fw.compet.cz

- Česká republika, Úřad pro ochranu hospodářské soutěže -

Issued by PostSignum Public CA 5

About this certificate

This digital certificate with serial number a7:fb:c1 was issued on by Česká pošta, s.p..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Česká republika, Úřad pro ochranu hospodářské soutěže

Company registration number: D6638
Organization: Česká republika, Úřad pro ochranu hospodářské soutěže
Locality: Brno
Country: CZ

Česká pošta, s.p.

Organization: Česká pošta, s.p.
Country: CZ

This certificate will expire on

Certificate Details

Serial Number (hex): a7:fb:c1
Serial Number (int): 11008961
Serial Number lenght: 24 bits, 3 octets

SubjectKeyId: 32:bc:ac:3f:65:29:92:fd:22:79:72:06:9b:40:49:c2:1b:6d:9c:eb
AuthorityKeyId: e3:ce:31:51:f3:4c:91:f5:7d:b7:05:89:b1:78:d0:a3:0a:c6:43:99

Fingerprint (sha1): 11:d3:51:74:c7:bf:12:8a:f9:35:3a:14:dd:51:43:b8:7e:b6:04:36
Fingerprint (sha256): a0:18:3d:94:1f:45:5e:9d:16:5e:50:f8:20:55:fc:30:07:bb:3e:c5:37:f4:cf:c0:a4:cd:02:dc:b9:93:eb:78

Issuing Certificate URL: http://crt.postsignum.cz/crt/pspublicca5.crt

Revocation information

OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA5/
CRL Distribution Point: http://crl.postsignum.cz/crl/pspublicca5.crl
CRL Distribution Point: http://crl2.postsignum.cz/crl/pspublicca5.crl
CRL Distribution Point: http://crl.postsignum.eu/crl/pspublicca5.crl

Check the revocation status for certificate fw.compet.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fw.compet.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fw.compet.cz

Other certificates including the domain name compet.cz

(limited to 100 certificates)
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
fw.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
fw.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
mail.uohs.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
compet.cz
awuohs.compet.cz

Certificate

The complete raw certificate details for fw.compet.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11008961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCZ-47114983'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 10:28:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-05 10:28:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTRCZ-65349423'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká republika, Úřad pro ochranu hospodářské soutěže'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fw.compet.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D6638'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758429383336299962472402673635672770773425257676713115791847183272083852059937619029087367612542346557337326329550574173095650690016689602577347129373572294451385506536162923073623829033579005368047220827409179483219655123003875571104308404490666416420339603614593563476013450543565145953486399190464679326384680305097558835591612621081369746270618898092340440245345927690296029008574563322150119382521906486566593619782101805001229483931094774153951875030895241974796684203712634495495944909074946098375492089211291072018248436949595916412486775889114402398322904727431658061869813209753419525681300655763821796795434792139325614564422410246768501521945094472152818387737295533100006349384650620530123742210740716469523688022876000336544533720077396481305601449565655014763687424029386414942025627629553161296528231920731754270558732209576604498209175478541495595709909933831587435437484048995101240975733019670451917992940699807179520991280279516303412910471650690053124373822953978500926767484100710158878492040056113579809615301673259912186901454811510614923918469212553358028504526972662479782319566893187474806874090099791328622416217905315063301205317926979782319140198919290196197883772093390793232283298951431602352459615101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw.compet.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.500
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.postsignum.cz/crt/pspublicca5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA5/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e3ce3151f34c91f57db70589b178d0a30ac64399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.postsignum.cz/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.postsignum.cz/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.postsignum.eu/crl/pspublicca5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32bcac3f652992fd227972069b4049c21b6d9ceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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