iave.rwe.cz

- RWE Interní služby, s.r.o. -

Issued by I.CA - Standard Certification Authority, 09/2009

About this certificate

This digital certificate with serial number 1c:e2:25 was issued on by První certifikační autorita, a.s..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • KeyUsage [DigitalSignature KeyEncipherment ContentCommitment DataEncipherment KeyAgreement] (00011111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

RWE Interní služby, s.r.o.

Company registration number: ICA - 781112
Organization: RWE Interní služby, s.r.o.
Organization unit: AKC
Locality: Praha
Country: CZ

První certifikační autorita, a.s.

Organization: První certifikační autorita, a.s.
Organization unit: I.CA - Provider of Certification Services
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:e2:25
Serial Number (int): 1892901
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: a9:c8:b2:05:a8:f6:51:89:6e:5f:4f:76:c5:0e:e3:3b:98:57:f6:59
AuthorityKeyId: c1:4c:38:94:d5:80:86:48:d9:22:90:2c:d3:ee:19:10:db:67:47:87

Fingerprint (sha1): d2:1f:34:2b:10:22:13:b4:71:81:e7:e7:33:bf:bd:e6:84:17:91:93
Fingerprint (sha256): fa:eb:2c:58:6f:cc:ff:47:df:eb:5c:08:53:ab:4f:60:31:7e:65:2c:9b:ca:5d:da:b5:36:cb:e9:b4:68:50:ab


Revocation information

CRL Distribution Point: http://scrldp1.ica.cz/sica09.crl
CRL Distribution Point: http://scrldp2.ica.cz/sica09.crl

Check the revocation status for certificate iave.rwe.cz

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iave.rwe.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Server Authentication

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name rwe.cz

(limited to 100 certificates)
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
vop.rwe.cz
sip.innogy.com
lyncweb.rwe.com
ets.rwe.cz
access02.rwe.com
gsn.rwe.cz
iave.rwe.cz
lyncweb.rwe.com
premium.rwe.cz
premium.rwe.cz
gsn.rwe.cz
gsnbackup.rwe.cz
svb-cross.rwe.cz
vop.rwe.cz
access02.rwe.com
*.rwe.cz
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
moje.rwe.cz
sip.innogy.com
lyncweb.rwe.com
lyncweb.rwe.com
iave.rwe.cz
onlineservis.rwe.cz
www.rwe.cz
svb-cross.rwe.cz
gsn.rwe.cz
ets-test.rwe.cz
vop.rwe.cz
ets.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
www.rwe.cz
lyncweb.rwe.com
www.rwe.cz
premium.rwe.cz
vop.rwe.cz
ets.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
ets.rwe.cz
iave.rwe.cz
www.rwe.cz
esb.rwe.cz
migrace.rwe.cz
www.rwe.cz
wallboard.rwe.cz
mdm.rwe.cz
lyncweb.rwe.com
lyncweb.rwe.com
svb-cross.rwe.cz
test-wms.rwe.cz
access02.rwe.com
iave.rwe.cz
lyncweb.rwe.com
sip.innogy.com
wallboard.rwe.cz
ets.rwe.cz
www.rwe.cz
iave.rwe.cz
www.rwe.cz
access02.rwe.com
lyncweb.rwe.com
gsn.rwe.cz
ets.rwe.cz
email.rwe.cz
www.rwe.cz
gsn.rwe.cz
iave.rwe.cz
wms.rwe.cz

Certificate

The complete raw certificate details for iave.rwe.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9uAR7jZysY+PegdKTuU
NqnXokYckL2Nca+33oZ5NdXXIzqDVe2qU7uuCpyOQvsNxAaZgllmho0AaAiRq5P1
VH2YoRMqnfF5HOkApS7ZnhTxknqwwP158EA3fLNqyi7DpTWs8haT+J1rFr1+xxBa
oaHphiTpO41o3rFkyIXHYcdYTOdXyCe9U5BFOIs31BU7vkP6K3javOa2KPXFClH/
1xsmwT05Mwchh3ZSG542shN1tLLhUvzQG5VgnAyijX81V+nFna32Mm7uHARNkaNY
7hz9bB4ZQT9n6DYv6aX/gCYrOHb9bDt9JxFFpblPRiCxNAnXMD7+Bpgz8RAWDIBC
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1892901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Standard Certification Authority, 09/2009'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'První certifikační autorita, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I.CA - Provider of Certification Services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-15 09:54:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-15 09:54:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'iave.rwe.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RWE Interní služby, s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AKC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICA - 781112'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20180130513408942984046633783647906915220454194264940520094875028586971243989863449542152307169699095575421620475367583186477858732868810459121949072060970604874857667360045896777446360846361851014853978778768716263214720566615915877185761764397780731886904809276037415799226659859927764943629944201254589656685224887463345449643162221575057577005479414564003758061059696768512829182422492717429991925204865349288008582376820115213572286223001201959277007751844334301509752745272260553188373043024602250617021705958011781449873188344570891633838610396067287211370233082399417028112950213217050714247443262423093494441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c14c3894d5808648d922902cd3ee1910db674787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9c8b205a8f651896e5f4f76c50ee33b9857f659
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23624.1.1.60.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp1.ica.cz/sica09.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://scrldp2.ica.cz/sica09.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013d83b9c8cde660eebb2f0d7ee18933e02fdd6d47e75ad2b03c3fe4e9dc938fb3a2d2d7fd0c8d668c0002e5d12cbb61560415387c11fb492d251c2a4e1c16b15a03b3abaeef3e85416d550ca95e1159229e5a8501ffdc28fe7c522e60cd003f55c615a58965cd649fea6b16225fe89678a62b97a4c9e58f6c51f0345d6e2a5bdc93dab393d17f00e3b8b019f58f455bcf313824fe3db83b8f2300ba09c12b51fd6754e16affb39047c56e520f3b3c62c1405298afe775efb6a8d83bfdcb3ccbc311d655e291e4d689ab64ec7f2f7694110823964eb7f781582e706b6265da4a9c8ceaab11166d3ef5a87f2d6597c7817a5859f989d112b3b664218a4a52a645d