*.dialtelecom.cz
- Dial Telecom a.s. [IČ 28175492] -
Issued by PostSignum Public CA 2
About this certificate
This digital certificate with serial number 0b:54:9d was issued on by Česká pošta, s.p. [IČ 47114983].
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Dial Telecom a.s. [IČ 28175492]
Company registration number:
D259271
Organization: Dial Telecom a.s. [IČ 28175492]
Organization unit: Dial Telecom, a.s.
Organization: Dial Telecom a.s. [IČ 28175492]
Organization unit: Dial Telecom, a.s.
Country:
CZ
Česká pošta, s.p. [IČ 47114983]
Organization:
Česká pošta, s.p. [IČ 47114983]
Country:
CZ
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:54:9dSerial Number (int): 742557
Serial Number lenght: 20 bits, 3 octets
SubjectKeyId: 24:d3:02:82:5c:0f:93:c3:4a:1d:70:4e:e8:70:63:92:b6:23:de:1a
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1
Fingerprint (sha1): 2b:7a:c8:84:b9:4e:d7:59:34:8c:ee:5a:e3:66:6c:38:35:e6:a9:7d
Fingerprint (sha256): b5:ce:b5:3e:fa:4d:0b:27:3e:63:d2:0a:f5:dc:9c:92:f7:e1:35:d4:2b:7e:2c:16:ed:04:05:31:7e:f8:89:98
Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt
Revocation information
OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl
Check the revocation status for certificate *.dialtelecom.cz
0
DNS Names
1
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.dialtelecom.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
[email protected]
Other certificates including the domain name dialtelecom.cz
(limited to 100 certificates)
dialtelecom.cz
cloud.dialtelecom.cz
mail-new.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
*.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
exchange.gigant.cz
mail-new.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
exchange.gigant.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
smtp-out.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
speedtest.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
*.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
exchange.gigant.cz
exchange.gigant.cz
webex-meetings.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
mail-new.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
*.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
exchange.gigant.cz
mail-new.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
exchange.gigant.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
smtp-out.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
dialtelecom.cz
speedtest.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
*.dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
dialtelecom.cz
mail.dialtelecom.cz
exchange.gigant.cz
exchange.gigant.cz
webex-meetings.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
cloud.dialtelecom.cz
dialtelecom.cz
cloud.dialtelecom.cz
mail.dialtelecom.cz
mail.dialtelecom.cz
Certificate
The complete raw certificate details for *.dialtelecom.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIDC1SdMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAkNa MSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQ3MTE0OTgzXTEf MB0GA1UEAxMWUG9zdFNpZ251bSBQdWJsaWMgQ0EgMjAeFw0xNTAxMDcxMjU5MjNa Fw0xODAxMjYxMjU5MjNaMIGCMQswCQYDVQQGEwJDWjEpMCcGA1UECgwgRGlhbCBU ZWxlY29tIGEucy4gW0nEjCAyODE3NTQ5Ml0xGzAZBgNVBAsTEkRpYWwgVGVsZWNv bSwgYS5zLjEZMBcGA1UEAwwQKi5kaWFsdGVsZWNvbS5jejEQMA4GA1UEBRMHRDI1 OTI3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK73kCuBatooWPnj Sb6KZe0yyy5qQLa+L5tyMIf6jxmWP1YBn5yBQPTZI0kDdp6M4p0qPN4HUq+sEAem yaspnL1p9hjzHn27h14ZTJTftDs1AilELp6E17uL1jgEjjQj2+YyHaVFOjsDSmJR tdL34wvysEwmfVdJCpd6zuvEsrsc85ZCf9Rd0LtNZhIpgiDs132lL4J9gAZJtoug 135T2IxG3Wm3BDccj8nhY+Hpx9iyp/ovrw9x1WP2WCQ2V3eyI7uY9RKJ/5yywlmX bGnxrJTOl1JdNjlHpgOjodCzLY3lsDZe6q69lKA/enl+FBhWTVQH9fbtKbaP8ycs EsrwcrECAwEAAaOCAokwggKFMCkGA1UdEQQiMCCBE2lzaXRAZGlhbHRlbGVjb20u Y3qgCQYDVQQNoAITADA+BgNVHSAENzA1MDMGCWeBBgECAQmBSDAmMCQGCCsGAQUF BwIBFhhodHRwOi8vd3d3LnBvc3RzaWdudW0uY3owgf0GCCsGAQUFBwEBBIHwMIHt MDgGCCsGAQUFBzAChixodHRwOi8vd3d3LnBvc3RzaWdudW0uY3ovY3J0L3BzcHVi bGljY2EyLmNydDA5BggrBgEFBQcwAoYtaHR0cDovL3d3dzIucG9zdHNpZ251bS5j ei9jcnQvcHNwdWJsaWNjYTIuY3J0MDgGCCsGAQUFBzAChixodHRwOi8vcG9zdHNp Z251bS50dGMuY3ovY3J0L3BzcHVibGljY2EyLmNydDA8BggrBgEFBQcwAYYwaHR0 cDovL29jc3AucG9zdHNpZ251bS5jei9PQ1NQL1ZDQTIvT0NTUF9wdWJsaWMvMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD VR0jBBgwFoAUSO8+1OqJiaPp4j/b74xCsQr4yNEwgagGA1UdHwSBoDCBnTAyoDCg LoYsaHR0cDovL3d3dy5wb3N0c2lnbnVtLmN6L2NybC9wc3B1YmxpY2NhMi5jcmww M6AxoC+GLWh0dHA6Ly93d3cyLnBvc3RzaWdudW0uY3ovY3JsL3BzcHVibGljY2Ey LmNybDAyoDCgLoYsaHR0cDovL3Bvc3RzaWdudW0udHRjLmN6L2NybC9wc3B1Ymxp Y2NhMi5jcmwwHQYDVR0OBBYEFCTTAoJcD5PDSh1wTuhwY5K2I94aMA0GCSqGSIb3 DQEBCwUAA4IBAQAmBM3O0bPa9tAHXY1GvwTdxQEKB95GnK5xurBzu/y8Q8F52Z2b hpa9GCFvgO3WQw5mWJPd9EdTqttyx1y0aQWCS60wPRjNl37W+5Y69nhPgHpByoQx nVTIgYiv8iAuTpKjjAJfu1/1NbM6inw/g6ENPoyGQLKFgb0k9rdiFsiPpnoppP6m uqAPnBw3Gy1Qt3gq9uUscmKJswwbtRiz1VbMfpUF+TFRPkb6KkfBqj+DYzcerIet rPJYODin34/4Ho5C/ruPIMLTPI2y60DZYBCbNPMb5eBHcz4S+aPnfMEPuchvUIoy C3qU2Tg8B3mnx8SPc7ePavBNAw7GBWL+DRRG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArveQK4Fq2ihY+eNJvopl 7TLLLmpAtr4vm3Iwh/qPGZY/VgGfnIFA9NkjSQN2nozinSo83gdSr6wQB6bJqymc vWn2GPMefbuHXhlMlN+0OzUCKUQunoTXu4vWOASONCPb5jIdpUU6OwNKYlG10vfj C/KwTCZ9V0kKl3rO68SyuxzzlkJ/1F3Qu01mEimCIOzXfaUvgn2ABkm2i6DXflPY jEbdabcENxyPyeFj4enH2LKn+i+vD3HVY/ZYJDZXd7Iju5j1Eon/nLLCWZdsafGs lM6XUl02OUemA6Oh0LMtjeWwNl7qrr2UoD96eX4UGFZNVAf19u0pto/zJywSyvBy sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 742557 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-07 12:59:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 12:59:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dial Telecom a.s. [IČ 28175492]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dial Telecom, a.s.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dialtelecom.cz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D259271' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22087543010091951876191982374261050478387127559210187490232628475932411631898557126616849688571913692382852857148141975732233195734635290533155920576843550809774079546444363086170129693955064901917750225180560530585716642247819694079331614485912259688604738276863929289612962150450421385197563153612442095152458380223099683489316683234953178619865262281343185609364042831916133313308117168929512219633217681950833443824386776713232855621247256241637734546913193382439669356423735936601025056904509065707631004548683629987085206576950157982025352278178923759798347607534107557330649098450028444888261656937958820836017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.200 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 24d302825c0f93c34a1d704ee8706392b623de1a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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