api.homecredit.cz

- Home Credit a.s. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:28:4f:16:a0:1b:1d:aa:b5:8f:cf:2c:43:fc:e7:30 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Home Credit a.s.

Organization: Home Credit a.s.
Locality: Brno
Country: CZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:28:4f:16:a0:1b:1d:aa:b5:8f:cf:2c:43:fc:e7:30
Serial Number (int): 4196979964624787185833764890406086448
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 84:46:b0:0f:b2:ef:a7:aa:48:dd:3a:36:f7:e0:be:c3:cd:75:98:74
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 0b:c3:be:37:3a:5b:00:2b:db:7a:a3:4a:80:bd:3a:5b:35:6b:1f:2b
Fingerprint (sha256): 5a:fa:75:bb:1a:e9:24:9b:4e:4c:fe:25:ca:5a:1b:78:a0:20:a0:b3:15:12:b3:86:20:05:b5:40:b4:9e:da:4e

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate api.homecredit.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.homecredit.cz

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.homecredit.cz

Other certificates including the domain name homecredit.cz

(limited to 100 certificates)
smtp1-ext.homecredit.cz
m.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
mails.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
zabezpeceni.homecredit.cz
mails.homecredit.cz
blog.homecredit.cz
www.homecredit.cz
m.homecredit.cz
partneri.homecredit.cz
mdm-mail1.homecredit.cz
chat.homecredit.cz
callme2.homecredit.cz
www.drycodetechnology.com
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
*.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
posta.homecredit.cz
nasplatky.homecredit.cz
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
vpn.homecredit.cz
partner.homecredit.cz
signalr.homecredit.cz
nasplatky.homecredit.cz
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
t.mailkit.com
zaplaceno.homecredit.cz
vpn.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
kariera.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
smtp2-ext.homecredit.cz
t.mailkit.com
callme.homecredit.cz
callme.homecredit.cz
wiki.finance.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
t.mailkit.com
kalkulacka.homecredit.cz
pujcka.homecredit.cz
zabezpeceni.homecredit.cz
posta.homecredit.cz
callme.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
prodejna.homecredit.cz
www.homecredit.cz
ns3.homecredit.cz
api.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
konfigurace.homecredit.cz
vypisy.homecredit.cz
blog.homecredit.cz
confluence.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
droidquiz.medpeer.co.jp
vypisy.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
autoklient.homecredit.cz
sip.embedit.cz
ns3.homecredit.cz
www.img.homecredit.cz
prodejna.homecredit.cz
o.homecredit.cz
posta.homecredit.cz
partneri.homecredit.cz
callme2.homecredit.cz
blog.homecredit.cz
blog.homecredit.cz
liveshop.homecredit.cz
blog.homecredit.cz
u.mailkit.com
mdm1.homecredit.cz
api.homecredit.cz
api.homecredit.cz
kalkulacka.homecredit.cz
smtp2-ext.homecredit.cz
old.homecredit.cz
konfigurace.homecredit.cz

Certificate

The complete raw certificate details for api.homecredit.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4196979964624787185833764890406086448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Home Credit a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.homecredit.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4828622493435323380220473007089347327271333739411378992425576500073448968781899949649350576224734496750693044683089519038493635944413968228547396380873409007148296180478830077827350841840823206432994611870560562794667885511407120496636694862995530030457054814366191748781844375073898507908994377187809185603369131395605328056205697647014966537615082657257726749645004041334767550642922071598209131779816424959958990098312324128845105052507989677215697898899897135700301282572455258496265721067765603348779465244145800558785525481041549879378129341472186063990566999177787193769543125784038773666898567269469023086281541999732890161893215974569146722192677793006837065291159346755799310200320249685230133590973756377690532696260689533667499661092255210813438066783211423241395445267370927594416865048832412435237032174230911042771226977657061698285889209393839489334747689739000662033457681058286074937677655641039968955437907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8446b00fb2efa7aa48dd3a36f7e0bec3cd759874
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.homecredit.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc8f9c34c00000403004730450220357a261f9370a46d13749d5a3b7476a6bb34af5532a951cf275457a9b41637ee022100841b921cf05be1d1d138c71a95c978797b923af222e7d8e97f720d3865503d0800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc8f9c37b000004030046304402202b2a204e82454c3b95d3a509f8f14124fc50084693179c9e06c9af8e32ea6e5102207fd36e37b9bb4628221fbe86a220267713f48146ebfde6c5ea7deef97273ea2f0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bc8f9c3b700000403004630440220628b652e8ad7b6de4dc6af772aae95ed85b32068afb3938d3bff088555eee30702204b8520857ac42a61df7557094e9e52bdf1125dabbba9cc9c942bd6326e5104b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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