zakazky.cheb.cz

- Město Cheb [IČ 00253979] -

Issued by PostSignum Public CA 2

About this certificate

This digital certificate with serial number 0b:4c:53 was issued on by Česká pošta, s.p. [IČ 47114983].

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Město Cheb [IČ 00253979]

Company registration number: D25897
Organization: Město Cheb [IČ 00253979]
Organization unit: Město Cheb
Country: CZ

Česká pošta, s.p. [IČ 47114983]

Organization: Česká pošta, s.p. [IČ 47114983]
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:4c:53
Serial Number (int): 740435
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 1e:4d:2c:63:77:21:7a:76:cc:62:29:3b:1b:9d:ee:d8:da:cd:0c:d0
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1

Fingerprint (sha1): da:2d:66:da:f2:8f:40:05:f2:5b:eb:ef:d6:46:f9:29:34:36:16:aa
Fingerprint (sha256): 4c:c7:63:39:09:aa:d5:86:52:11:55:04:56:a3:32:7d:58:ab:fa:04:a2:30:0a:b5:45:25:cd:64:a1:92:7b:8d

Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt

Revocation information

OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/
CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl

Check the revocation status for certificate zakazky.cheb.cz

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zakazky.cheb.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name cheb.cz

(limited to 100 certificates)
ssl.cheb.cz
cheb.cz
zakazky.cheb.cz
*.cheb.cz
cheb.cz
zapisyzs.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
anonymizace.cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
tic.cheb.cz
cheb.cz

Certificate

The complete raw certificate details for zakazky.cheb.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x0mgXFoNPI8p2ZzuFRD
HvZczTJlO+HDvN2skiBGe9Xm3bT4q2y1EvivU12uP3H2dlNXqONwuZw6SmveRpRk
nUTugkZby2p6Jj74fMcgqru+0gshNarvTtFXBt42BWZfK43NdgbMy9sMPHblTntd
Jxbg6Y8hYJS87dTJq51AGaqIOKFyxkbrA5sz0iuJQriwtaJsgigRDpuetjCjB93z
W2ShndrNAGuwppzIhbfaRP3PmBWe485aNbiJkKuQqSlfnYGIMsWphuKqHRL8rXF1
50RzZJ8NAvWhf9gqjsJCPl+DA/zOoieFgRKmwd4Bj1mWIoR2T6rqKG1Amyep4uOo
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 740435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-02 10:26:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 10:26:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Město Cheb [IČ 00253979]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Město Cheb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zakazky.cheb.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D25897'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28165516611654357957449634632075144016585970605992733854690673493175886829689851550965686751389350164220187718239875019541919111245208849489633139638140295694770629806486545504118742872138829893294102364489072423937792480182363111259532052718392475413281637659130589435729996896443530098287515781111361402995892021299303049204781252680890900841682981309240070605595684419570019330259349175136345035853387236095338277494748402919476842661752133675917781224875668766523529636169484409841958284800698153327078907493448962311445478609795858651369809093472049648434311413917016972766742776052701176909165068256430025582689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString ''
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.200
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e4d2c6377217a76cc62293b1b9deed8dacd0cd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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