*.simplia.cz

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:54:87:4d:da:20:a9:db:43:92:89:e6:7b:1a:72:11 was issued on by Trust Provider B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.simplia.cz

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:54:87:4d:da:20:a9:db:43:92:89:e6:7b:1a:72:11
Serial Number (int): 13731177187338310715618415874433249809
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:05:aa:93:3a:8d:8e:d2:0a:f8:8a:ce:15:06:a2:86:06:fb:61:d6
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): ec:e1:c9:13:3b:22:36:91:0d:56:53:8d:fd:5c:1d:b5:3e:1c:e7:83
Fingerprint (sha256): 5a:ae:0e:44:b9:8c:9f:30:5f:4d:e8:f6:76:e8:30:2e:d4:28:64:17:77:8e:4b:a6:ee:e4:fa:9d:74:e8:b3:a3

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate *.simplia.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.simplia.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.simplia.cz
simplia.cz

Other certificates including the domain name simplia.cz

(limited to 100 certificates)
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
imap.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
help-files.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
napoveda.simplia.cz
www.simplia.cz
simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
*.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
www.simplia.cz
help.simplia.cz
www.simplia.cz

Certificate

The complete raw certificate details for *.simplia.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDj87LrVVl/2sK8iDJgA
ekC+hr2xJRsHwSO8YHCp0YWPTFrm13YsBzsEvrKYCW8u7c26eGCBoR86Ayx2tYQR
K6s++9ptEer2X6Io0gFMQZATxin75q09sjlbHSqoZ/D9Xckos0Hpj4hGZNbcbwNO
xsP7817kdAJ1R8HxjIkn9HNMEXeAwCbuQDgjPjD66ZTTx9XutKXA/3cffrgEPcO/
ARkllZKtYdygbaiF9zEIDFl4Oe63razsKxNXhPUynRSjMYN0dD79yEqPMrDWPVeu
iVVJITLqhh+p1ZJohsinv1gbkAxoBqBdSoqN4LsaDFmiJL/5kYzw4acRC2tlVf6l
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13731177187338310715618415874433249809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.simplia.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24265856377345999761321576084547886213663994599246430745051303172212397640318095892649699856698914959879331098295163445053284723958084691008907646532222424064631740838067394571763601503143880696176877550392839887784460693831648097007932942827288738738801261271086763478621218516843937317645368515875613832073624406426937876841361673078217742656097457840732380420935734136054567802484222165494900044586147903667346596188950962856965476959527150337777183630994674151274302618316086993990790129745257838986994150926986609084365742722702348690834419854847203462684041559552071833355892742039657828413478883956679881172277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b05aa933a8d8ed20af88ace1506a28606fb61d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplia.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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