5ZBsEQOhtMB+6Gq
Zq3p4ehGgSL73ru/RwJSuCqkmlYL3Ih3AMVioIdN4ia7c0ONSrWJmDwqYg8XaMRX
IPlRkIBQOYmD3pHyg8DUcrZfWnGZOC5bvJxuoUU2lmEaoSgdOToJrn6D9O43Ve2B
1+gE2oIR+EPKXKGqJb2ye7mY5YtQVike1kc9s1Bq/NFOG73JXtIvFyttSFMnvrob
OkuNiNjAOQsJ/XR2IdzTdF9hNxlR2Y7xV2EJiQIDAQABo4IMYjCCDF4wHwYDVR0j
BBgwFoAUvp+9jVdtlbWtY8OXTquohF06B/UwHQYDVR0OBBYEFEky+aYVWZSlridR
DHAEGMVuw1R6MBwGA1UdEQQVMBOCCGNzYXN0LmN6ggdjc2FzLmN6MBMGA1UdJQQM
MAoGCCsGAQUFBwMfMIGlBgNVHR8EgZ0wgZowS6BJoEeGRWh0dHA6Ly9jcmwzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydFZlcmlmaWVkTWFya1JTQTQwOTZTSEEyNTYyMDIx
Q0ExLmNybDBLoEmgR4ZFaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEuY3JsMFAGA1UdIARJMEcw
NwYKYIZIAYb9bAACBTApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwDAYKKwYBBAGDnl8BATBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUH
MAKGSGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFZlcmlmaWVk
TWFya1JTQTQwOTZTSEEyNTYyMDIxQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIKZAYI
KwYBBQUHAQwEggpWMIIKUqKCCk6gggpKMIIKRjCCCkIwggo+Fg1pbWFnZS9zdmcr
eG1sMCMwITAJBgUrDgMCGgUABBRPhRwsWLh9h4+XEsOBK51jV7i3mzCCCgYWggoC
ZGF0YTppbWFnZS9zdmcreG1sO2Jhc2U2NCxINHNJQUFBQUFBQUFDbjFZMjI3Y1Jo
Sjk5MWN3M0tjQVRhcWJ6ZWJGa0J6RWdwTUpRQU1CdEt2WGhVTE5pb053UjRabVBM
TDk5VG1ucXNpUnMvWUs0RlN6dTdydU4rcnlwMC8vbmJQVDl1bXdlOXhmNWFIMGVi
YmRqNC8zdS8zRFZmNnZmLzVTZFBsUGIxNWQvbEFVMmEvYi9mYnA3dmo0OURyNytm
N3hqMjMyMnp4L1BCeGxLNnZhMHBmZVpUZTN2MmJ2UG4xNGZEcG12ODhmSDRyZjls
a3BtN2ZLNDNYV2xONW5iei91NXZ2TS81Z1ZCYWdmVGc4dlphank3SSs3dy9iM3A4
Zi83T2J0Vlg3YzdUOFhIdzU1dHJ1L3lvZTd6OXVuZjRjOGcrRDd3MVUrSFk4Zlhs
OWNQRDgvbDgreGZIeDZ1S2k4OXhjZ2FTaXZQODI3L1ovZlFneDkzMS9JYVo2ZGR0
dm50NCtmcm5LZitTd2tlZkkzcnpMOFhSNTN4M243NW5wNytQTXVPMEMxM1hFNzcr
OHVMM1JmY1o2MjR6SDdmSlhISnM4ZzlYeVYvK1B0OWJ2Nmw1L3o3SGwzZjV5Z0Z3
aG0wM2IzTUIydjhyYkxzd3U3K3FCUTFoL3VqdE55LzEzMFRZaDVCcVhmaHdwbWNT
bVV6UmpLNEx5cm5DOXJWNVdkdzhHQmgwSFgyT3RIajFVb0ZDTVV5eTQyT2x6cnNO
RVN0YkRyWUh3b0txSnpoK2lDV2locWhVZWhVQzZFdjZBR0k5SmZoOUJUUE5tcXZF
bnF6a0lQMzF4K29jcnZRNnpMNUpxMjdFNmdsY0NoS2lPNDlFVU42dlpNUmVoR0hq
alBWMmZIRHMrcEwrTUVwdUcyYlRiQmR5Y2g0b2dMTEdkWWZLYlFnZUVvVlBoZTJE
a3BuUXFTS1VqbmhQMTZPSXYxWlhYVi83akkrN3B2MzZxTHFocldiRHhzeEl2ZU5U
UTFmcXV5aFVoaEtob3EwRU9CU050QVI4S21qQWNQZHdBNmU1OGE0b3NQZTRpU1NL
RVFPcFFlS3c5Wks5eU9Ba080Q1oyeGRxc1FYeklJNUZLdmJxOXh4NWNOSGtRRFYz
TkJvaEdXa2oyNHpHQnRNRTJRZ2Z6a01sU2hPblE0blo5bVdJZ3FFRUxFQ0t5a2JJ
UkpzdkFUSXFPWG0veU5oYmY3Wk8rTVBXL3hkaU8zZWQ1c3FocThCOU1BdXNRS2FF
MlU4SXVLQjIzVlFQMFVFS0d3V1NzMmkwTEtqZ2hoK2JJK3hiTGYxT20ycmFlaWhZ
OFpEbDJadm44TC9EY0lnVGdxUndsSTQ4dG5NSWtXQ0JsVEF1TExBSkJzU3dLclVw
eTZTYzBvMmVjbGZjNXBGTVhVUkhPOVpxMUFQTmlGbllvS1pKcWl3ejdnV05DaHJk
aTRFVWo2SkRXMWtEZ0krMHA4bWdRR3k2c09FVk5MZmhIMkpmUGh1aGFxWU9LU053
M2Nxc3V3cnFCaEcxd2I1b1NySFV1QmVLM1hpZ0lkVWhFMlhSeGZPcHJCZ0RTYzRZ
RUt5cVNoaTY0THduWmttZkRpekdqaEJjd0p1WWlJRFdMd3FQRktnODlGQXYwZXVR
NTNRb0RiNzhYQ3BrVWRDSU5JQ29uN3hKeXlRSWFvVHE5UVhITHNaOWpIanlxc0hp
eVJEcTBvVEQycWpsSUFWUnlLMWMyc2d6aEh6VUEwQnllUm9pcTFGdE9keVVkdGxa
UlhESEdMcGxrM3c3VVVvTExpM0FpN29IQkQ4UWZUZ2Rxd2NyYncxSVRrSDNyNEJj
RXdVYXhoUFNKYWpRaEQ0dFJTTDc1T3NHVDFPMDJGNUtZNnFqRHRLZG04VkFZdEJz
bUVRbkx3VnpPYVdqZ2xIQXhXR3NGV1NTd0d4RDNES3M5NUJTbFJ0SkxyZXVUZkVx
L3JMN0laUkNkcEIyb1g2V0ZlK2dKaHI4elk4bXFwODVYQTJzcG1MVVpFWXJKSUVq
THBha2s2VFQyNnFEMVpoZXJHSUlHaEZTeW9pU1M2bWtLN1JMUTJ4RGk2RG5SSEww
V3VBVGxxNEZaZGhuVWxCWmlkeWtza2dTejZTcGp3TW9wUm5mbzdHbXloOFZKR0c2
ZGROMWp1U3ZoV1lod0pEWUVNT085VUZYa3JsbDNMSGg0Z3VKVENjSmJseFpJeUp0
enF2YmFKOWl0RHR5SldyVzFIblF6emNOUFo0U2dCYnFrWEJNWXkzR0FXcklTbVc2
bXpoUE42WDBzZDB2U29wZWZWaElmSXFzYzNxckFVUThrMDBjME9icFFJNnJremNp
U2NJSTBSMWhZV3RiY1Qza1NJQXNMNHJRKzhFblY2Y0hJbU54dUlialIwSXFtSkJ4
K0djYzNYcUZuTDFTd0J3VW5NV3VYeUxDMDBUalROa2lOUmZoblVjYlpxU1ZqNHRR
cGEyVmp5SloxSnJJMXp6U2xoN294NVpTZlJiZ3VURGFVZlZoVm9uNDY2ZFdVOG9X
eW5hV1dzUWRoYS9tSVNITDFGaytYQUVuN2pvc1ZTR1FuclUrQlE0elc1S3UyUUlv
ak1WNGdjakRMRHl2dThNaHV6clhRZHk3bW14cmlVeGFVU1VwU08wdDRTYlZndlFL
TTZhdUoxWDZWVGErblVTZ0ZweTFaSTN4SnZXRzhZOTE2dmMyNkFHcHU2UHlWTXZR
dVY0RlRMQUlTS3BVaFBySVIyTXBTUnM3VnlpWC81clRoSUpobFhPVWZTMXpvSjBm
ZTBhVHo3L0tYWFpHaUNGQ1pzYjZLK1R5Mk9lODRyTDRYUWxsdnBNTStoc3BHaE1s
bk1wMEpxZzZWWi96TE5kUHhsVEdrYVJJSFJWTmRCcnkyc1Ayb3YxaytObHBYRzhU
T2lIVmFoeml1S3lxVHM0OSs3SEt1SzZHeGZGTkcrSnRpMHUzUGtxTU9EVk8yMElT
MlFiQmdJREJselpDdmZIOStMRW8ydDkwMzEvNkw5V3lWWFNEZ1ZLVWpYWU16TGdN
QTNKM3N5d1RVV3JFay9oR3dlSkQ1dEw2TkM0NWF4SkM1cWdUOXlvZGxRc21FVmor
TlVJNnZ4YktsQ1EySnRUOUdxc3BwTXBtcVJpS1ZKZ3BBdGtoRWhzTEx3a3BteWtr
K3pGbFZUUWtXQ2NWekdtTTVFRm9pUjZTUjU3STJaRkNkckxXaU9NamRGSFlrRTBo
U0pvMVl6bUFxYVZTMVRGQzIrV3I3VW9wU29wdEJnYXlUSWVtc2dyR0w4VHFBSEdy
ZU00TndWN1c5SloxZ3Buci9CTGk4ZVhuNXk2NGZZL25HLy9mYUh0cnpnNmlYL0kv
RG0xVitrOVd3MThCQUFBQT09MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4ICAQBoylHclhJAr7avlQMGIE7CXVFOCmLuAJcuqMT546QfSSAQkjFs
WegIdWi4+zhCLX48squzIs9CpV+GDHwtNK3DKNGR6ekCjDDyclAr6l2VnkKpbPi3
8DFuya20H1fXeAiJTI9yIFbHzlk7aDltcf+gZ81ISr2aTv8MSqqH94HlucgI1xkM
P4141FrOBwDf5j29uJX73sx6TUBJYKHsFg3FJPpQjevMOpOCn3zgc0KJIMup6MrY
nbzwXrrbA/eavyrjs4XQ0IQmIQscYZARSYyfKl1dkHZJfFSXTAnOwPLfHJSctLMF
T7D5aALnITTd40JfRfDmmyevL+mrZ19XD/8zPXTz4Oz/kRbAXmBSk0uG6LVb83B8
EMZFtvxuScCoHwHxP3IXD/oDxGd97eGSJH2FFZclN0mVcl6Z9CqLmViVN7UWk7KN
DM26FZsftt/Re+DKDAExG125CVw3eZaJVDz4cxQEXLIT55Ge/CJ22rQoJvFFSWrK
6+d+3/x54NSmASb3Nh/cYp+A1J3gGSlW0+LA0Ed8q33xltft7Dug/ES0cNLv6uJ/
2SYm/DLFoCFwlEzPq5CTbymZW1EUEejGyAMr3ltnnJqufzcKeMS1L8BYGG0Z+GH8
tWcpTOrE9eLKo/dR78pti/WJkQ8GQr6jnbUzBorAyXhmvYydC75cFxq+xw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNGQM6zujx0rgob4XRxp
q8k2yMQIf47gNhIrY/ZfHlaDThtlztZ01iW/gOpQB7yV9BUGuYc/+mb8K0YyHhx0
UOa2c/VnLu2gz5ZBsEQOhtMB+6GqZq3p4ehGgSL73ru/RwJSuCqkmlYL3Ih3AMVi
oIdN4ia7c0ONSrWJmDwqYg8XaMRXIPlRkIBQOYmD3pHyg8DUcrZfWnGZOC5bvJxu
oUU2lmEaoSgdOToJrn6D9O43Ve2B1+gE2oIR+EPKXKGqJb2ye7mY5YtQVike1kc9
s1Bq/NFOG73JXtIvFyttSFMnvrobOkuNiNjAOQsJ/XR2IdzTdF9hNxlR2Y7xV2EJ
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16703538259344054728062505281889443400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45244782'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Olbrachtova 1929/62'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká spořitelna a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká spořitelna a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018651673'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22321281183104768328692605251688621440179067920566767910983448065372640534371973528189218387504711159247143018359353010670929455761909348650768769601706363351431577866626616389650378153557193327451402672721799387627701635989098412086593027440940099713261811180851025171551678483728513049540326172973865654504805473396233188927196094186880535447818577801213237976695743539116390864799337159288415078652693680444207818365092797351943677425219368833905969132980638115233622947920005768834876596782680376162247528452394488715795238965943422970122207054138034010017645597775884003477868848571102384841049527296584889469321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4932f9a6155994a5ae27510c700418c56ec3547a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csast.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csas.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4f851c2c58b87d878f9712c3812b9d6357b8b79b
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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