portal.ssc.avcr.cz

- Centre of Administration and Operations of the ASCR, v. v. i. -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number e1:57:43:98:b1:64:61:46:33:34:ce:86:86:98:49:85 was issued on by TERENA.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Centre of Administration and Operations of the ASCR, v. v. i.

Organization: Centre of Administration and Operations of the ASCR, v. v. i.
Country: CZ

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): e1:57:43:98:b1:64:61:46:33:34:ce:86:86:98:49:85
Serial Number (int): 299529399897322946921986725097149843845
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2e:6e:da:15:28:35:35:96:00:70:d7:a5:14:73:f4:03:27:80:2f:ee
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 01:2a:ec:40:93:68:90:37:2f:56:1b:6c:0b:a7:23:2a:13:f1:fa:1b
Fingerprint (sha256): 9c:74:1d:f5:cb:2d:c9:86:22:eb:d4:ff:72:44:50:3c:ca:03:6f:5d:5d:dd:f6:2b:b6:63:df:c2:05:34:2d:04

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate portal.ssc.avcr.cz

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.ssc.avcr.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.ssc.avcr.cz
anet.portal.kav.avcr.cz
anet.portal.ssc.avcr.cz
anet.portal.ssc.cas.cz
autodiscover.academia.cz
autodiscover.hq.ssc.cas.cz
autodiscover.kav.avcr.cz
autodiscover.kav.cas.cz
autodiscover.ssc.avcr.cz
autodiscover.ssc.cas.cz
autodiscover.vila-lanna.cz
autodiscover.zamek-liblice.cz
ifis.portal.kav.avcr.cz
ifis.portal.kav.cas.cz
ifis.portal.ssc.avcr.cz
ifis.portal.ssc.cas.cz
intranet.portal.academia.cz
intranet.portal.kav.avcr.cz
intranet.portal.kav.cas.cz
intranet.portal.ssc.avcr.cz
intranet.portal.ssc.cas.cz
intranet.portal.vila-lanna.cz
intranet.portal.zamek-liblice.cz
mail.academia.cz
mail.kav.avcr.cz
mail.kav.cas.cz
mail.portal.academia.cz
mail.portal.kav.avcr.cz
mail.portal.kav.cas.cz
mail.portal.ssc.avcr.cz
mail.portal.ssc.cas.cz
mail.portal.vila-lanna.cz
mail.portal.zamek-liblice.cz
mail.ssc.avcr.cz
mail.ssc.cas.cz
mail.vila-lanna.cz
mail.zamek-liblice.cz
place.portal.academia.cz
place.portal.kav.avcr.cz
place.portal.kav.cas.cz
place.portal.ssc.avcr.cz
place.portal.ssc.cas.cz
place.portal.vila-lanna.cz
place.portal.zamek-liblice.cz
portal.academia.cz
portal.hq.ssc.cas.cz
portal.kav.avcr.cz
portal.kav.cas.cz
portal.ssc.cas.cz
portal.vila-lanna.cz
portal.zamek-liblice.cz
portala.hq.ssc.cas.cz
portaloa.hq.ssc.cas.cz
portaloa.ssc.avcr.cz
portaloa.ssc.cas.cz
portaloab.hq.ssc.cas.cz
rd.academia.cz
rd.portal.kav.avcr.cz
rd.portal.kav.cas.cz
rd.portal.ssc.avcr.cz
rd.portal.ssc.cas.cz
rd.ssc.avcr.cz
verso.portal.kav.avcr.cz
verso.portal.kav.cas.cz
verso.portal.ssc.avcr.cz
verso.portal.ssc.cas.cz

Other certificates including the domain name avcr.cz

(limited to 100 certificates)
avcr.cz
strategie.avcr.cz
avcr.cz
academy2.cas.cz
mail.zamek-liblice.cz
eduroam2.ssc.avcr.cz
vpn.ssc.avcr.cz
vedeni-pracovist.avcr.cz
kit.avcr.cz
list.avcr.cz
kis.avcr.cz
orient.cas.cz
app.ssc.avcr.cz
list.avcr.cz
kis.avcr.cz
avcr.cz
kit.avcr.cz
vedrada.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
da.ssc.avcr.cz
www.tydenavcr.cz
s-drive.ssc.avcr.cz
list.avcr.cz
academy2.cas.cz
academy2.cas.cz
www.ssc.cas.cz
app.ssc.avcr.cz
app.ssc.avcr.cz
mail.ssc.avcr.cz
radius.ise.ssc.avcr.cz
mail.avcr.cz
ziva.avcr.cz
academy3.cas.cz
vpn-eis.ssc.avcr.cz
akademicky-snem.avcr.cz
isar.cas.cz
www.ibt.cas.cz
ziva.avcr.cz
portal.ssc.avcr.cz
smtp.ssc.avcr.cz
kit.avcr.cz
academy2.cas.cz
oeba.avcr.cz
orient.cas.cz
www.otevrenaveda.cz
academy5.avcr.cz
jola.ssc.avcr.cz
dotazniky.eis.cas.cz
www.tydenavcr.cz
vpn.ssc.avcr.cz
portal.ssc.avcr.cz
eduroam1.ssc.avcr.cz
strategie.avcr.cz
hoste.ise.ssc.avcr.cz
portal.ssc.avcr.cz
mail.ssc.avcr.cz
airwatch.ssc.avcr.cz
strategie.avcr.cz
vpn.ssc.avcr.cz
s-disk.ssc.avcr.cz
portal.ssc.avcr.cz
app.ssc.avcr.cz
*.ise.ssc.avcr.cz
academy5.avcr.cz
kis.avcr.cz
list.avcr.cz
mail.ssc.avcr.cz
vpn.ssc.avcr.cz
cms2.avcr.cz
app.ssc.avcr.cz
www.ei.cas.cz
avcr.cz
teater.arub.avcr.cz
portal.ssc.avcr.cz
arub.avcr.cz
www.otevrenaveda.cz
dspb.avcr.cz
smtp.ssc.avcr.cz
www.tydenavcr.cz
s-disk.ssc.avcr.cz
strategie.avcr.cz
mail.ssc.avcr.cz
cms2.avcr.cz
kis.avcr.cz
app3.ssc.avcr.cz
kis.avcr.cz
sponsor.ise.ssc.avcr.cz
www.ei.cas.cz
vpn.ssc.avcr.cz
mail.ssc.avcr.cz
academy2.cas.cz
list.avcr.cz
app2.ssc.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
academy2.cas.cz
academy2.cas.cz
rd.academia.cz

Certificate

The complete raw certificate details for portal.ssc.avcr.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0+lH52bLWZeMg+O+gM8
HajM/6kVg9pbco1gvbaS3h8et4iBUllWEZ0niF+PfkkolKoXYufsU1re/u+eSkxn
ZH8G2IStXrPGHgp3lfs1yC7L/jMZY8nKJ2YxqBv+vtuC7nMOulbIfV85gBAtt6lg
CuIkuJCSKwd5HmqION3UvNcNCyYLGZctTzyxNkT/rSdTcYg2YxUsmrbJ550/OGD2
JgARrZZC6XHB/NE02YW1vkMLNymjCqX79LPRmYxAYiQrDJA4KlQUS9tE1ymQgHni
R/S2pofJrJmLsmnXo/HA5ZY6MOOl7uKzlZFOp764PKr4Ce0nfu9jXCn5SoFdH78n
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299529399897322946921986725097149843845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centre of Administration and Operations of the ASCR, v. v. i.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.ssc.avcr.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22635931008941134342321518576588889390286249131832422777105432234435097716211263142074937724274437695480272863007776698484776315032028218892665966157210294270916057978944675272990961064601187807454343414327051209098353260580643454333656344450894998863182467874244666133075174910870852627432479225971518339121482984800691596140526153356192861807402967438029030210249167422149551429170858004611820637942482506864894799493332245428392793044126520671239846067717529774689035647465983668628362385613124442751926520195173086625451610974483715769594390726148561754389005742660998191221099158947595190642082866580388979877709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e6eda15283535960070d7a51473f40327802fee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anet.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anet.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anet.portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portala.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaloa.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaloa.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaloa.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaloab.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.ssc.cas.cz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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