www.szu.cz

- Státní zdravotní ústav, příspěvková organizace [IČ 75010330] -

Issued by PostSignum Public CA 2

About this certificate

This digital certificate with serial number 08:1e:dd was issued on by Česká pošta, s.p. [IČ 47114983].

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Státní zdravotní ústav, příspěvková organizace [IČ 75010330]

Company registration number: S14125
Organization: Státní zdravotní ústav, příspěvková organizace [IČ 75010330]
Organization unit: oddělení IT
Country: CZ

Česká pošta, s.p. [IČ 47114983]

Organization: Česká pošta, s.p. [IČ 47114983]
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1e:dd
Serial Number (int): 532189
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 43:77:a9:7f:95:5f:1f:59:cb:58:26:79:ea:3e:ea:7a:4e:49:2a:c3
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1

Fingerprint (sha1): 42:15:b5:f2:b9:e6:d3:b0:02:60:aa:c0:66:f6:db:90:49:b5:f5:28
Fingerprint (sha256): 86:f5:9b:ed:16:cb:c7:32:7f:76:77:40:8d:38:a8:48:ca:11:3f:cb:09:90:b2:75:56:e2:31:30:96:69:4c:65

Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt

Revocation information

CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl

Check the revocation status for certificate www.szu.cz

0

DNS Names

3

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.szu.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Other certificates including the domain name szu.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.szu.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5bR7wZ0eNdsvESaGgC
Kn7/C5wB5mylDq6BgpsbVQzyha503GCZquueTJXTbOQURFrtXrowdAw8m7UoxvUr
O+kiOvh8W44rFWeXeNypzL0gjjvodSoyms47qqWlMwJKQ3L7OkuZLk7xKGv3VAtM
xVqcINk8aFzgoYMo4UnsorxWSskcDpbAmTU6C+Nh5iDQnqjTZxk9D9fZYMjC8iy/
vVIjZUSKTZSYjUE5srorkqyOMFVttwhF0P2qCUH97oxTjk2XIW0YG99k5ai2tfdI
hNy489Ep7ynvN1E5+ygzorw577pQ/WzRavqvQTxgHDik/R1O+FMk+S05ybIiqT06
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 532189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-08 07:13:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-02-08 06:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Státní zdravotní ústav, příspěvková organizace [IČ 75010330]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oddělení IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.szu.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S14125'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17293837371526518531938246750008833567541824939623872205041951967055451167745598491067250942849448953236503339833998421593948641042024088004400665163051954672191499735435763153092720290391347174725227285597400350001474036178602185073768360064681516733256996207005144676418189174679559825303847197225744947314648840493863792949912930112560147791310896586298964936074089566834480614659988915385460156890974653427618791227977961951154782539101795747631449475215037766031322293974883860732880006549204253595654927057121954045602900941226923754091099501812435354099482862092876815844277008022877996990375620229934467594931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Státní zdravotní ústav'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.8.200
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4377a97f955f1f59cb582679ea3eea7a4e492ac3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0073bd4d6474f34ac5266e0825f4225197b21bf3f02b2e56c82beeaa42822080b9506c4c260e752f9acc477b84ac034b4fe0309837b9ce766c967f21c7e52e40cf2c0737d23412eb9f2b7632d680030b5ff115816528d3c5dcd45a8d5449f6b96666f53cbf2f219e7d0daa6149c4628fb87aa4c846737eb1a25d2e803ae131ddaf74b4cc29fb945f8d6a9e010e72888426320eab723706708e3b88d29ad315cb0244c9c517f9ab5db2454e8f84c901bf6eb54d70b7a38c47d78bac9fa4b1cb575a724cd29aa8dea6722744db2e5c6f5c9a94ff5c783ab58c21f19bbc97b2028cae45e88c7266cc928ef496c6180e9718223c161650de90eb3e9bc72ffa3fb42cbb