www.rwe.cz

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:3f:e3:44:37:70:5e:1b:7b:60:e9:42:c6:22:63:f5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rwe.cz

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3f:e3:44:37:70:5e:1b:7b:60:e9:42:c6:22:63:f5
Serial Number (int): 1660952209525209554035079837720404981
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 56:bb:54:0a:c7:c6:a8:34:73:d9:bd:1d:50:ef:14:2b:70:0e:85:df
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): df:0d:f2:eb:94:b7:ff:d9:55:30:b9:96:88:7b:c7:98:39:0d:8e:11
Fingerprint (sha256): 93:57:26:1d:b3:27:1b:1d:8e:1e:0b:8f:45:7c:36:87:62:b3:9d:7e:37:5e:61:d2:2a:30:3e:20:7b:f5:cc:6f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.rwe.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rwe.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rwe.cz
rwe.cz

Other certificates including the domain name rwe.cz

(limited to 100 certificates)
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
vop.rwe.cz
sip.innogy.com
lyncweb.rwe.com
ets.rwe.cz
access02.rwe.com
gsn.rwe.cz
iave.rwe.cz
lyncweb.rwe.com
premium.rwe.cz
premium.rwe.cz
gsn.rwe.cz
gsnbackup.rwe.cz
svb-cross.rwe.cz
vop.rwe.cz
access02.rwe.com
*.rwe.cz
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
moje.rwe.cz
sip.innogy.com
lyncweb.rwe.com
lyncweb.rwe.com
iave.rwe.cz
onlineservis.rwe.cz
www.rwe.cz
svb-cross.rwe.cz
gsn.rwe.cz
ets-test.rwe.cz
vop.rwe.cz
ets.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
premium.rwe.cz
vop.rwe.cz
ets.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
ets.rwe.cz
iave.rwe.cz
www.rwe.cz
esb.rwe.cz
migrace.rwe.cz
www.rwe.cz
wallboard.rwe.cz
mdm.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
svb-cross.rwe.cz
test-wms.rwe.cz
access02.rwe.com
iave.rwe.cz
lyncweb.rwe.com
sip.innogy.com
wallboard.rwe.cz
ets.rwe.cz
www.rwe.cz
iave.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
gsn.rwe.cz
ets.rwe.cz
email.rwe.cz
www.rwe.cz
gsn.rwe.cz
iave.rwe.cz
wms.rwe.cz

Certificate

The complete raw certificate details for www.rwe.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnfvuv2DpDhh5s+BdzEl
THQtJ5SMt5NljIAHP5XmTvWmn8crJfGhYMhChCKnJXmlUcgEcaUAojGkulW+Lril
t/ORfrlin+XcOjqZq25pHIVzNj72x/YNyDINyPtM/YOn0jMIzV0/DmnxtWJf+go7
u2Mm8Nd/MDMuHWPVQ6QcJSE1gB8vu1imQcLDEJ8VjN3bijmZf3ftrx7xsmXDP3MB
Pms5yGQPVkENo522/r2Uxj1sCUE3nE/MhUYNG0lpvcNhhoUKi9fj3eDY6d/oq7rq
obz0U7ettuxFzUEYkQClfnTjQMMKEbFi5i5WySs/LRtripmbWkZwsxBsHGaKHwWQ
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1660952209525209554035079837720404981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rwe.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23034514370120910209589565043658500122745650084061032223794657475741884362980523781723143058594400329109754003319983355484478207485324270364848455080969535541160453956492681547713318177133132014455575805348001650937661731624919313565378630134308328038138610432322521352344020896249524184388450662949260172813133150845945499541540502325867878697192755746169408572396260765089616315391921512884227247996219380847477770431966975721142756520772855849905747664734816450606309679227540511592225596349424510734352095563863480475347408081253604300891372133335226086776470131205063119135908299682947161181355466860083003363457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56bb540ac7c6a83473d9bd1d50ef142b700e85df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwe.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165e6b4ce4d0000040300473045022100b13fe8f54cfb325c0dcfbd93cb9c235277cf9066398446c996f458e6979f40460220305c9ac63818573b5990238b4fc00e4d1294bc28cf40ffe9032ff71a109064a10076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165e6b4cea80000040300473045022100d2acbb6a091284e18287bcb90c2eb088fdfd7438b5fb9049206cff9c600035d602204ff6be82f123b0eed5b72ad19903956ceffe7fd11eb4b0e27089c3c0281b1d0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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