www.bsshop.cz

- BSSHOP s. r. o. -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 78:52:a3:09:ea:60:6c:ba:24:d4:41:b3:52:eb:14:d8 was issued on by GeoTrust Inc..

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BSSHOP s. r. o.

Organization: BSSHOP s. r. o.
Organization unit: Internet
State / Province: Trutnov
Locality: Trutnov
Country: CZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:52:a3:09:ea:60:6c:ba:24:d4:41:b3:52:eb:14:d8
Serial Number (int): 159936434654944681090860606109396964568
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 03:cd:8b:f4:92:03:17:e0:79:0e:c7:9d:a3:8c:55:6d:2a:85:ae:34
Fingerprint (sha256): b9:78:f6:e7:b5:b8:63:22:38:99:8a:4a:3b:99:4a:f4:bb:a7:a6:29:e7:b1:03:52:c7:08:f3:13:e6:d5:f1:b2

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate www.bsshop.cz

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bsshop.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.a-mania.cz
www.zlatykapr.cz
www.paradivka.cz
www.iobaly.sk
www.strechylevne.cz
www.veratex.eu
www.obaly.cz
www.awashop.cz
www.aaaradiatory.cz
m.aaaradiatory.cz
www.eben-kovani.cz
www.tazne.cz
m.tazne.cz
m.bikero.cz
www.bikero.cz
www.veratex.cz
www.total-store.sk
www.awashop.sk
m.eshop-zemedelske-potreby.cz
www.eshop-zemedelske-potreby.cz
www.elektro-trutnov.cz
www.e-prefa.cz
www.drive-rite.cz
m.hs-sport.cz
www.hs-sport.cz
www.alsap.cz
m.alsap.cz
www.total-store.cz
www.bio-natural.cz
m.bio-natural.cz
www.runfit.sk
www.condi.cz
www.bsstyle.cz
m.bsstyle.cz
www.neobuto.cz
m.neobuto.cz
m.nejlepsikocarky.cz
www.nejlepsikocarky.cz
m.cyklovape.cz
www.cyklovape.cz
www.paradnicka.sk
www.a-mania.sk
www.exo-eko.cz
m.exo-eko.cz
www.bscom.eu
m.bscom.eu
eshop.3dfitness.cz
www.eben-kovani.sk
m.cdp.cz
www.cdp.cz
www.ringit.sk
www.harera.cz
m.hs-sport.sk
www.hs-sport.sk
m.priletime.cz
www.priletime.cz
www.ringit.cz
www.runfit.cz
www.elektrochram.cz
www.bsstyle.sk
m.bsstyle.sk
www.greenpets.cz
m.greenpets.cz
m.bikero.sk
www.bikero.sk
www.harera.sk
b2b.rbmedilek.cz
www.temposport.cz
b2b.temposport.cz
m.karcher-chemiestar.cz
www.karcher-chemiestar.cz
www.cdp-pelety.sk
m.cdp-pelety.sk
oemvwshop.com
m.oemvwshop.com
www.oemvwshop.com
servis.bscom.cz
www.bscom.cz
m.bscom.cz
www.bsshop.cz
bsshop.cz

Other certificates including the domain name bsshop.cz

(limited to 100 certificates)
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
knowledge.horny.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
m.0407-ru.sites.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
*.sites.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
podpora.bsshop.cz
www.bsshop.cz
m.0407-ru.sites.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
m.0407-ru.sites.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
demo.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz
www.bsshop.cz

Certificate

The complete raw certificate details for www.bsshop.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMOTCCCyGgAwIBAgIQeFKjCepgbLok1EGzUusU2DANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzAxMTkwMDAwMDBaFw0xOTA1MDEy
MzU5NTlaMHYxCzAJBgNVBAYTAkNaMRAwDgYDVQQIDAdUcnV0bm92MRAwDgYDVQQH
DAdUcnV0bm92MRgwFgYDVQQKDA9CU1NIT1Agcy4gci4gby4xETAPBgNVBAsMCElu
dGVybmV0MRYwFAYDVQQDDA13d3cuYnNzaG9wLmN6MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1Zmos4lwnDs4MRP8YjgcZ0jiCNR7ScxLKAkWDDoRrEl1
ZY6elC57WxRwUdwayBwvlHW8X1o+0nzQ89MAx3fIyRNDeS/SbLHfJScMJKHCg3R0
f3TTJw5BZqHWFrM2fsXYVa0QusMlJ5BdyB72nO6K/pwacWfDKyupH2Wdq9qNpat2
Ib7kHsWWmdc7ZydK9I6bwEOQEhLIWMTiC8yskVCkUpXS18Euk6FJRTcA9nSBDRgb
5R5c2MFUA+t0nKrTKOIrScpz6UoGqmrvKhjxBiFOFfYMaqbi3t8jnAIYVdFVXmRu
ax7Nfp00/sxd0RpxSdX+HOaqVe8twU3cDncVXVUd6wIDAQABo4II8TCCCO0wggVw
BgNVHREEggVnMIIFY4IOd3d3LmEtbWFuaWEuY3qCEHd3dy56bGF0eWthcHIuY3qC
EHd3dy5wYXJhZGl2a2EuY3qCDXd3dy5pb2JhbHkuc2uCE3d3dy5zdHJlY2h5bGV2
bmUuY3qCDnd3dy52ZXJhdGV4LmV1ggx3d3cub2JhbHkuY3qCDnd3dy5hd2FzaG9w
LmN6ghN3d3cuYWFhcmFkaWF0b3J5LmN6ghFtLmFhYXJhZGlhdG9yeS5jeoISd3d3
LmViZW4ta292YW5pLmN6ggx3d3cudGF6bmUuY3qCCm0udGF6bmUuY3qCC20uYmlr
ZXJvLmN6gg13d3cuYmlrZXJvLmN6gg53d3cudmVyYXRleC5jeoISd3d3LnRvdGFs
LXN0b3JlLnNrgg53d3cuYXdhc2hvcC5za4IdbS5lc2hvcC16ZW1lZGVsc2tlLXBv
dHJlYnkuY3qCH3d3dy5lc2hvcC16ZW1lZGVsc2tlLXBvdHJlYnkuY3qCFnd3dy5l
bGVrdHJvLXRydXRub3YuY3qCDnd3dy5lLXByZWZhLmN6ghF3d3cuZHJpdmUtcml0
ZS5jeoINbS5ocy1zcG9ydC5jeoIPd3d3LmhzLXNwb3J0LmN6ggx3d3cuYWxzYXAu
Y3qCCm0uYWxzYXAuY3qCEnd3dy50b3RhbC1zdG9yZS5jeoISd3d3LmJpby1uYXR1
cmFsLmN6ghBtLmJpby1uYXR1cmFsLmN6gg13d3cucnVuZml0LnNrggx3d3cuY29u
ZGkuY3qCDnd3dy5ic3N0eWxlLmN6ggxtLmJzc3R5bGUuY3qCDnd3dy5uZW9idXRv
LmN6ggxtLm5lb2J1dG8uY3qCFG0ubmVqbGVwc2lrb2Nhcmt5LmN6ghZ3d3cubmVq
bGVwc2lrb2Nhcmt5LmN6gg5tLmN5a2xvdmFwZS5jeoIQd3d3LmN5a2xvdmFwZS5j
eoIRd3d3LnBhcmFkbmlja2Euc2uCDnd3dy5hLW1hbmlhLnNrgg53d3cuZXhvLWVr
by5jeoIMbS5leG8tZWtvLmN6ggx3d3cuYnNjb20uZXWCCm0uYnNjb20uZXWCEmVz
aG9wLjNkZml0bmVzcy5jeoISd3d3LmViZW4ta292YW5pLnNrgghtLmNkcC5jeoIK
d3d3LmNkcC5jeoINd3d3LnJpbmdpdC5za4INd3d3LmhhcmVyYS5jeoINbS5ocy1z
cG9ydC5za4IPd3d3LmhzLXNwb3J0LnNrgg5tLnByaWxldGltZS5jeoIQd3d3LnBy
aWxldGltZS5jeoINd3d3LnJpbmdpdC5jeoINd3d3LnJ1bmZpdC5jeoITd3d3LmVs
ZWt0cm9jaHJhbS5jeoIOd3d3LmJzc3R5bGUuc2uCDG0uYnNzdHlsZS5za4IQd3d3
LmdyZWVucGV0cy5jeoIObS5ncmVlbnBldHMuY3qCC20uYmlrZXJvLnNrgg13d3cu
YmlrZXJvLnNrgg13d3cuaGFyZXJhLnNrghBiMmIucmJtZWRpbGVrLmN6ghF3d3cu
dGVtcG9zcG9ydC5jeoIRYjJiLnRlbXBvc3BvcnQuY3qCF20ua2FyY2hlci1jaGVt
aWVzdGFyLmN6ghl3d3cua2FyY2hlci1jaGVtaWVzdGFyLmN6ghF3d3cuY2RwLXBl
bGV0eS5za4IPbS5jZHAtcGVsZXR5LnNrgg1vZW12d3Nob3AuY29tgg9tLm9lbXZ3
c2hvcC5jb22CEXd3dy5vZW12d3Nob3AuY29tgg9zZXJ2aXMuYnNjb20uY3qCDHd3
dy5ic2NvbS5jeoIKbS5ic2NvbS5jeoINd3d3LmJzc2hvcC5jeoIJYnNzaG9wLmN6
MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0
dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAEC
AjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291
cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3
Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUFGeO7YNP1h6dQAQM
BEahcDSyD3IwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ2ou
c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ2ouc3ltY2IuY29tL2dqLmNy
dDCCAfQGCisGAQQB1nkCBAIEggHkBIIB4AHeAHYA3esdK3oNT6Ygi4GtgWhwfi6O
nQHVXIiNPRHEzbbsvswAAAFZt0uiPgAABAMARzBFAiEArjLH/GPDTAFC6liEI9sP
GWKY+Qs5mBLQ9n4oqzGD4EcCIHD7YPvfzfHAiCk0LvgdAELm9wzMux8kzkyo/es6
zcbFAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFZt0uiXwAA
BAMARzBFAiBjfISCiTirGhRgtCzB/yFOT/VSsByjwSpWJ0Y+I4bEMgIhAP8/QMWr
nx6bWyzlTeEJEBCPQWKkmnLl2sd0QlC9iPCsAHUAvHjh38X2PGhGSTNNoQ+hXwl5
aSAJwIG08/aRfz7ZuKUAAAFZt0ujegAABAMARjBEAiARvfV3N7AGXZ9+IDMm/6jJ
txDT9oorHl5K8zihKia9QQIgaLS38VnZsBMJqM71B9S3aH6P+FB8w2Pvf8li4eIF
9dcAdQC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAVm3S6JYAAAE
AwBGMEQCICIb1LFS7BPEWvG1/FMIz0ulUIbUuwwT1dCDX39HR/fxAiAHEgs0dKp8
qIChXJeK0vqEePZ0FsclxEhS4k7lqjW28zANBgkqhkiG9w0BAQsFAAOCAQEAGHG9
SAo/kUcQ44Yx9MdFM/9+DBRNdAd3WqlAIDUZm6LbtRTeVPkbudsZZMZZWgADlK4m
xjF9GF/uSZzGDXltScgjCYvAyzDym4BfXFwwdZRaV9blrjs51iVsH2NcbbaF+gFl
r9rKtUDtyK0Y/OQJwPW8rXekiYEG5yc+cR8S9vwlLnYyB+VGOuRDusNRVhI0qkCE
WdlGSGYZGITgh8x4Km7moTbHiRdz4bq1X0u99C9TtlRPh3rGt/zfF3xndj4/Mib3
ucNcjt7MqWHv5qoZdXt9lwDxd1x6jh/iww5qz4DCWfDyVuSYXtEET+C4vOH3EcF6
zimR4VClUdg069CZEw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zmos4lwnDs4MRP8Yjgc
Z0jiCNR7ScxLKAkWDDoRrEl1ZY6elC57WxRwUdwayBwvlHW8X1o+0nzQ89MAx3fI
yRNDeS/SbLHfJScMJKHCg3R0f3TTJw5BZqHWFrM2fsXYVa0QusMlJ5BdyB72nO6K
/pwacWfDKyupH2Wdq9qNpat2Ib7kHsWWmdc7ZydK9I6bwEOQEhLIWMTiC8yskVCk
UpXS18Euk6FJRTcA9nSBDRgb5R5c2MFUA+t0nKrTKOIrScpz6UoGqmrvKhjxBiFO
FfYMaqbi3t8jnAIYVdFVXmRuax7Nfp00/sxd0RpxSdX+HOaqVe8twU3cDncVXVUd
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159936434654944681090860606109396964568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trutnov'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trutnov'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BSSHOP s. r. o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Internet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bsshop.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26964531029564269935822984789865036116912839514542415553819176706364272676695197317606532210805652141235695371874293250781690584421688288618471928525753941755013092815164691950429383705145444813574262555896951877311386129084259986154843099455531751975221083286999316425597024328609473947679357958832266905272842875779481011705172647569719501265838374913846573190951897384168522022768782106333975719592321237492886332799653397937027045821467645291170840930526749132261218107345637025703907552482519488335066204067200458516048264695615123185761921674616174120149979386811800198143118585888473892685243157003986091187691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-mania.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zlatykapr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradivka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iobaly.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strechylevne.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veratex.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obaly.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awashop.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaradiatory.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.aaaradiatory.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eben-kovani.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tazne.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tazne.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bikero.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikero.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veratex.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.total-store.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awashop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.eshop-zemedelske-potreby.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eshop-zemedelske-potreby.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektro-trutnov.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-prefa.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drive-rite.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hs-sport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hs-sport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alsap.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.alsap.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.total-store.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bio-natural.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bio-natural.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runfit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.condi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsstyle.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bsstyle.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neobuto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.neobuto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.nejlepsikocarky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nejlepsikocarky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cyklovape.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyklovape.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradnicka.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-mania.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exo-eko.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.exo-eko.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bscom.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bscom.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.3dfitness.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eben-kovani.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cdp.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdp.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ringit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harera.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hs-sport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hs-sport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.priletime.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priletime.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ringit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runfit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektrochram.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsstyle.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bsstyle.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenpets.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.greenpets.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bikero.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikero.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harera.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.rbmedilek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temposport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.temposport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.karcher-chemiestar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karcher-chemiestar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdp-pelety.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cdp-pelety.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oemvwshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.oemvwshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oemvwshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servis.bscom.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bscom.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bscom.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsshop.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsshop.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159b74ba23e0000040300473045022100ae32c7fc63c34c0142ea588423db0f196298f90b399812d0f67e28ab3183e047022070fb60fbdfcdf1c08829342ef81d0042e6f70cccbb1f24ce4ca8fdeb3acdc6c5007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159b74ba25f00000403004730450220637c84828938ab1a1460b42cc1ff214e4ff552b01ca3c12a5627463e2386c432022100ff3f40c5ab9f1e9b5b2ce54de10910108f4162a49a72e5dac7744250bd88f0ac007500bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a500000159b74ba37a0000040300463044022011bdf57737b0065d9f7e203326ffa8c9b710d3f68a2b1e5e4af338a12a26bd41022068b4b7f159d9b01309a8cef507d4b7687e8ff8507cc363ef7fc962e1e205f5d7007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000159b74ba25800000403004630440220221bd4b152ec13c45af1b5fc5308cf4ba55086d4bb0c13d5d0835f7f4747f7f1022007120b3474aa7ca880a15c978ad2fa8478f67416c725c44852e24ee5aa35b6f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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