benefit-plus.cz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number bf:8d:d6:7c:8e:8d:4c:f6:09:51:d3:22:0f:45:a4:06 was issued on by Google Trust Services LLC.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=benefit-plus.cz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): bf:8d:d6:7c:8e:8d:4c:f6:09:51:d3:22:0f:45:a4:06
Serial Number (int): 254619011356037369020118487468022801414
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 58:b6:5a:43:b7:c3:f0:ab:6a:15:33:b6:b1:bc:ac:97:8f:6a:de:59
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 95:ae:0b:88:40:26:1d:61:16:7c:8e:68:01:10:4b:cd:8c:97:f9:46
Fingerprint (sha256): b2:81:9c:e8:97:81:89:09:f4:a4:be:df:9f:d8:b0:bd:76:7c:b1:c7:fd:dd:3b:17:cc:38:8f:5b:31:2e:45:36

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Hv8BuDoIdIs
CRL Distribution Point: http://crls.pki.goog/gts1d4/olIi_uDXrtY.crl

Check the revocation status for certificate benefit-plus.cz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benefit-plus.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benefit-plus.cz
api.benefit-plus.cz
www.benefit-plus.cz

Other certificates including the domain name benefit-plus.cz

(limited to 100 certificates)
mail.benefit-plus.cz
inside.benefit-plus.eu
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefit-plus.cz
card.benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefitplus.sprinx.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefitplus.sprinx.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefitplus.sprinx.cz
benefit-plus.cz
benefitplus.sprinx.cz
bmdataservice.benefit-plus.cz

Certificate

The complete raw certificate details for benefit-plus.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYjqFLuZ7Hvzgr+LoG0T
EcL2X9IRvHsz/R6RO12NfBdUx8Xk2l+4tGo5lzn2kSzPvq63BgDEkALCBEIplnb0
5KczpJmvCiGaSUDAR0y+/WWe530keuHaL9oDF+ZCUGCtcgZtTLVD0loVdp1KhJiN
YwS6+7raY9QFbY8kBWqArfw0PR6s0Vy2IcrtM/Kbf5h2q3DmWYPgMkg+aFXMVCMx
Fwg1BHhxa5XZeWRdqjWXzMbQNiv6LIBdXqmIHL5f/ocs8SBFNG1PiA5lJ370bsO1
3Fe0G4mkoBLdHs0LB73HerbAxfJFUDN7+CsrMd60GpVdLiBv79LlR6cfBvHYuF3r
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254619011356037369020118487468022801414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 05:43:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 06:37:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benefit-plus.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25946367514575124228125995968453874312835075236479416606209063574925382462071227525908848651571112834833193588728303353106038913215302128618893150950620218335831569226682540387170418031775333315031976897352311576244577563646491722650113555600330894062951295193385334710178592351773183298144308828393159905498449118276176822732861700210556484187991760452855878584639406703154423286360100314605996111666346799239612972707900670900501450338663119511287240834484175033864947379297381790793528303271968034366851065651172336897950064901586822215236906636537963445906461991337808541965804930713321430422958259791901935659943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58b65a43b7c3f0ab6a1533b6b1bcac978f6ade59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Hv8BuDoIdIs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/olIi_uDXrtY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d9c0e29a80000040300473045022007444ae186ef3a5b67f8ccf552821179bfbbce5bfbb277c14e88d9af8c3ecaab022100fee16421a7f42ea772617a51db6c6a0e18352993264290c3ad54404243368e3300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9c0e2992000004030047304502206a2e8be310d3a7d19b67cb5ed1ff33283558e2eb55d406aef61846234a5a90d1022100dcde0b02df803e8afb06d15e925d89dd29e5ced1c086c95abe2a128eefeb57d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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