www.mikulasske.cz

- Gymnázium, Plzeň, Mikulášské nám. 23 -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 86:1b:49:5d:b9:f5:7b:06:18:f6:67:a0:73:44:1d:c0 was issued on by GEANT Vereniging.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gymnázium, Plzeň, Mikulášské nám. 23

Organization: Gymnázium, Plzeň, Mikulášské nám. 23
Address: Mikulášské náměstí 808/23
Postal code: 32600
State / Province: Plzeňský kraj
Locality: Plzeň - Východní Předměstí
Country: CZ

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 86:1b:49:5d:b9:f5:7b:06:18:f6:67:a0:73:44:1d:c0
Serial Number (int): 178258231492030842319915832137899843008
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9c:16:b4:8b:58:a9:7e:f5:a6:f9:54:ef:bd:bd:cf:7f:83:6e:5c:43
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0e:0e:00:67:41:ef:1e:ff:cb:47:7e:9b:3f:ec:ad:e9:96:8e:c8:c1
Fingerprint (sha256): 75:af:d3:9a:b0:e5:0a:37:8c:03:81:88:aa:95:bf:6d:16:4f:74:f8:4a:82:46:ca:10:ec:66:80:3e:6f:d3:ac

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.mikulasske.cz

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mikulasske.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mikulasske.cz
admin.mikulasske.cz
bakalari.mikulasske.cz
esf.mikulasske.cz
mikulasske.cz
provoz.mikulasske.cz
weblogin.mikulasske.cz
webmail.mikulasske.cz

Other certificates including the domain name mikulasske.cz

(limited to 100 certificates)
mail.mikulasske.cz
www.mikulasske.cz
mail.mikulasske.cz
www.mikulasske.cz
idp.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
mail.mikulasske.cz
mail.mikulasske.cz
www.mikulasske.cz
radius.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
radius.mikulasske.cz
www.mikulasske.cz
www.mikulasske.cz
radius.mikulasske.cz
radius.mikulasske.cz
mail.mikulasske.cz

Certificate

The complete raw certificate details for www.mikulasske.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5b+m1gVCVfmqWDvRiUH
dVxx9jwEpDpm89dTbxe5SSKWs9bBVp4ugsdJ4dDw0tt6mVLTbz7cneYP1ygWb224
GJ+Aii8d6Upjuh0IgEQvcxswOF8vA29so3omZts4JEknfCNonsAslxbETT7zFWiI
62cU4sExvyLcVq8QFtKRotzC6f343iSFjONUOrlnhHkQ6g3/IckdksCFawU2G0a3
dWN9ca7SUJDBn0HzHEyY8BprVckVrxS8dDY1+aurPK4YdLq3yUZ0lvyq65b0yAyA
YTEPnpbJof5i5varhbMtXpn1Umm12w4rm0rWix3QX+33GsCkKD2R4cBbn0nGC/6q
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 178258231492030842319915832137899843008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '32600'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Plzeňský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Plzeň - Východní Předměstí'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mikulášské náměstí 808/23'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gymnázium, Plzeň, Mikulášské nám. 23'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mikulasske.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23681021220229721235718600075839108967354076436586792000939038216787969879940131725339265216149726848772226610389847454604862661388036827702640225041328474807798079389905645251956175574141844205218781930546177343470336871193207527758119569360428556119319401253043679716310801081625235106777602009842038792208416633900168442310393148705504067395504294778808084976299146227761508876076434744568460620304296823615500741640425912041808922963383827069305173298465817034263950258231833331694918198655476090783153189132729799227711884357452727931616254927881927195479649744384134357788823695538601769136997572328027758439141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c16b48b58a97ef5a6f954efbdbdcf7f836e5c43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000174b48b9a79000004030047304502210087fc236b595366a506d1fb50bd297c463c4bbe26135fbcce7ed58be5c9479121022010489bade33ff3ded3bba4426cd049f584bc3ad3d148cc1395891891648fde280077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000174b48b9bbf0000040300483046022100eb32696b1f654453251bd9fd6d339a95e72e1d9dd649a883d8fc1a3203174031022100ef67c5cf10f6eec2ed56e7925f5da9a20268569839c935edeaa77dceb3c5b8fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakalari.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esf.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provoz.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogin.mikulasske.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mikulasske.cz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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