*.szu.cz

- Státní zdravotní ústav, příspěvková organizace [IČ 75010330] -

Issued by PostSignum Public CA 2

About this certificate

This digital certificate with serial number 0c:96:21 was issued on by Česká pošta, s.p. [IČ 47114983].

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Státní zdravotní ústav, příspěvková organizace [IČ 75010330]

Company registration number: D14125
Organization: Státní zdravotní ústav, příspěvková organizace [IČ 75010330]
Country: CZ

Česká pošta, s.p. [IČ 47114983]

Organization: Česká pošta, s.p. [IČ 47114983]
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:96:21
Serial Number (int): 824865
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 86:f9:0b:58:c3:3a:c7:53:62:25:7d:88:b3:34:71:d8:5e:df:c8:ec
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1

Fingerprint (sha1): 1b:57:77:40:fc:ca:71:ee:fa:65:08:43:50:fe:95:2e:40:52:0c:17
Fingerprint (sha256): c8:3b:57:81:d9:70:56:40:20:c2:b9:b2:d7:2e:aa:bc:b5:09:43:af:57:44:80:1b:b5:86:bb:78:57:b2:95:46

Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt

Revocation information

OCSP Server: http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/
CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl

Check the revocation status for certificate *.szu.cz

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.szu.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name szu.cz

(limited to 100 certificates)
autorizace.szu.cz
mail.szu.cz
cejph.szu.cz
cejph.szu.cz
katalog.szu.cz
mail.szu.cz
katalogpers.szu.cz
autorizace.szu.cz
katalog.szu.cz
autorizace.szu.cz
earss.szu.cz
katalog.szu.cz
apps.szu.cz
cejph.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
hygiena.szu.cz
mail.szu.cz
indi.szu.cz
cejph.szu.cz
mail.szu.cz
szu.cz
autorizace.szu.cz
epoz.szu.cz
mail.szu.cz
cejph.szu.cz
hygiena.szu.cz
katalog.szu.cz
mail.szu.cz
autorizace.szu.cz
hygiena.szu.cz
autorizace.szu.cz
szu.cz
katalogpers.szu.cz
apps.szu.cz
*.szu.cz
katalog.szu.cz
earss.szu.cz
cejph.szu.cz
autorizace.szu.cz
hygiena.szu.cz
earss.szu.cz
epoz.szu.cz
www.szu.cz
mail.szu.cz
apps.szu.cz
autorizace.szu.cz
mail.szu.cz
archiv.szu.cz
autorizace.szu.cz
autorizace.szu.cz
hygiena.szu.cz
cejph.szu.cz
szu.cz
autorizace.szu.cz
earss.szu.cz
apps.szu.cz
apps.szu.cz
earss.szu.cz
mail.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
epoz.szu.cz
autorizace.szu.cz
hygiena.szu.cz
katalog.szu.cz
hygiena.szu.cz
hygiena.szu.cz
katalog.szu.cz
cejph.szu.cz
katalogpers.szu.cz
hygiena.szu.cz
katalogpers.szu.cz
mail.szu.cz
cejph.szu.cz
mail.szu.cz
autorizace.szu.cz
cejph.szu.cz
www.szu.cz
katalogpers.szu.cz
mail.szu.cz

Certificate

The complete raw certificate details for *.szu.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnxyWlOIMJxcvg0Aded7
iXqQZQs2KMM4TIHnK+gvJvBcx5zmE5a2mRhoVxD1CRb5ImxHIyu5epzwzaBeYfn3
M3xKMQLliABPYcVPNpgs63PPqwv0iWUPUvYER4y6puXksTe8clEP/u7YpRPGCkc5
I/ewRY10eeVZtH3xZfAqRD2D0GR+0VDoum3kOZ64oGev4BIlwuD320jU+hROBNsW
aBXlBynIdIvy/De+1JXoQWnWzqFl5kPOfh7owLqoGGI77PZXf/w/4Mn3nauLV3pU
c6bBOIdDfUgyfckwsGjCRSTONbmBtiKDHC+1CmzOtoyRNuFZu58q26JJDIKj5KsU
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 824865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-16 14:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 14:51:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Státní zdravotní ústav, příspěvková organizace [IČ 75010330]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.szu.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D14125'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23036738454218875235972803703292661455471771978916671350767868020249319625089929026116031821536147790921512701329293643093212638110686531610151346547606221738781691356198289517110698139410570445857521663529555968083908802761710706703673613164883789045492843939189420984182498150783929207042851512616478384836434916508169168554098337308423619524208063761173962076173072460269779958732935022851201351997010035985612037077482648161872136733216868214134316987170775706828325899335294687441485769990083855630529954525117517328289949068121951686849493710369839138270998015743297687683384276784733630023764459515436474242091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Státní zdravotní ústav'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.9.200
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.postsignum.cz/OCSP/VCA2/OCSP_public/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86f90b58c33ac75362257d88b33471d85edfc8ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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