https://pki.cesnet.cz/ 2026-04-15T11:58:57+00:00 https://pki.cesnet.cz/ https://pki.cesnet.cz/_media/logo.png text/html 2023-05-29T08:24:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ca4-obnova.html?rev=1685348671&do=diff Renewal of personal certificate issued by CESNET CA4 Requirements The following conditions must be met to renew a personal certificate in accordance with these instructions: * You have a valid personal certificate issued by CESNET CA4 and you have the appropriate private key. If this is not the case, it is necessary to partially text/html 2025-04-09T08:21:27+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/certificates-cca.html?rev=1744186887&do=diff CESNET CA Root Certificates and Revocation Lists Here you can find descriptions, certificates and revocation lists for Certificate Authorities operated by CESNET CA. CESNET CA Root CESNET CA Root issues certificates to subordinate CESNET PKI CAs: text/html 2025-03-04T14:16:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/certificates-tcs-new.html?rev=1741097800&do=diff TCS Server Certificates This page lists certificates of certification authorities providing the CESNET TCS service. RSA Certificates HARICA TLS RSA Root CA 2021 (root certificate) CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN= text/html 2025-03-04T15:16:32+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/certificates-tcs-personal-new.html?rev=1741101392&do=diff Personal TCS certificates This page contains certificates of certification authorities providing the CESNET TCS Personal service (personal certificates). RSA certificates HARICA Client RSA Root CA 2021 (root certificate) CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN= text/html 2025-04-09T07:58:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/certificates-tcs-personal.html?rev=1744185522&do=diff Personal TCS certificates This page contains certificates of certification authorities providing the CESNET TCS Personal service (personal certificates). RSA certificates HARICA Client RSA Root CA 2021 (root certificate) CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN= text/html 2025-04-09T08:09:39+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/certificates-tcs.html?rev=1744186179&do=diff TCS server certificates This page lists descriptions, certificates and lists of revoked certificates of certification authorities providing the CESNET TCS service. RSA certificates Hellenic Academic and Research Institutions RootCA 2015 (root certificate) text/html 2025-04-09T08:19:09+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/certificates.html?rev=1744186749&do=diff Root Certificates and Revocation Lists Here you can find descriptions, certificates and revocation lists for Certificate Authorities managed by CESNET PKI. Contents * CESNET CA * TCS Server * TCS Personal text/html 2021-12-14T12:12:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/coco.html?rev=1639483978&do=diff CESNET CA 4 - Code of Conduct Name of the service: CESNET CA 4 certificates Description of the service: Federalized login to the CESNET CA 4 certificates Contact person: CESNET, Jan Chvojka, jan.chvojka@cesnet.cz Jurisdiction: CZ Czech Republic text/html 2025-04-09T08:23:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/cp-cps.html?rev=1744187001&do=diff Certificate Policies and Certificate Practice Statement Certificate Practice Statement Certificate Practice Statement CESNET CA describes procedures exercised by the CESNET CA. The individual version of the CESNET CA CPS are listed in the following table: text/html 2023-11-02T14:27:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-aaacertificateservices.html?rev=1698935222&do=diff CA name C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Issuer C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Valid from January 1st, 2004 Valid to text/html 2017-02-10T13:08:35+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-addtrustexternalcaroot.html?rev=1486732115&do=diff CA name CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE Issued by CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE Valid since May 30th 2000 Valid until May 30th 2020 Serial number text/html 2023-11-21T10:28:53+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-geant-escience-personal-ca-4.html?rev=1700562533&do=diff CA name C=NL, O=GEANT Vereniging, CN=GEANT eScience Personal CA 4 Issuer C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Valid from February 18th, 2020 Valid to May 1 text/html 2023-11-02T14:14:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-geant-ov-ecc-ca-4.html?rev=1698934474&do=diff CA name C=NL, O=GEANT Vereniging, CN=GEANT OV ECC CA 4 Issuer C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority Valid from February 18th 2020 Valid to May 1st 2033 Serial number text/html 2023-11-02T14:38:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-geant-ov-rsa-ca-4.html?rev=1698935883&do=diff CA name C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4 Issuer C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Valid from February 18th 2020 Valid to May 1st 2033 Serial number text/html 2025-03-04T15:11:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-client-rsa-root-ca-2021.html?rev=1741101115&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA Client RSA Root CA 2021 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA Client RSA Root CA 2021 Valid from 19th of February, 2021 Valid to text/html 2025-01-28T12:55:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-geant-smime-ecc-1.html?rev=1738068949&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA GEANT S/MIME ECC 1 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA Client ECC Root CA 2021 Valid from 3rd January 2025 Valid to 31st text/html 2025-01-16T10:57:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-geant-smime-rsa-1.html?rev=1737025028&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA GEANT S/MIME RSA 1 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA Client RSA Root CA 2021 Valid from 3rd of January 2025 Valid to text/html 2025-03-04T14:35:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-geant-tls-ecc-1.html?rev=1741098957&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT TLS ECC 1 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021 Valid from 3rd January 2025 Valid to 31st text/html 2025-03-04T14:32:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-geant-tls-rsa-1.html?rev=1741098758&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT TLS RSA 1 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Valid from 3rd January 2025 Valid to 31st text/html 2025-03-04T14:33:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-tls-ecc-root-ca-2021.html?rev=1741098820&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021 Valid from 19th February 2021 Valid to text/html 2025-03-04T14:20:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-harica-tls-rsa-root-ca-2021.html?rev=1741098045&do=diff CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Issuer C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021 Valid from 19th February 2021 Valid to text/html 2023-11-02T14:18:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-usertrust-ecc-certification-authority.html?rev=1698934688&do=diff CA name C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority Issuer C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services Valid from text/html 2023-11-02T14:45:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-usertrust-rsa-certification-authority.html?rev=1698936302&do=diff CA name C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Issuer C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Valid from March 12th text/html 2017-02-10T13:08:43+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-usertrustrsaca.html?rev=1486732123&do=diff CA name CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US Issued by CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE Valid since May 30th 2000 Valid until text/html 2017-02-10T13:09:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/crt-utnuserfirsthardware.html?rev=1486732164&do=diff CA name CN=UTN-USERFirst-Hardware, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US Issued by CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE Valid since June 7th 2005 Valid until text/html 2025-04-10T10:57:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/footer?rev=1744282641&do=diff <https://www.cesnet.cz> Quick access ---------- * Network * Computing * Data storage * Security * Multimedia * Identity Contacts ---------- CESNET, z. s. p. o. Generála Píky 26 160 00 Praha 6 Contact us Admin login Service desk ---------- Tel: +420 234 680 222 GSM: +420 602 252 531 <support@cesnet.cz> General Data Protection Regulation text/html 2021-12-20T11:41:58+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/footer1?rev=1640000518&do=diff Links * CESNET PKI * eduID.cz * eduroam * MetaCentrum * PERUN * e-INFRA CZ * Personal data processing text/html 2023-05-30T12:46:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/footer2?rev=1685450797&do=diff Contact CESNET, z. s. p. o. Generála Píky 26 16000 Praha 6 <info@cesnet.cz> text/html 2019-11-26T15:40:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/footer3?rev=1574782831&do=diff Service desk Tel: +420 234 680 222 GSM: +420 602 252 531 <support@cesnet.cz> text/html 2025-04-09T08:28:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/gdpr.html?rev=1744187336&do=diff Personal Certificates and Personal Data Protection Certificate authorities issue personal electronic certificates to users on request. Certificates contain personal data provided by the user either directly or through their home organization (attributes provided through an IdP). Once issued the certificate is delivered to the user and from that moment on further use of the certificate and distribution of data contained therein is under the user’s control. The CA does not publish details used to… text/html 2025-04-09T08:24:41+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/guides.html?rev=1744187081&do=diff Guides This chapter contains user guides. Please follow these guides. Doing so will ensure fast and easy solution of your issues. Contents * Personal certificates * Personal TCS certificates text/html 2020-01-06T09:17:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-cca-crt-crl.html?rev=1578302233&do=diff CESNET CA Root Certificates and Revocation Lists Here you can find descriptions, certificates and revocation lists for Certificate Authorities operated by CESNET CA. CESNET CA Root CESNET CA Root issues certificates to subordinate CESNET PKI CAs: text/html 2023-09-27T11:10:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-cp-cps.html?rev=1695813054&do=diff Certificate Policies and Certificate Practice Statement Certificate Practice Statement Certificate Practice Statement CESNET CA describes procedures exercised by the CESNET CA. The individual version of the CESNET CA CPS are listed in the following table: text/html 2025-04-09T08:18:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-crt-crl.html?rev=1744186718&do=diff Root Certificates and Revocation Lists Here you can find descriptions, certificates and revocation lists for Certificate Authorities managed by CESNET PKI. Contents * TCS Server * TCS Personal * CESNET CA text/html 2018-05-07T12:07:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-guides.html?rev=1525694860&do=diff Guides This chapter contains user guides. Please follow these guides. Doing so will ensure fast and easy solution of your issues. Contents * Personal certificates * Personal TCS certificates text/html 2025-02-10T10:44:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-intro.html?rev=1739184240&do=diff text/html 2020-01-06T09:27:59+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-personal-ca4.html?rev=1578302879&do=diff CESNET CA4 personal certificates CESNET CA4 issues personal certificates for authentication, digital signature and data encryption. Personal certificates are issued with a maximum validity of 13 months. Personal registration with the registration office and submission of written documents confirming the correctness of the identification data specified in the application are necessary for processing the certificate application. text/html 2020-01-06T09:24:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-personal-overview.html?rev=1578302662&do=diff Personal certificates CESNET PKI currently offers these types of personal certificates: Personal eScience TCS certificates usable for: * user authentication in grid infrastructures * electronic mail security & encryption Almost all email clients trust these certificates by default. text/html 2025-01-28T12:29:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-tcs-crt-crl-new.html?rev=1738067377&do=diff TCS Server Certificates This page lists certificates of certification authorities providing the CESNET TCS service. RSA Certificates HARICA TLS RSA Root CA 2021 (root certificate) CA Name C=GR, O=Hellenic Academic and Research Institutions CA, CN= text/html 2023-11-02T14:50:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-tcs-crt-crl.html?rev=1698936619&do=diff TCS Server Certificates RSA certificates AAA Certificate Services (root certificate) CA name C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Issuer C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services text/html 2023-11-02T12:37:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-tcs-p-crt-crl.html?rev=1698928666&do=diff Certification chain of personal TCS certificates This page contains descriptions, certificates and lists of revoked certificates of certification authorities providing the CESNET TCS Personal service (personal certificates), provided from May 1st 2020. text/html 2023-11-21T10:14:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/ch-tcs-r-digicert-crt-crl.html?rev=1700561659&do=diff Robot TCS certificates AAA Certificate Services (root certificate) CA name C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Issuer C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services text/html 2025-02-10T10:43:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/intro.html?rev=1739184213&do=diff Certificate authority security in every certificate CESNET PKI The CESNET PKI provides PKI services for the Czech academic community. The certificates are issued to employees and students of Czech universities, Czech Academy of Sciences, and any organizations cooperating with these entities in the practice of research, educational and administrative functions as well as computers and application services operated by these organizations. text/html 2025-05-22T09:11:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/services.html?rev=1747905060&do=diff Services provided by the CESNET PKI Services provided by the CESNET PKI are described in certificate policies and Certificate Practice Statement available in the chapter Certificate Policies and Certificate Practice Statement. CESNET CA is not accredited as a provider of certification services in the sense of Act No. 227/2000 Sb. Certificates issued by CESNET CA cannot be used to secure communication with the state administration. They are designed for use in national and international researc… text/html 2024-10-15T11:54:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/sidebar?rev=1728993240&do=diff text/html 2025-02-10T10:39:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-cca-services.html?rev=1739183976&do=diff text/html 2022-03-08T13:26:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-guide-tcs-server2.html?rev=1646746014&do=diff TCS Server Certificates Since August 2009, CESNET, a.l.e., has been arranging Trusted Certificate Service (TCS) server certificates for the servers of organizations included in the Czech national research network CESNET2. It is not possible to allow organizations that are not connected to the CESNET2 network to use this service. The service is provided by Sectigo, one of the world's largest certification authorities. text/html 2020-01-06T12:18:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-user-change4.html?rev=1578313091&do=diff Change certificate content If you want to change the information contained in the certificate (eg add/remove/change email address), send the request by e-mail to ra@cesnet.cz. Describe clearly the changes requested in your application. Specify the complete certificate subject text/html 2023-05-29T08:03:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-user-lost4.html?rev=1685347429&do=diff Personal certificate CESNET CA4 Renew the certificate after the private key is lost or the original certificate expires * obtain a new proof of affiliation (unless the original is less than 3 months old) * arrange a new personal registration with your registration authority (if you do not know where to contact, write to ra@cesnet.cz) text/html 2023-05-09T10:33:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-user-new4.html?rev=1683628384&do=diff CESNET CA4 personal certificate If your organization is in the federation eduID.cz If your organization is in the federation eduID.cz, issue your certificate on the portal https://registry.cesnet-ca.cz/fed/. If your organization is NOT in the federation eduID.cz Contact us at ra@cesnet.cz. text/html 2023-01-31T10:13:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-user-rekey4.html?rev=1675160013&do=diff Renewal of personal certificate issued by CESNET CA4 Requirements The following conditions must be met to renew a personal certificate in accordance with these instructions: * You have a valid personal certificate issued by CESNET CA4 and you have the appropriate private key. If this is not the case, it is necessary to partially text/html 2020-01-06T11:55:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/st-user-revoke4.html?rev=1578311722&do=diff Certificate revocation You will request the revocation of the certificate by e-mail signed with a personal certificate sent to the relevant registration authority. Be sure to include the serial number of the certificate you want to revoke and the reason for revocation. text/html 2021-08-18T10:58:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/tcs-personal-user.html?rev=1629284295&do=diff Issuing a Personal TCS Certificate The process of issuing a Personal TCS Certificate is fully self-served. In order to access this service, the following criteria must be met: * your home organization must be a member of eduID.cz, acknowledged as an Identity Provider text/html 2022-03-08T12:39:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/tcs-personal.html?rev=1646743194&do=diff Personal TCS certificates TCS personal certificates are used to secure e-mail and to authenticate to access network services. CESNET publishes them within the project Trusted Certificate Service. Currently, the issuer of these certificates is Sectigo. By default, most common e-mail clients trust its root certificates. TCS personal certificates are available to users of organizations included in the national academic federation of identities text/html 2023-11-22T09:33:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/tcs-server.html?rev=1700645580&do=diff TCS Server Certificates RSA certificates AAA Certificate Services (root certificate) CA name C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Issuer C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services text/html 2026-02-25T10:29:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://pki.cesnet.cz/en/tsa-overview?rev=1772015394&do=diff Timestamps - Information for users What timestamps are for The purpose is to associate unquestionable time information with a particular object. This usually serves as proof that the document existed at that time in the past. The user can request a timestamp for the file (it is possible to generate timestamps for PDF documents in Adobe Acrobat Reader after it has been configured) or a server (for logging).