mail.ssc.avcr.cz

- Středisko společných činností AV ČR, v. v. i. -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 06:b3:6b:74:23:2a:99:e6:da:6b:3b:3b:8c:24:a1:c6 was issued on by TERENA.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Středisko společných činností AV ČR, v. v. i.

Organization: Středisko společných činností AV ČR, v. v. i.
State / Province: Hlavní město Praha
Locality: Praha 1
Country: CZ

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b3:6b:74:23:2a:99:e6:da:6b:3b:3b:8c:24:a1:c6
Serial Number (int): 8906968531565148775060970700934521286
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8c:8f:11:e8:35:a6:71:66:6f:2e:bb:39:ef:4e:ce:84:c8:64:cf:19
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): fb:d2:f6:ce:13:a8:e2:50:2c:1c:bb:76:55:f6:53:fa:b7:cd:0a:96
Fingerprint (sha256): d5:94:b2:74:65:4f:ed:88:85:f2:d1:40:a8:32:75:ef:7f:f3:89:e3:2e:78:01:87:e9:5d:a7:9a:03:94:98:6a

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate mail.ssc.avcr.cz

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ssc.avcr.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ssc.avcr.cz
anet.portal.ssc.avcr.cz
autodiscover.academia.cz
autodiscover.btu.avcr.cz
autodiscover.hotel-mazanka.cz
autodiscover.ibt.cas.cz
autodiscover.kav.avcr.cz
autodiscover.kav.cas.cz
autodiscover.penzion-marna.cz
autodiscover.penzion-sedlec.cz
autodiscover.praha.psu.cas.cz
autodiscover.ssc.avcr.cz
autodiscover.ssc.cas.cz
autodiscover.vila-lanna.cz
autodiscover.zamek-liblice.cz
autodiscover.zamek-trest.cz
ifis.portal.ssc.avcr.cz
intranet.portal.academia.cz
intranet.portal.kav.avcr.cz
intranet.portal.praha.psu.cas.cz
intranet.portal.ssc.avcr.cz
mail.academia.cz
mail.btu.avcr.cz
mail.hotel-mazanka.cz
mail.ibt.cas.cz
mail.kav.avcr.cz
mail.kav.cas.cz
mail.penzion-marna.cz
mail.penzion-sedlec.cz
mail.portal.academia.cz
mail.portal.kav.avcr.cz
mail.portal.praha.psu.cas.cz
mail.portal.ssc.avcr.cz
mail.praha.psu.cas.cz
mail.ssc.cas.cz
mail.vila-lanna.cz
mail.zamek-liblice.cz
mail.zamek-trest.cz
oeba.avcr.cz
portal.academia.cz
portal.kav.avcr.cz
portal.kav.cas.cz
portal.psu.cas.cz
portal.ssc.avcr.cz
portal.ssc.cas.cz
rd.academia.cz
rd.kav.avcr.cz
rd.portal.academia.cz
rd.portal.kav.avcr.cz
rd.portal.ssc.avcr.cz
rd.ssc.avcr.cz
verso.portal.kav.avcr.cz
verso.portal.ssc.avcr.cz
exchmaz01.av.hq.ssc.cas.cz
exchmaz02.av.hq.ssc.cas.cz
exchnar03.av.hq.ssc.cas.cz

Other certificates including the domain name avcr.cz

(limited to 100 certificates)
avcr.cz
strategie.avcr.cz
avcr.cz
academy2.cas.cz
mail.zamek-liblice.cz
eduroam2.ssc.avcr.cz
vpn.ssc.avcr.cz
vedeni-pracovist.avcr.cz
kit.avcr.cz
list.avcr.cz
kis.avcr.cz
orient.cas.cz
app.ssc.avcr.cz
list.avcr.cz
kis.avcr.cz
avcr.cz
kit.avcr.cz
vedrada.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
da.ssc.avcr.cz
www.tydenavcr.cz
s-drive.ssc.avcr.cz
list.avcr.cz
academy2.cas.cz
academy2.cas.cz
www.ssc.cas.cz
app.ssc.avcr.cz
app.ssc.avcr.cz
mail.ssc.avcr.cz
radius.ise.ssc.avcr.cz
mail.avcr.cz
ziva.avcr.cz
academy3.cas.cz
vpn-eis.ssc.avcr.cz
akademicky-snem.avcr.cz
isar.cas.cz
www.ibt.cas.cz
ziva.avcr.cz
portal.ssc.avcr.cz
smtp.ssc.avcr.cz
kit.avcr.cz
academy2.cas.cz
oeba.avcr.cz
orient.cas.cz
www.otevrenaveda.cz
academy5.avcr.cz
jola.ssc.avcr.cz
dotazniky.eis.cas.cz
www.tydenavcr.cz
vpn.ssc.avcr.cz
portal.ssc.avcr.cz
eduroam1.ssc.avcr.cz
strategie.avcr.cz
hoste.ise.ssc.avcr.cz
portal.ssc.avcr.cz
mail.ssc.avcr.cz
airwatch.ssc.avcr.cz
strategie.avcr.cz
vpn.ssc.avcr.cz
s-disk.ssc.avcr.cz
portal.ssc.avcr.cz
app.ssc.avcr.cz
*.ise.ssc.avcr.cz
academy5.avcr.cz
kis.avcr.cz
list.avcr.cz
mail.ssc.avcr.cz
vpn.ssc.avcr.cz
cms2.avcr.cz
app.ssc.avcr.cz
www.ei.cas.cz
avcr.cz
teater.arub.avcr.cz
portal.ssc.avcr.cz
arub.avcr.cz
www.otevrenaveda.cz
dspb.avcr.cz
smtp.ssc.avcr.cz
www.tydenavcr.cz
s-disk.ssc.avcr.cz
strategie.avcr.cz
mail.ssc.avcr.cz
cms2.avcr.cz
kis.avcr.cz
app3.ssc.avcr.cz
kis.avcr.cz
sponsor.ise.ssc.avcr.cz
www.ei.cas.cz
vpn.ssc.avcr.cz
mail.ssc.avcr.cz
academy2.cas.cz
list.avcr.cz
app2.ssc.avcr.cz
app.ssc.avcr.cz
kis.avcr.cz
academy2.cas.cz
academy2.cas.cz
rd.academia.cz

Certificate

The complete raw certificate details for mail.ssc.avcr.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ZHN3ZdEQBZnKiyC9IT
2SpnKFxTzRoTlHAjj9C9ItN6ICaZGiZcAeoW8hk3roK7gHEKviyQJjZPyDOJIUoE
uBMZFYHe5uGrkGF9K9/RPOxs163j3C5RuIo090OdTiGTVEha58PSe13KJjN2yDDm
Ei+h1rmSWrOq9tlQAb4cS6mjBZb2a7KUdQaZsOKccmvOHMGQX72EZOAWjVzLnSKF
60kZnmeAVt89xSCTH8ijc3oOBFetIjcCbaSY8uman8pCyAm75SZ6r2qf4RLF+wJg
SJZO7ZoaAd0NAP7h5iu0/+d7J5El8+ozkPZMlD0t8giFYUvNLrNbn2QgE1b+i1vq
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8906968531565148775060970700934521286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hlavní město Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Středisko společných činností AV ČR, v. v. i.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ssc.avcr.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23720117436391639961588496246488963312342136937601341260597773134816601095172668723143098249789872252799990565517756413677446540683290440200447737426721844959869723924905053207661858787335589421196843569383349125509337987461368454627716948259077799054453500179537924010134103543603874260741953666872681361441484091480881626663859318298214051623060860729032125549222825727184858127817946133355249795704523273691833119997108120375929006046459381047593772569925112496491204353231186731085810124999273655997134866441887265534737852129008604789646820726985736150819504381869246342923099692962082610471664767441796020824827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c8f11e835a671666f2ebb39ef4ece84c864cf19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anet.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.btu.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hotel-mazanka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ibt.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.penzion-marna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.penzion-sedlec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zamek-trest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifis.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.btu.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hotel-mazanka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ibt.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.penzion-marna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.penzion-sedlec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.praha.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vila-lanna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zamek-liblice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zamek-trest.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oeba.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kav.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.psu.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.academia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.kav.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verso.portal.ssc.avcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchmaz01.av.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchmaz02.av.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchnar03.av.hq.ssc.cas.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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