cedr.mfcr.cz

Issued by I.CA - Standard Certification Authority, 09/2009

About this certificate

This digital certificate with serial number 1f:75:9c was issued on by První certifikační autorita, a.s..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

As someone interested in digital certificates you will love EV SSL Certificates without the hessle, right? Easy, automated EV SSL Certificates for only € 99 ($ 121 or £ 87).


We have idenified some issues with this certificate:

  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certiifcate: authorityInformationAccess MUST be present, with the exception of stapling. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Česká republika - Ministerstvo financí

Company registration number: ICA - 729684
Organization: Česká republika - Ministerstvo financí
Locality: Letenská 15, Praha 1, 118 10
Country: CZ

První certifikační autorita, a.s.

Organization: První certifikační autorita, a.s.
Organization unit: I.CA - Provider of Certification Services
Country: CZ

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:75:9c
Serial Number (int): 2061724
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: ea:37:84:1b:bf:2c:01:cd:8d:7a:a4:ec:55:7c:ed:da:e9:97:90:b9
AuthorityKeyId: c1:4c:38:94:d5:80:86:48:d9:22:90:2c:d3:ee:19:10:db:67:47:87

Fingerprint (sha1): 92:6a:ac:17:a7:ae:c2:80:76:9c:e3:50:a1:b9:09:6b:d1:14:59:4a
Fingerprint (sha256): e1:d0:22:af:bd:ac:1a:97:46:13:77:ca:91:f5:90:84:c2:f3:a3:15:55:37:d4:9c:84:b0:c1:2b:9b:e4:68:31


Revocation information

CRL Distribution Point: http://scrldp1.ica.cz/sica09.crl
CRL Distribution Point: http://scrldp2.ica.cz/sica09.crl

Check the revocation status for the current certificate on cedr.mfcr.cz
0
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIEqjCCA5KgAwIBAgIDH3WcMA0GCSqGSIb3DQEBCwUAMIGrMQswCQYDVQQGEwJD WjE5MDcGA1UEAwwwSS5DQSAtIFN0YW5kYXJkIENlcnRpZmljYXRpb24gQXV0aG9y aXR5LCAwOS8yMDA5MS0wKwYDVQQKDCRQcnZuw60gY2VydGlmaWthxI1uw60gYXV0 b3JpdGEsIGEucy4xMjAwBgNVBAsMKUkuQ0EgLSBQcm92aWRlciBvZiBDZXJ0aWZp Y2F0aW9uIFNlcnZpY2VzMB4XDTE1MDQzMDExNDIyMVoXDTE2MDQyOTExNDIyMVow gZcxCzAJBgNVBAYTAkNaMRUwEwYDVQQDDAxjZWRyLm1mY3IuY3oxJjAkBgNVBAcM HUxldGVuc2vDoSAxNSwgUHJhaGEgMSwgMTE4IDEwMTIwMAYDVQQKDCnEjGVza8Oh IHJlcHVibGlrYSAtIE1pbmlzdGVyc3R2byBmaW5hbmPDrTEVMBMGA1UEBRMMSUNB IC0gNzI5Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww3ngwVp xpmaXpm3P5g4GcOwZX7kTD7hBiKyVbALNNmlQqoEAWGt/tj+jBQa2CpG41enIwxl QMK6MhjadiXW4h6S5wiEXI4dJtUuI1YmvWCJo8GitkUbQ4DsvkKFs0yr8sbDZ+W5 pZ0x+W1AUhS51QiV8VRC08BQozM5q1zDOtXE4UNb2y5kBf4uMVHuyaSu1g7jLc0W b7cmKZV3l96DY+hjiCgJobHEs5iJ8ptul5zBkagVCO4ua2/X+6VMo4zkXOOPtUu3 Y+2qUj33Oa6oGTREt6q0t0ZD744b//zI0xPEW0O6qeUasbTydYloapxSxUfwFmgd tNBiMBFtJKgQUwIDAQABo4HoMIHlMBwGA1UdEQQVMBOBEWRpc3BlY2lua0BtZmNy LmN6MA4GA1UdDwEB/wQEAwIE8DAfBgNVHSMEGDAWgBTBTDiU1YCGSNkikCzT7hkQ 22dHhzAdBgNVHQ4EFgQU6jeEG78sAc2NeqTsVXzt2umXkLkwGgYDVR0gBBMwETAP Bg0rBgEEAYG4SAEBPAMBMFkGA1UdHwRSMFAwJqAkoCKGIGh0dHA6Ly9zY3JsZHAx LmljYS5jei9zaWNhMDkuY3JsMCagJKAihiBodHRwOi8vc2NybGRwMi5pY2EuY3ov c2ljYTA5LmNybDANBgkqhkiG9w0BAQsFAAOCAQEALxSRizP/OJZUvb206BrJyWh4 8THQwzdOG14I/SE15h814ttUWQpDj5NRyzpr6z/Y+qHIsxMo5et1xs9FaPpTc26E MSp2GqaHCRHPflADcYX3RM1wAjVG3bHORRzlvdXTbnR0f37Wkw/r75u+onFUKM8r tJQ7WHL3mPAZBwvw6lQ9WhbuOR8sGUNoSUT5LOCGult/yGHwyEBdQ7yeeh6VMx0/ UZaFLV0dxp4/9dA5hypv6B3Mec3Vnc3m4jW3A/TyxvXqwVphyc+NJ+1jcYJ0H8Aw Vek/hGnl2WPHH2jqjiqCL7ofj77L+Led/A9jMobhXBbnM0eGW97wxHjt9kO9eA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww3ngwVpxpmaXpm3P5g4 GcOwZX7kTD7hBiKyVbALNNmlQqoEAWGt/tj+jBQa2CpG41enIwxlQMK6MhjadiXW 4h6S5wiEXI4dJtUuI1YmvWCJo8GitkUbQ4DsvkKFs0yr8sbDZ+W5pZ0x+W1AUhS5 1QiV8VRC08BQozM5q1zDOtXE4UNb2y5kBf4uMVHuyaSu1g7jLc0Wb7cmKZV3l96D Y+hjiCgJobHEs5iJ8ptul5zBkagVCO4ua2/X+6VMo4zkXOOPtUu3Y+2qUj33Oa6o GTREt6q0t0ZD744b//zI0xPEW0O6qeUasbTydYloapxSxUfwFmgdtNBiMBFtJKgQ UwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded