dsmozaika.cz

Issued by Secure Site Starter DV SSL CA - G2

About this certificate

This digital certificate with serial number 1c:b7:fe:16:54:b3:24:1d:d3:84:ef:b1:0c:96:78:db was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=dsmozaika.cz

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:b7:fe:16:54:b3:24:1d:d3:84:ef:b1:0c:96:78:db
Serial Number (int): 38173727708361729837525324598477224155
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9b:54:ad:df:69:60:ea:70:42:6e:e8:2e:c7:14:7e:88:ff:b9:44:99

Fingerprint (sha1): c6:a5:ca:47:de:e6:9d:27:e9:ba:fd:6f:53:1b:b2:2c:b5:41:72:e5
Fingerprint (sha256): 90:63:fa:69:71:a1:1a:7b:c7:51:05:89:c3:23:86:61:62:78:26:4b:af:a7:4b:72:7f:36:94:98:ff:aa:12:be

Issuing Certificate URL: http://ha.symcb.com/ha.crt

Revocation information

OCSP Server: http://ha.symcd.com

Check the revocation status for certificate dsmozaika.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsmozaika.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsmozaika.cz
www.dsmozaika.cz

Other certificates including the domain name dsmozaika.cz

(limited to 100 certificates)
dsmozaika.cz
dsmozaika.cz
dsmozaika.cz
dsmozaika.cz
dsmozaika.cz
dsmozaika.cz
dsmozaika.cz
dsmozaika.cz

Certificate

The complete raw certificate details for dsmozaika.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxnzRjGAIgqcTC/pIPCe
P5nLiQ4r35e3ocYGS2F0C4yhBgKiJxzX4tfxobtFnFrq4S/ffgUBrrxiJRfKoUga
/kXcWYuZRLvTRDhn17+f3J2NZ6BHmtQpAju6xbIVOlSZ1It/6lLtu32cC27bFwdr
RSD1Mzc1MDKQmxoTtq7BHiTLEq3netbTpiJ1xaonhkIQ6or7PXT0Mt40cs7xMdaA
6r5sB+VuHVl8mio8ASEJ8Cvp191brmDZP7Ro5ADOiBGD3TUo0lZf3pZBKXLdPxvn
XRV/i9buQC3KGEgq4n2eTyNvvOpCBiQAWGjB0b2pZi+ATWQk0VVKIuYjY6ygS0gs
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38173727708361729837525324598477224155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Site Starter DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dsmozaika.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22609453153767115817325090057348181461672730220799095760929572106045264533813295188135598874974627453011188011040134462857922369620111197219850355520827232673868894694175792542599090002197929443112288964413694181311385777583680308208337465797898027650371292198130396602067616734841627524817239304844918140853315696783768987771836364331086631225380703380417638058472155568594266620825827986647001116367739246209236656373119212950894822387686633708736934931681281165667118288871273532082799230666173735708786058151438839710813710144134762650310694765558041156085137398403455595217603556618417577832031397346559524351063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsmozaika.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsmozaika.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9b54addf6960ea70426ee82ec7147e88ffb94499
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ha.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ha.symcb.com/ha.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153e6a74fba0000040300483046022100e9375aaf57989898dc9c244d1e9e0a53c73d6e260da3f0d483dc28e0defc1306022100cbb4046db0c85ed0c9b28407d3da84a9186b9f9fe675dbb66fee4381a33c292c007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153e6a75009000004030047304502210096c61adc08c55c16217ae6d277d14756f9b2f157fc734903f35c5e87d82e98e30220740e273c8d71666f76d7264fd37e5d3c07b416a7062d8aa6ef4f8dd1185e4695
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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