gsn.rwe.cz

- RWE IT Czech s.r.o. -

Issued by I.CA - Standard Certification Authority, 09/2009

About this certificate

This digital certificate with serial number 1e:12:b8 was issued on by První certifikační autorita, a.s..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

RWE IT Czech s.r.o.

Company registration number: ICA - 813579
Organization: RWE IT Czech s.r.o.
Country: CZ

První certifikační autorita, a.s.

Organization: První certifikační autorita, a.s.
Organization unit: I.CA - Provider of Certification Services
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:12:b8
Serial Number (int): 1970872
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: a9:66:0a:2f:78:e5:ae:dc:39:17:b0:1e:6d:c2:c8:e2:dc:d1:e9:de
AuthorityKeyId: c1:4c:38:94:d5:80:86:48:d9:22:90:2c:d3:ee:19:10:db:67:47:87

Fingerprint (sha1): 39:f4:64:c3:cf:3c:f1:a7:9e:81:59:aa:7c:ab:42:b9:f0:03:29:80
Fingerprint (sha256): ec:da:3e:67:5e:90:a5:f1:23:a3:92:d3:61:bd:94:97:29:6c:f5:57:e1:8b:60:c6:17:f2:16:92:57:1d:ef:cb


Revocation information

CRL Distribution Point: http://scrldp1.ica.cz/sica09.crl
CRL Distribution Point: http://scrldp2.ica.cz/sica09.crl

Check the revocation status for certificate gsn.rwe.cz

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gsn.rwe.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gsn.rwe.cz
gsncz.rwe.cz
gsnde.rwe.cz
as2gsn.rwe.cz
as2gsndebug.rwe.cz
as2gsnbackup.rwe.cz
as2gsndebugbackup.rwe.cz
gsnbackup.rwe.cz
gsnczbackup.rwe.cz
gsndebackup.rwe.cz
gsn0.rwe.cz
gsn1.rwe.cz
gsn2.rwe.cz
gsn3.rwe.cz
gsn4.rwe.cz
gsn5.rwe.cz
gsn6.rwe.cz
gsn7.rwe.cz
gsn8.rwe.cz
gsn9.rwe.cz
gsn-app.rwe.cz
gsn-backup.rwe.cz

Other certificates including the domain name rwe.cz

(limited to 100 certificates)
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
vop.rwe.cz
sip.innogy.com
lyncweb.rwe.com
ets.rwe.cz
access02.rwe.com
gsn.rwe.cz
iave.rwe.cz
lyncweb.rwe.com
premium.rwe.cz
premium.rwe.cz
gsn.rwe.cz
gsnbackup.rwe.cz
svb-cross.rwe.cz
vop.rwe.cz
access02.rwe.com
*.rwe.cz
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
moje.rwe.cz
sip.innogy.com
lyncweb.rwe.com
lyncweb.rwe.com
iave.rwe.cz
onlineservis.rwe.cz
www.rwe.cz
svb-cross.rwe.cz
gsn.rwe.cz
ets-test.rwe.cz
vop.rwe.cz
ets.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
premium.rwe.cz
vop.rwe.cz
ets.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
ets.rwe.cz
iave.rwe.cz
www.rwe.cz
esb.rwe.cz
migrace.rwe.cz
www.rwe.cz
wallboard.rwe.cz
mdm.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
svb-cross.rwe.cz
test-wms.rwe.cz
access02.rwe.com
iave.rwe.cz
lyncweb.rwe.com
sip.innogy.com
wallboard.rwe.cz
ets.rwe.cz
www.rwe.cz
iave.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
gsn.rwe.cz
ets.rwe.cz
email.rwe.cz
www.rwe.cz
gsn.rwe.cz
iave.rwe.cz
wms.rwe.cz

Certificate

The complete raw certificate details for gsn.rwe.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fyvUsw0WCsffL8ytMKo
WHBGN0WcpwjWqWV7vRtaieDHYe2mQ9vb7RYJaNaD9gxC0E/Ht50fOQrSBF9cyrd1
fRtZ6kCwn0CQE8B2EjauN3tT1Kpc4kaGJR7q7saFw7adKZUL0+T9wBSuX1hJxmvG
l7/aI1jT1shHTssJ4jrMFL2tcKRz/pOqFEpFAoVjstEjOVgYDII/AkyvJ/isqp8O
UQ4zjev9XGM+uGm+0ev8hOfFPx9FsFdGPfLnwDeTvPnt8hmrP1seYuG/x0SX2fKH
vbp+OKxOOOZh0sCfXG1JKaGGbLh+rXbIgvBHmptvQr8VQNEX8OrlCbfumNUDNI+N
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1970872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Standard Certification Authority, 09/2009'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'První certifikační autorita, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Provider of Certification Services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-26 09:42:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-26 09:42:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gsn.rwe.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWE IT Czech s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICA - 813579'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26508409285000887999677038218106745354787658656377386728187035157448170159505322481015593307248863896525572343326046888828936307692599488218623684333697319598315170955830027170002443852134909992089511655330371865910597030088461117872176388772015623483148114548260816968011195566511677702776784133687488326554958302479096090619891123730814140711412294117978337591239870131691800047964330118132170643110699146448052805981137051911734380872041375863455362678117856531201496767337107543679705520652863998837216574766761108689683304737524758005198037983512143981786647889896774145733737921010656855226317595273905971367271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (349 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsncz.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnde.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as2gsn.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as2gsndebug.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as2gsnbackup.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as2gsndebugbackup.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnbackup.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnczbackup.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsndebackup.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn0.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn1.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn2.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn3.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn4.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn5.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn6.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn7.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn8.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn9.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn-app.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn-backup.rwe.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c14c3894d5808648d922902cd3ee1910db674787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9660a2f78e5aedc3917b01e6dc2c8e2dcd1e9de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23624.1.1.60.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp1.ica.cz/sica09.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp2.ica.cz/sica09.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b50a83846172c7af2084684b58a2defb4c32dff80490d073a485df9241367503ff80493ac70780fbeab53af01cbf0b7a6b078c91f70a2248e1b49f856fc9d191fab3ac2de59288df407a00c9d377f176a4f4ff8ad3b77d635248d9b4131d65ade155ee35c45bba1c174d3c87807404ed35a5a1c3b37646a28849f9d5eff2d2f5c974e53e9a832c2a393d6c930d92195019ecd1039a129d9e8766794a90e8011030b85a618aa74de3726b184866d8e32d60ae84d61c88edeceb5b3557a60b7b554d0973e97d581fb2360baa21c2d5c2bcb436a83cb1327f81f04c1ec2a43f34c56c15deb66820bb88ec5c8a53d73e4746990cf7af1fb25d2f1d1582c773ce9f6