CESNET CA Root Certificates and Revocation Lists

Here you can find descriptions, certificates and revocation lists for Certificate Authorities operated by CESNET CA.

CESNET CA Root 2 (root certificate)

CESNET CA Root issues certificates to subordinate CESNET PKI CAs:


CA Name CN=CESNET CA Root 2, O=CESNET CA, DC=cesnet-ca, DC=cz
Issuer CN=CESNET CA Root 2, O=CESNET CA, DC=cesnet-ca, DC=cz
Valid from 1st September 2023
Valid to 1st September 2043
Serial number ab:cd:ef
SHA1 hash fc:7d:e8:09:74:78:91:01:c8:5e:2d:13:7e:cc:f6:97:6e:0b:a6:89
SHA256 hash 28:9f:f3:15:0e:25:6b:a3:68:1a:87:42:17:90:48:d9:0f:51:12:cd:4f:ca:9a:88:49:1c:a3:b0:2a:0c:85:ce
CA Certificate Install (DER) — Download (PEM) — Info (TXT)
Current CRL Download


CESNET CA 5

CA Name CN=CESNET CA 5, O=CESNET CA, DC=cesnet-ca, DC=cz
Issuer CN=CESNET CA Root 2, O=CESNET CA, DC=cesnet-ca, DC=cz
Valid from 13th May 2025
Valid to 31st December 2043
Serial number 1
SHA1 hash c8:8c:56:4d:ef:66:6f:4c:8c:29:00:7f:e4:f9:10:79:e2:9a:05:7d
SHA256 hash f7:d8:60:fa:7c:8b:a8:1d:8d:23:32:1c:75:6f:3d:0d:33:dc:42:49:df:94:8a:4d:8f:b8:4b:64:86:7f:c5:4b
CA certificate Install (DER) — Download (PEM) — Info (TXT)
Current CRL Download


Personal Signing 3

CA Name CN=Personal Signing 3, O=CESNET CA, DC=cesnet-ca, DC=cz
Issuer CN=CESNET CA Root 2, O=CESNET CA, DC=cesnet-ca, DC=cz
Valid from 7th September 2026
Valid to 7th September 2038
Serial number ab:ab
SHA1 hash ed:de:48:1d:21:80:81:73:45:65:9a:10:1d:46:d7:f6:21:9a:d8:32
SHA256 hash 90:3c:55:07:53:c8:1e:ef:d4:9d:a8:51:ad:88:3c:73:29:94:7a:83:02:28:db:e4:80:63:a5:10:fe:66:e6:66
CA certificate Install (DER) — Download (PEM) — Info (TXT)
Current CRL Download


CESNET CA Root

CESNET CA Root issues certificates to subordinate CESNET PKI CAs:

CA name CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz
Issued by CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz
Valid since February 24th 2009
Valid until February 24th 2029
Serial number 87:F7:FA:00:73:69:14:4F
Fingerprint SHA1 E7:84:74:90:F7:11:43:FC:CE:F6:F6:5A:30:DA:1F:23:9E:0F:D7:BA
Fingerprint SHA256 C0:71:2E:7F:29:5D:64:3E:9A:A6:B7:26:86:DD:E1:9A:B6:81:69:C2:2B:63:A1:3B:F9:15:80:D9:05:52:62:AB
CA certificate Install (DER) — Download (PEM) — Preview (TXT)
Current CRL Download

CESNET CA 4

CA name CN=CESNET CA 4, O=CESNET CA, DC=cesnet-ca, DC=cz
Issued by CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz
Valid since May 20th 2018
Valid until May 22nd 2028
Serial number F4:EA:56:82:9A:36
Fingerprint SHA1 7B:2F:BA:0C:D9:3F:EE:D2:B0:69:1F:53:E7:EB:AD:05:A7:23:FC:74
Fingerprint SHA256 44:15:CE:97:5D:B5:64:16:16:4f:9D:09:D6:4A:B1:1C:E0:61:63:06:60:AF:27:41:0C:B4:66:D3:A2:CC:8A:0A
CA certificate Install (DER) — Download (PEM) — Preview (TXT)
Current CRL Stáhnout
Certificate chain CESNET CA4 Download (PEM)

CESNET Personal Signing CA 2

CA name CN=Personal Signing 2, O=CESNET CA, DC=cesnet-ca, DC=cz
Issued by CN=CESNET CA Root, O=CESNET CA, DC=cesnet-ca, DC=cz
Valid since March 18th 2018
Valid until March 28th 2028
Serial number F4:EA:56:82:9A:34
Fingerprint SHA1 C8:97:D7:A2:14:EB:16:05:91:C1:BA:7B:0F:EA:22:62:A5:6B:E3:BA
Fingerprint SHA256 39:8F:2F:45:F3:0C:80:52:B4:80:3A:91:EA:4A:37:EB:43:61:B6:7E:B3:78:FE:75:BD:C4:62:B3:54:2D:5A:97
CA certificate Install (DER) — Download (PEM) — Preview (TXT)
Current CRL Download

Old CESNET CA

The operations of CESNET CA are to be ceased in 2011.

CA name CN=CESNET CA, DC=cesnet-ca, DC=cz
Issued by CN=CESNET CA, DC=cesnet-ca, DC=cz
Valid since June 17th 2005
Valid until June 17th 2025
Serial number 42:B2:EA:1F
Fingerprint SHA1 B6:D8:8D:9D:CD:72:DF:1B:D6:CB:2E:EF:8E:64:2F:73:21:24:23:95
Fingerprint SHA256 BC:FD:A1:98:B5:56:97:B9:FF:F2:10:0D:E4:04:B2:CA:BA:4C:83:21:BD:B4:91:19:25:44:F5:EE:65:31:EB:E9
CA certificate Install (DER) — Download (PEM) — Preview (TXT)
Current CRL Download