X509 Certificate: Version: 3 Serial Number: 65000000210418c8647708d504000000000021 Signature Algorithm: Algorithm ObjectId: 1.2.840.113549.1.1.11 sha256RSA Algorithm Parameters: 05 00 Issuer: CN=MPSV CA Root R2 Test SHA2 O=Ministerstvo prace a socialnich veci L=Praha C=CZ Name Hash(sha1): 16b8cfaca88a0aebdb357c4aafeceb258f36b42d Name Hash(md5): b6c7460491eb6a8f9e363caf2b9e1897 NotBefore: 2/17/2021 6:39 PM NotAfter: 2/17/2027 6:49 PM Subject: CN=MPSV CA Issuing 01 R2 Test SHA2 O=Ministerstvo prace a socialnich veci L=Praha C=CZ Name Hash(sha1): 86ac8da1be887edcac63dcd99f92634fc7b21dba Name Hash(md5): 8c6519bac8519b2a7123872e6c6dd69a Public Key Algorithm: Algorithm ObjectId: 1.2.840.113549.1.1.1 RSA Algorithm Parameters: 05 00 Public Key Length: 2048 bits Public Key: UnusedBits = 0 0000 30 82 01 0a 02 82 01 01 00 9e d1 2d 79 1c 8b e9 0010 87 aa 42 eb 2f 71 ba 20 e7 85 f2 94 64 c7 0a 06 0020 e7 b9 d3 7a dc 27 84 0a 8e d4 c6 f3 a3 42 34 8c 0030 9d 1e 18 86 43 d1 74 66 dc 5b 5f d8 80 2d 2b 29 0040 51 d9 70 7d d2 18 7e 8f 8b d5 2e c0 17 3d 82 ee 0050 fb db 45 ae 6f 64 b6 b6 ef b8 cb 0c 92 ac 26 02 0060 1c 38 1c 90 31 9c 41 3f eb 75 17 5a ec db 7a 6a 0070 33 b4 ab 37 fb aa 6c f8 0c e6 5f 3e c2 bc 9d 16 0080 72 69 9a 62 45 ce 48 cc ae 42 f7 38 e6 fd 26 f4 0090 22 7b 36 91 01 c6 ac 28 37 b5 cd 3b 63 61 bb aa 00a0 a7 6d 72 bf 31 38 89 18 7f b5 90 10 3a 5f 03 ec 00b0 0d 47 cd df e5 87 72 0b d3 66 6e c9 e1 95 65 9f 00c0 96 9f 06 58 f7 30 a7 83 fd 5e 25 26 45 d6 1a 32 00d0 af 4f 6a 9b 95 60 e8 dc ca 57 25 d8 51 7a de be 00e0 e5 b5 96 82 4c 14 09 24 60 55 94 05 bd 4a ba 29 00f0 44 51 3c 63 ee d4 8d 30 30 46 c1 01 c6 af 65 91 0100 e4 7b 8e fb ae 1c 32 75 83 02 03 01 00 01 Certificate Extensions: 10 2.5.29.15: Flags = 1(Critical), Length = 4 Key Usage Digital Signature, Certificate Signing, Off-line CRL Signing, CRL Signing (86) 1.3.6.1.4.1.311.21.1: Flags = 0, Length = 3 CA Version V1.0 1.3.6.1.4.1.311.21.2: Flags = 0, Length = 16 Previous CA Certificate Hash d6da8a797faeb0b5f0ee17c73a864833168b1b4a 2.5.29.14: Flags = 0, Length = 16 Subject Key Identifier 2e48e551e0c816c149b3d7818894e0ce9877668d 2.5.29.32: Flags = 0, Length = 20 Certificate Policies [1]Certificate Policy: Policy Identifier=MPSV CA Issuing 01 R2 Certificate Policy [2]Certificate Policy: Policy Identifier=MPSV TSA 01 R2 Policy 1.3.6.1.4.1.311.20.2: Flags = 0, Length = c Certificate Template Name (Certificate Type) SubCA 2.5.29.19: Flags = 1(Critical), Length = 8 Basic Constraints Subject Type=CA Path Length Constraint=0 2.5.29.35: Flags = 0, Length = 18 Authority Key Identifier KeyID=a31d5468ae855a0faf6a220890217bd206e45c89 2.5.29.31: Flags = 0, Length = 143 CRL Distribution Points [1]CRL Distribution Point Distribution Point Name: Full Name: URL=http://pki-r2-test.mpsv.cz/ca-root-r2-test-sha2/crl/MPSV CA Root R2 Test SHA2.crl (http://pki-r2-test.mpsv.cz/ca-root-r2-test-sha2/crl/MPSV%20CA%20Root%20R2%20Test%20SHA2.crl) URL=ldap:///CN=MPSV CA Root R2 Test SHA2,CN=ST-DDC-ADCS00,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=adt,DC=mpsv,DC=cz?certificateRevocationList?base?objectClass=cRLDistributionPoint (ldap:///CN=MPSV%20CA%20Root%20R2%20Test%20SHA2,CN=ST-DDC-ADCS00,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=adt,DC=mpsv,DC=cz?certificateRevocationList?base?objectClass=cRLDistributionPoint) 1.3.6.1.5.5.7.1.1: Flags = 0, Length = 163 Authority Information Access [1]Authority Info Access Access Method=On-line Certificate Status Protocol (1.3.6.1.5.5.7.48.1) Alternative Name: URL=http://pki-r2-test.mpsv.cz/ocsp [2]Authority Info Access Access Method=Certification Authority Issuer (1.3.6.1.5.5.7.48.2) Alternative Name: URL=http://pki-r2-test.mpsv.cz/ca-root-r2-test-sha2/cert/MPSV CA Root R2 Test SHA2.crt (http://pki-r2-test.mpsv.cz/ca-root-r2-test-sha2/cert/MPSV%20CA%20Root%20R2%20Test%20SHA2.crt) [3]Authority Info Access Access Method=Certification Authority Issuer (1.3.6.1.5.5.7.48.2) Alternative Name: URL=ldap:///CN=MPSV CA Root R2 Test SHA2,CN=AIA,CN=Public Key Services,CN=Services,CN=Configuration,DC=adt,DC=mpsv,DC=cz?cACertificate?base?objectClass=certificationAuthority (ldap:///CN=MPSV%20CA%20Root%20R2%20Test%20SHA2,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=adt,DC=mpsv,DC=cz?cACertificate?base?objectClass=certificationAuthority) Signature Algorithm: Algorithm ObjectId: 1.2.840.113549.1.1.11 sha256RSA Algorithm Parameters: 05 00 Signature: UnusedBits=0 0000 ac de 36 dd 3b b4 46 b7 23 7d 79 40 f9 c4 6d d0 0010 9f c6 b2 47 de 3c f7 87 8e 21 41 3e cf a5 7f 86 0020 fa f2 c7 28 cf 2b fb 1c b7 43 ba 46 78 2e ca 6f 0030 a4 ff 1e 94 59 44 b2 ec e6 72 16 fa f3 af ec e5 0040 a5 aa 83 ef 48 e1 d0 a9 7c b6 c3 46 9e 6e 36 b8 0050 b4 85 47 e1 9f f5 af 10 88 4f df dd 38 24 91 f1 0060 c1 62 ef c8 57 34 4f d8 0f 9f c9 cc f3 c9 1b 04 0070 a3 0f 83 30 8a e1 da 3c f3 6d d4 15 29 21 e9 f3 0080 ee 5e ab 71 4d 99 7b 68 43 08 6a 2e 06 0a e6 3b 0090 d1 bf 10 09 fe 05 89 54 52 4f 77 ce c2 a7 6a e8 00a0 24 58 99 b9 1d cb 92 3c 9e 27 14 e7 89 c5 d9 ef 00b0 a9 33 7b 2a a9 eb be 38 16 48 79 49 e1 1d d3 59 00c0 92 ec c7 4e e3 d1 c9 ad 09 fa a0 1e 1d ae ac b8 00d0 a6 63 80 50 f3 b2 48 0d 9a 27 6d c7 20 1a 09 1b 00e0 70 e4 e2 89 ff 6a a2 1a b3 cf dd 0c 69 dc dd 68 00f0 06 68 75 16 33 6a 5b 4b 6e 99 25 bc 67 ed 3c 48 0100 8a cd 41 d1 8f 08 14 bc 58 2d 32 61 b2 31 87 ef 0110 11 5a 52 3d a6 d8 7d 73 69 51 9b 1b d1 38 63 03 0120 eb 04 ec a5 70 f2 f2 7c 6d 2c 89 b7 12 67 f4 cc 0130 4d e8 c5 30 a2 9a 8a 3f 26 34 ea 63 ea f0 06 32 0140 b4 15 26 bc 2c 66 0d bb 13 e3 84 e3 8b 5c 6c bd 0150 49 27 db 76 f4 5d a5 b9 d2 ca 9f c2 91 3a 6a 0e 0160 1f 13 fe 2a 7d 95 c0 d7 8b d1 17 53 65 69 2a f4 0170 12 4c c1 62 18 eb 7f f1 6a d7 5a 13 20 78 1c d5 0180 fc ad fc 29 81 03 7c 31 59 06 4e 18 79 eb 75 8b 0190 e6 5f 93 4a 01 bc 5b 59 74 33 08 0f e5 71 88 1b 01a0 68 a3 4b fe b7 47 60 f1 2e 8a 82 33 16 5d c7 0c 01b0 be e6 f7 f4 ea 8b 58 6d 1b 4d fb b7 1b 4c b1 97 01c0 9f f0 29 35 10 7f 0a 3d b6 c2 73 bb c6 aa b5 70 01d0 26 d2 99 41 18 4d b6 fe 7b f8 05 1e 15 e9 e5 ac 01e0 28 36 a9 e5 4f b3 12 2e fb 37 f8 dc 58 1f 51 6a 01f0 79 f5 25 95 a1 26 43 f2 a2 b5 d0 af b9 73 7a 37 Non-root Certificate Key Id Hash(rfc-sha1): 2e48e551e0c816c149b3d7818894e0ce9877668d Key Id Hash(sha1): 3f9b8658d48d6568abaf6730e2c6d93f5e89d9d7 Key Id Hash(bcrypt-sha1): ab88e304a7fa494e16b0ced44f7a9fbe67ea4661 Key Id Hash(bcrypt-sha256): 91f3db227daa26efa733dfdb2b9c006cb9947acb71b0536a081a54ee79ccaab6 Key Id Hash(md5): 15ff05336b69f39f6ce6ec0e30f15401 Key Id Hash(sha256): d8eae6e7f963c035d6bb4405edc28bfa39e81ee673220fdc11407dd6d8e615f6 Key Id Hash(pin-sha256): 36qHURNyWhs3ZZGJEvAYunGif5C2lQ/y4Xct0vME0IM= Key Id Hash(pin-sha256-hex): dfaa875113725a1b3765918912f018ba71a27f90b6950ff2e1772dd2f304d083 Cert Hash(md5): 09ca8deefc8a4ed142ea50925dd43431 Cert Hash(sha1): 738c99fe0c5964dc2c1401f90b7afec985aa868c Cert Hash(sha256): 7f954527fd14469e53ef66d17e9ef22dd771928c52f4e96b82fbe9e9b6c4e97d Signature Hash: ea59d77d28ef5cb268123f928ca867b49ba9a4a74616c17dfedc669bb67a3a55 CertUtil: -dump command completed successfully.