portal.ssc.avcr.cz

- Stredisko spolecnych cinnosti AV CR, v. v. i. -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 33:b3:22:fe:ec:db:76:ce:bd:9e:d9:12:1c:ba:f8:cc was issued on by TERENA.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stredisko spolecnych cinnosti AV CR, v. v. i.

Organization: Stredisko spolecnych cinnosti AV CR, v. v. i.
Country: CZ

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 33:b3:22:fe:ec:db:76:ce:bd:9e:d9:12:1c:ba:f8:cc
Serial Number (int): 68720758721892024568808176685850228940
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 27:4a:92:19:c3:1a:ff:d3:70:c7:0d:55:a0:a5:3d:41:fa:48:15:fe
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 1a:97:f1:85:09:07:42:f1:cb:a9:d2:67:30:d0:ed:b4:44:ef:92:af
Fingerprint (sha256): c4:6c:a4:27:cc:4d:98:d9:24:de:6a:23:b0:fe:e3:5f:aa:0f:d4:7d:c6:52:5c:0b:fa:5b:db:c0:2b:0d:2c:d8

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate portal.ssc.avcr.cz

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.ssc.avcr.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.ssc.avcr.cz
anet.portal.kav.avcr.cz
anet.portal.ssc.avcr.cz
autodiscover.academia.cz
autodiscover.hotel-mazanka.cz
autodiscover.kav.avcr.cz
autodiscover.kav.cas.cz
autodiscover.penzion-marna.cz
autodiscover.penzion-sedlec.cz
autodiscover.praha.psu.cas.cz
autodiscover.ssc.avcr.cz
autodiscover.ssc.cas.cz
autodiscover.vila-lanna.cz
autodiscover.zamek-liblice.cz
autodiscover.zamek-trest.cz
ifis.portal.kav.avcr.cz
ifis.portal.praha.psu.cas.cz
ifis.portal.ssc.avcr.cz
intranet.portal.academia.cz
intranet.portal.kav.avcr.cz
intranet.portal.praha.psu.cas.cz
intranet.portal.ssc.avcr.cz
mail.academia.cz
mail.hotel-mazanka.cz
mail.kav.avcr.cz
mail.kav.cas.cz
mail.penzion-marna.cz
mail.penzion-sedlec.cz
mail.portal.academia.cz
mail.portal.kav.avcr.cz
mail.portal.praha.psu.cas.cz
mail.portal.ssc.avcr.cz
mail.praha.psu.cas.cz
mail.ssc.avcr.cz
mail.ssc.cas.cz
mail.vila-lanna.cz
mail.zamek-liblice.cz
mail.zamek-trest.cz
mailav.avcr.cz
maildan.avcr.cz
mailhq.avcr.cz
oa.avcr.cz
oaba.avcr.cz
oaia.avcr.cz
oeba.avcr.cz
place.portal.academia.cz
place.portal.kav.avcr.cz
place.portal.praha.psu.cas.cz
place.portal.ssc.avcr.cz
place.ssc.avcr.cz
portal.academia.cz
portal.kav.avcr.cz
portal.kav.cas.cz
portal.praha.psu.cas.cz
portal.psu.cas.cz
portal.ssc.cas.cz
rd.academia.cz
rd.kav.avcr.cz
rd.place.ssc.avcr.cz
rd.portal.academia.cz
rd.portal.kav.avcr.cz
rd.portal.praha.psu.cas.cz
rd.portal.ssc.avcr.cz
rd.ssc.avcr.cz
verso.portal.kav.avcr.cz
verso.portal.praha.psu.cas.cz
verso.portal.ssc.avcr.cz

Other certificates including the domain name avcr.cz

(limited to 100 certificates)
avcr.cz
strategie.avcr.cz
avcr.cz
academy2.cas.cz
mail.zamek-liblice.cz
eduroam2.ssc.avcr.cz
vpn.ssc.avcr.cz
vedeni-pracovist.avcr.cz
kit.avcr.cz
list.avcr.cz
kis.avcr.cz
orient.cas.cz
app.ssc.avcr.cz
list.avcr.cz
kis.avcr.cz
avcr.cz
kit.avcr.cz
vedrada.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
da.ssc.avcr.cz
www.tydenavcr.cz
s-drive.ssc.avcr.cz
list.avcr.cz
academy2.cas.cz
academy2.cas.cz
www.ssc.cas.cz
app.ssc.avcr.cz
app.ssc.avcr.cz
mail.ssc.avcr.cz
radius.ise.ssc.avcr.cz
mail.avcr.cz
ziva.avcr.cz
academy3.cas.cz
vpn-eis.ssc.avcr.cz
akademicky-snem.avcr.cz
isar.cas.cz
www.ibt.cas.cz
ziva.avcr.cz
portal.ssc.avcr.cz
smtp.ssc.avcr.cz
kit.avcr.cz
academy2.cas.cz
oeba.avcr.cz
orient.cas.cz
www.otevrenaveda.cz
academy5.avcr.cz
jola.ssc.avcr.cz
dotazniky.eis.cas.cz
www.tydenavcr.cz
vpn.ssc.avcr.cz
portal.ssc.avcr.cz
eduroam1.ssc.avcr.cz
strategie.avcr.cz
hoste.ise.ssc.avcr.cz
portal.ssc.avcr.cz
mail.ssc.avcr.cz
airwatch.ssc.avcr.cz
strategie.avcr.cz
vpn.ssc.avcr.cz
s-disk.ssc.avcr.cz
portal.ssc.avcr.cz
app.ssc.avcr.cz
*.ise.ssc.avcr.cz
academy5.avcr.cz
kis.avcr.cz
list.avcr.cz
mail.ssc.avcr.cz
vpn.ssc.avcr.cz
cms2.avcr.cz
app.ssc.avcr.cz
www.ei.cas.cz
avcr.cz
teater.arub.avcr.cz
portal.ssc.avcr.cz
arub.avcr.cz
www.otevrenaveda.cz
dspb.avcr.cz
smtp.ssc.avcr.cz
www.tydenavcr.cz
s-disk.ssc.avcr.cz
strategie.avcr.cz
mail.ssc.avcr.cz
cms2.avcr.cz
kis.avcr.cz
app3.ssc.avcr.cz
kis.avcr.cz
sponsor.ise.ssc.avcr.cz
www.ei.cas.cz
vpn.ssc.avcr.cz
mail.ssc.avcr.cz
academy2.cas.cz
list.avcr.cz
app2.ssc.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
academy2.cas.cz
academy2.cas.cz
rd.academia.cz

Certificate

The complete raw certificate details for portal.ssc.avcr.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT8FvmVt9KiWGAj46jhJ
BB+cZfrW0lyY3pPFWM+3QPrVGr/1TX/5vMOgvikfXyoa8/UE7/BrSCLQQx1cbZtu
Bfp6qzki25ThtuLpdSGV0klrvGG46npunYIimbXKtuWn/Ga0r9gflrSLCofc3qZp
jyb13KaeS6tivKTMIWutFCTNHZoj8GgQ/xnHscMB2dNrVxkK91N4AocioDp7QXK0
64FYnpOqI/v+srTdf06pJ3htdvj3dRXZsDs5LE6UcQoEeAZGCbL2uCMrsl+HPeSZ
+D2jKuQ+O1p2oQO8s9wIF2KJ3gOUNvZPlml1hXDe20V0lWen93phNxk8J3OFs7TY
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68720758721892024568808176685850228940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stredisko spolecnych cinnosti AV CR, v. v. i.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.ssc.avcr.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25404976819874062229411084124554720001044811579691942237704501744218462366059413987210463742370595417948922415792085192512317822980129140101820525002220247836836824178329865229906375053239193878286446860545555383890708847177042345627159035781215206912602233202627577099746285784996924928640708466911276776057733850403656849646340183206159427969790837841634650821123275994993449656274981183441641675926036995297522643770845883054217680324014812363512793263376828448688562111532393082679036419988769961200815439689833757311191251536702076054171725729632727625177687220551840842069947335452420194142666292799959811283159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							274a9219c31affd370c70d55a0a53d41fa4815fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1569 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anet.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anet.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hotel-mazanka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.penzion-marna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.penzion-sedlec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zamek-trest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotel-mazanka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.penzion-marna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.penzion-sedlec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zamek-trest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maildan.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhq.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaba.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaia.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oeba.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.place.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.ssc.avcr.cz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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