CA kubek.cz (established 2013)

CA certificate: ca.crt (PEM format + plaintext)

Revocation list: ca.crl (PEM format)

The CA certificate is to expire in January 2031,
but much can change before then...

RootCA kubek.cz (established 2026)

CA certificate: rootca.cert.pem (PEM format)

Revocation list: rootca.crl.pem (PEM format)

This is the new root CA with validity up to year 2099.

InterCA1 kubek.cz

CA certificate: interca1.cert.pem (PEM format)

InterCA1 and RootCA certificate: interca1.bundle.pem (PEM format)

Revocation list: interca1.crl.pem (PEM format)

This is the generic intermediate certificate authority for multiple purposes.
It is valid to 2035.

JK.