awuohs.compet.cz

- Úřad pro ochranu hospodářské soutěže -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:2f:16:40:c7:26:be:4e:13:24:47:81:63:66:3d:b1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Úřad pro ochranu hospodářské soutěže

Organization: Úřad pro ochranu hospodářské soutěže
Locality: Brno
Country: CZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2f:16:40:c7:26:be:4e:13:24:47:81:63:66:3d:b1
Serial Number (int): 6890629276523752338177015028948286897
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fb:13:aa:ca:fa:42:11:fd:67:c9:ec:b8:99:08:df:6c:88:9e:77:a3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): b5:9f:d7:c0:c5:86:cc:16:b4:22:9b:2d:3d:7d:40:4f:34:87:43:26
Fingerprint (sha256): c8:ae:fd:e9:ae:7d:9c:34:4e:dd:ae:2c:6d:8c:d2:e2:c4:6d:14:d0:48:2e:1b:fc:6b:90:10:aa:14:9a:12:f1

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate awuohs.compet.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for awuohs.compet.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awuohs.compet.cz

Other certificates including the domain name compet.cz

(limited to 100 certificates)
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
fw.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
fw.compet.cz
awuohs.compet.cz
awuohs.compet.cz
mail.compet.cz
mail.compet.cz
awuohs.compet.cz
mail.uohs.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
awuohs.compet.cz
compet.cz
awuohs.compet.cz

Certificate

The complete raw certificate details for awuohs.compet.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hg5KcpknRu5rM1pGVxi
NWMazaShrLF8OjJtapxCgqpM96A+p0K6kqcVZLgCcfpk7WahTeFeR84TKRpB9a2Z
JtcvjkXfxQteewtHDYYTQotRqjrJQHFu2uDT9CqQBTRrfruFL38fmJypvQkJZIk6
HHECqWXwVJG8XiIoidHAdpKGPPeAzfok6/qJ/2nLH092dUgiPcMmYl98DGZxo38m
lXDmA46nJd5Sb0IynqBbftKDi4RmW1NnzZiV22hN+xJHqWrd1Hwvug2LupRlM5TG
nYtZMSq28tgfCqsbSZktIg4LYvRFNXbd3A4RhX9r57kCOrWKcRxnRVJspRzvrL6i
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6890629276523752338177015028948286897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Úřad pro ochranu hospodářské soutěže'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'awuohs.compet.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28541801873757567978833620875985093722178023900377999579936865716044869056737106533052269275301754665300219846842988003992720869780855510828994252871232687962712570295416687819840198212255795569058051751354915840222919522931937958685369375852966094720397844678413079305440170350240477947592193774995910038737153458453383467034783262204581374862407724182998056241605482395848412374161910163366486961282646234415112333355657093083385391495325047676107180445077516374206604951155288482300764218522663512819982308580580102109483607143806304639309861334916394464546857155978560581226400354066374840646625324318652056380111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb13aacafa4211fd67c9ecb89908df6c889e77a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awuohs.compet.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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