====== CESNET CA Root Certificates and Revocation Lists ======

Here you can find descriptions, certificates and revocation lists for Certificate Authorities operated by CESNET CA.

===== CESNET CA Root =====
CESNET CA Root issues certificates to subordinate CESNET PKI CAs:

  * [[#CESNET CA 4]]
  * [[#CESNET Personal Signing CA 2]]

^ CA name  | CN=**CESNET CA Root**, O=CESNET CA, DC=cesnet-ca, DC=cz |
^ Issued by  | CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz |
^ Valid since  | February 24<sup>th</sup> 2009 |
^ Valid until  | February 24<sup>th</sup> 2029 |
^ Serial number  | 87:F7:FA:00:73:69:14:4F  |
^ Fingerprint SHA1  | E7:84:74:90:F7:11:43:FC:CE:F6:F6:5A:30:DA:1F:23:9E:0F:D7:BA  |
^ Fingerprint SHA256  | C0:71:2E:7F:29:5D:64:3E:9A:A6:B7:26:86:DD:E1:9A:B6:81:69:C2:2B:63:A1:3B:F9:15:80:D9:05:52:62:AB  |
^ CA certificate  | [[https://crt.cesnet-ca.cz/CESNET_CA_Root.crt|Install (DER)]] --- [[https://crt.cesnet-ca.cz/CESNET_CA_Root.pem|Download (PEM)]] --- [[https://pki.cesnet.cz/certs/CESNET_CA_Root.txt|Preview (TXT)]] |
^ Current CRL  | [[https://crl.cesnet-ca.cz/CESNET_CA_Root.crl|Download]] |


===== CESNET CA 4 =====

^ CA name    | CN=**CESNET CA 4**, O=CESNET CA, DC=cesnet-ca, DC=cz |
^ Issued by  | CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz |
^ Valid since  | May 20<sup>th</sup> 2018 |
^ Valid until  | May 22<sup>nd</sup> 2028 |
^ Serial number  | F4:EA:56:82:9A:36 |
^ Fingerprint SHA1  | 7B:2F:BA:0C:D9:3F:EE:D2:B0:69:1F:53:E7:EB:AD:05:A7:23:FC:74 |
^ Fingerprint SHA256  | 44:15:CE:97:5D:B5:64:16:16:4f:9D:09:D6:4A:B1:1C:E0:61:63:06:60:AF:27:41:0C:B4:66:D3:A2:CC:8A:0A  |
^ CA certificate  | [[https://crt.cesnet-ca.cz/CESNET_CA_4.crt|Install (DER)]] --- [[https://crt.cesnet-ca.cz/CESNET_CA_4.pem|Download (PEM)]] --- [[https://crt.cesnet-ca.cz/CESNET_CA_4.txt|Preview (TXT)]] |
^ Current CRL  | [[https://crl.cesnet-ca.cz/CESNET_CA_4.crl|Stáhnout]] |

^ Certificate chain CESNET CA4 | [[https://pki.cesnet.cz/certs/chain_CESNET_CA4.pem| Download (PEM)]] |


===== CESNET Personal Signing CA 2 =====

^ CA name  | CN=**Personal Signing 2**, O=CESNET CA, DC=cesnet-ca, DC=cz |
^ Issued by  | CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz |
^ Valid since  | March 18<sup>th</sup> 2018 |
^ Valid until  | March 28<sup>th</sup> 2028 |
^ Serial number  | F4:EA:56:82:9A:34  |
^ Fingerprint SHA1  | C8:97:D7:A2:14:EB:16:05:91:C1:BA:7B:0F:EA:22:62:A5:6B:E3:BA  |
^ Fingerprint SHA256  | 39:8F:2F:45:F3:0C:80:52:B4:80:3A:91:EA:4A:37:EB:43:61:B6:7E:B3:78:FE:75:BD:C4:62:B3:54:2D:5A:97  |
^ CA certificate  | [[https://crt.cesnet-ca.cz/PersonalSigning2.crt|Install (DER)]] --- [[https://crt.cesnet-ca.cz/PersonalSigning2.pem|Download (PEM)]] --- [[https://pki.cesnet.cz/certs/PersonalSigning2.txt|Preview (TXT)]] |
^ Current CRL  | [[https://crl.cesnet-ca.cz/PersonalSigning2.crl|Download]] |



===== Old CESNET CA =====

The operations of CESNET CA are to be ceased in 2011.

^ CA name  | CN=**CESNET CA**, DC=cesnet-ca, DC=cz |
^ Issued by  | CN=CESNET CA, DC=cesnet-ca, DC=cz |
^ Valid since  | June 17<sup>th</sup> 2005 |
^ Valid until  | June 17<sup>th</sup> 2025 |
^ Serial number  | 42:B2:EA:1F  |
^ Fingerprint SHA1  | B6:D8:8D:9D:CD:72:DF:1B:D6:CB:2E:EF:8E:64:2F:73:21:24:23:95  |
^ Fingerprint SHA256  | BC:FD:A1:98:B5:56:97:B9:FF:F2:10:0D:E4:04:B2:CA:BA:4C:83:21:BD:B4:91:19:25:44:F5:EE:65:31:EB:E9  |
^ CA certificate  | [[https://pki.cesnet.cz/certs/cesnet-ca.cz.crt|Install (DER)]] --- [[https://pki.cesnet.cz/certs/cesnet-ca.cz.pem|Download (PEM)]] --- [[https://pki.cesnet.cz/certs/cesnet-ca.cz.txt|Preview (TXT)]] |
^ Current CRL  | [[https://www.cesnet.cz/pki/crl/cn=CESNET%20CA,dc=cesnet-ca,dc=cz.crl|Download]] |