FAQ

General questions


Questions Relating to the Domain Registration


Name server sets and Key set


Legal disputes


Partial activities of our association



What is CZ.NIC, z.s.p.o.?

CZ.NIC, z. s. p. o., is an interest association of legal entities, founded in 1998 by fifteen legal entities – leading providers of Internet services.

CZ.NIC is a member of international organizations that bring together similar associations in the world (CENTR, ccNSO and others) and also a member of the association EURid that is managing the Europe domain .EU.

The association is registered in the Federal Register of the Municipal Court in Prague, file L 58624. The association has been assigned the ID 67985726 and tax ID CZ67985726.

Where can I verify data of the association?

Important information about the association is available at www.nic.cz – here you can also find a copy of the registration document of CZ.NIC z.s.p.o. in the registry of associations of legal entities at the Municipal Council of Prague and the relevant tax authority.

Who and how can become a member of the association?

A candidate who meets the conditions stated in the articles of the association may ask to join the association. For more information go here.

What is the association CZ.NIC, z.s.p.o. doing?

The main activities of the association is the operation of domain names .CZ, security service top-level domains CZ and raising awareness of domain names. The association is now intensively working on expanding DNSSEC technology and services of mojeID, expansion and improvement of domain administration system. It supports new technologies and projects beneficial to the Internet infrastructure in the Czech Republic.

I am interested in employment with you.

List of vacant positions can be found in the Career section. If you are interested in any of these positions, please send us your CV in Czech or English to the e-mail prace@nic.cz. Please provide the name of the position you are applying for.

I would like to subscribe to receive news.

If you want to learn more about the association projects, updates on Internet technologies, subscribe to the mailing lists CZ.NIC. For more information about the activities of the Association search Facebook and Google+ page. You can occasionally follow observations on domains and domain technology on Twitter CZ.NIC. Interesting articles can also be found in the scrapbook CZ.NIC on our blog.

What is a domain and a domain name?

A domain (i.e. a domain name) is a unique text name that on the Internet stands for the numeric representation of a server location, called an IP address. This is a set of characters that is before the .cz extension. You can choose basically anything as your domain name, but you can use only English letters (i.e. without Czech diacritics, regardless of the case - the domain name www.nic.cz is the same as www.NIC.cz), numbers and hyphen up to 63 characters. Also, do not start or end the name with a hyphen and do not write two hyphens in a row, otherwise the registration would fail. Your domain name will therefore be for example novakovi.cz.

What is the difference between CZ.NIC Association and a registrar?

CZ.NIC Association manages all domains that are registered in .CZ. It takes care that the entire system of domain registrations works as it should work. A domain holder does not usually come into contact with it because everything from the beginning to the end is solved with his registrar or his partner (subregistrar). A registrar is authorized to perform domain registration on the basis of the concluded contract with CZ.NIC. A subregistrar is his contractual partner whom CZ.NIC does not know and does not check it in any way (but it should meet the same conditions as a registrar). Always pay attention to who you work with including the selection of your registrar. If you are not satisfied you can always choose another registrar.

How can a domain be registered and when does it start to work?

First choose a registrar from the list of registrars. It may occur that your local Internet provider cooperates with one of the registrars as the so called subregistrar. However, this information is not known to CZ.NIC and has no effect on subregistrar's activities. It is not possible to register your domain directly at CZ.NIC. Keep your eye on the fact that your chosen domain name is not already occupied or does not contradict the conditions (see above - What is a domain and a domain name?) The domain will be registered to you usually immediately after you pay the Registrar for it. You can check the registration at www.nic.cz right on the home page (Search in the registry). Would you like to have your own e-mail to your domain? To place a website? Then you need a web space provider. This service is often offered by your registrar. Be aware that it costs something but it should not be a bankrupt for you:-). You do not have to start using the registered domain right now. It is up to you. We do not require to enter data of the name servers on which the domain will be located at the registration. You can add this information later when you need it. But that's not everything! You can create a special address in the form rybicky.novakovi.cz under your domain. For example it can be dedicated to your home fish (rybicky) and then you can check them via a connected webcam! "Rybicky" is a third-level domain. It is up to you if you put it on your domain or not. You do not need anything from CZ.NIC to arrange that and CZ.NIC will not need anything from you (it will not know about it!).

Are you interested in the whole domain system more in details? Check out this page.

And why to have such a domain? And how to choose it? Our website may help you.

Just to clarify - you can register a domain for at least a year and a maximum of 10 years. Of course, you can always extend its validity for the next period through your registrar.

Can I register other domains with CZ.NIC than .CZ?

CZ.NIC Association maintains a register of domain names .cz, you can search domains with a different suffix (.com, .sk etc.) elsewhere.

Most registrars that offer domain registration .cz is also able to register domains with other suffixes. Thus contact directly your registrar and ask for information.

Who do I have a concluded contract with?

Domain registration is provided for you by the registrar that you have chosen. So, you conclude a contract with the registrar that may be providing other services for you. That means you conclude a contract with CZ.NIC through your registrar. When you register a domain and extend its validity then you agree with the current version of the Registration Rules and Regulations of alternative dispute resolution. By registering a domain and declaring an agreement with the version of these documents you get into a relationship with CZ.NIC.

You conclude a contract for the period your domain is registered. Of course, you can cancel the domain right by your registrar.

How can I change my Designated Registrar?

Contact your chosen new registrar who will arrange everything. It is necessary to disclose the password for transfer to the new registrar to accomplish a succesful change, see What is a password for transfer and where can I get it?.

In case you change your domain registrar then the period for which the domain is prepaid does not change.

What is a password for transfer and where can I get it?

The password for the transfer (you may also come across the term "AuthInfo") is a password used to confirm the transfer of an object (domain, contact, set of nameservers, set of keys) from one registrar to another. If you decide to transfer the domain name (contact, NSSET or KEYSET) to another registrar, you must enter this password for the transfer to take place.

You can get the transfer password in the following ways:

  1. Via the current registrar.
  2. Via the new target registrar.
  3. By filling in the form.
  4. If the contact is registered with MOJEID, it is possible to find out the AuthInfo after logging in via the Domain Browser.

You always request AuthInfo for the relevant object for which you subsequently change the designated registrar. If you have a domain password, you only transfer the domain to the new registrar, but the contact, NSSET and KEYSET remain with the existing registrar. All domains, NSSETs and KEYSETs linked to this contact can be transferred only with the password for the contact.

Transfer password (AuthInfo) validity is limited. Validity period is specified in the Rules of Technical Communication.

I do not have a current e-mail address in the central registry, I cannot receive an authorization password.

If you have an out-of-date e-mail address listed for your contact in the central registry, it is advisable to first change it through the designated registrar so that the domain can be managed in the future. If this change is not possible, or the registrar requires an authorization password from you to change the e-mail address (some registrars use AuthInfo as authorization of an authorized person also for changes to contact data), it is possible to send the password to another e-mail address. In such a case, it is necessary to fill out the form and select sending to "another e-mail". Subsequently, it is necessary to verify the application in one of the following ways:

  1. Via an officially verified signature
  2. Via data box
  3. Via electronic signature

Currently, accreditation for the performance of activities of an accredited provider of certification services are granted to the following three authorities:

What happens if a Designated Registrar ceases to provide service?

All of the domain names of this registrar will remain in the central registry. Domain holders will be informed of the termination of its registrar and how to proceed if they choose a new registrar by themselves or if it is assigned to them.

What does it mean an expiration date and where can I find it?

This is the date to which a holder has paid a domain. But the domain is not going to be cancelled on that day it has just entered the protective period. It takes 60 calendar days: the domain is fully functional for 30 days, then it is put out of the zone and on the 61st day it is definitelly cancelled. It is no longer possible to extend the validity of the domain on the 61st day. You can find “to cancel” in the domain statement.

The expiration date can be found in the domain statement on this page. You can also find all the unmasked data that we register about the domain - information about the holder (owner) of the domain, contacts, nameserver sets and key sets.

A request for a temporary inclusion of a domain to the domain zone.

After a domain is put out of the zone (on the 30th day after expiration) it is possible to ask for its temporary inclusion back into the zone .cz. Requests can be sent by e-mail to podpora@nic.cz. The request must contain the name of the discarded domain, your name and last name. The domain is temporarily opened for 7 days then set out of the zone again. The term of the domain cancellation does not change in any way by this intervention.

What should a holder (also a future one) be aware of?

Your domain name must be correct and free of typos – the name of the already registered domain name can not be "fixed". In that case it is necessary to register a new domain. The name of your domain and the way you use it does not harm anyone - if you want to offer your perfect homemade lemonade definitely do not sell it under a name myperfecthomemadekofola.cz (my-perfect-homemade-kofola.cz). Before registering try to consult your dream name with the list of company registers or the registration of trademarks. If someone feels affected by your registered domain (or by its content) all his claims will go after you. Unless you have your dream domain name registered definitely do not boast anywhere with its name (the only exception is the Patent Office or the Registration Court when you go to register the trademark or to establish a company of the same name)! Domains are registered in the order in which the registration requests were delivered through the registrars. If someone overtakes you then you have to deal with a very difficult situation with an uncertain outcome. Continually keep an eye on the fact that you have your domain data current – name or your company name, e-mail and postal address. Only then you can rely that you get the information relating to your domain in time (such as its expiration date is approaching or changes are made). Also keep in mind that in extreme cases incorrect data may be the reason to cancel the registration of a domain.

What are contacts and identifiers and what do I need them for?

A contact is the administrative data of the person to whom it belongs to. An identifier or ID is an alphanumeric item that distinguishes contacts.

You do not need to fill in all your details for each domain you register. You simply create one contact via your registrar or the MOJEID service that contains your data, and then you can register one domain name after another for it, even with other registrars.

When you change any of your data there is an advantage that you correct data only in this contact and the change is reflected in all domains that are registered for that contact. That is exactly how simple it is. Just keep an eye that you do not forget to correct your data.

To establish a contact is free of charge.

What is a name server set?

It is a structure where name server sets and relevant contacts of technical administrators of name servers are listed. Such a set is as a whole assigned to a domain name. The same nameserver set can be assigned to other domains. This allows simplifying the administration of nameservers.

I have already set up a contact but it does not exist any more. Why?

Contacts that were not attached to any domain for 6 months are automatically deleted. After 2 months after deleting such a contact you can register that contact again and start to use it. Registration of a contact is free of charge.

I have moved to another address. I got married and have a different name. My company has changed its name. I need to transfer a domain to someone else. How can I do it?

Always contact your registrar regarding change requests. A domain holder or the one whom the respective registered contact (see What are contacts and identifiers and what do I need them for?) belongs can make any changes in a domain or contact. But there are also a few entries within a domain that may be changed by someone else. Be sure and rather see appendix 2 of Registration Rules. There is a clear and understandable table. In case of doubt send us an e-mail or call us. A required form of request confirmation (authorization) thus verification that the request for change actually gives the authorized person depends exactly on your registrar. It can be a confirmation by e-mail that is given by the holder, an electronic signature or a certified signature. A method for verifying the change request can be one of the criteria by which you choose your registrar.

Can I protect my domain from an unauthorized change?

Nobody is infallible. A mistake can be made by your employee, colleague, registrar or by you. Protect your domain or contact from unsolicited changes. Block them at CZ.NIC Association and no change will be possible through the registrar. If you want to change anything first it will be necessary to unblock a domain or a contact with CZ.NIC. These blockings are confirmed by an electronic or certified signature. Nowadays it is possible to block or unblock a domain online in the Domain Browser (on www.domenovyprohlizec.cz) - this applies only for validated accounts mojeID (more on the mojeID).

What is a price of a domain?

The exact amount for a domain for the selected time period is always conveyed to you by your registrar. If you order other domain services at the same time then you surely find a breakdown of these services and their quantification on the invoice. It is always going to be an invoice from the registrar – you do not pay any fees directly to CZ.NIC. It works that you pay the registrar and the registrar pays CZ.NIC. The registrar purchases domains from CZ.NIC for the wholesale price that is not a secret and you can find it in the Price List.

Contact registration and making any changes are free of charge.

How do you work with my personal data?

The handling of your personal data is a subject to legal protection and the CZ.NIC Association acts in full compliance with legal regulations. For domain name registration, respectively contact name registration, only a minimum of data is required - name, e-mail and postal address and of course the identifier. If you are interested in details, see Appendix 1 of the Rules of Registration. Obviously, we will not provide your data to anyone else, but the people we have to provide it by law - such as the police, the courts, the tax authorities, etc. - are the exception. For a complete overview of the processing of your personal data by CZ.NIC, see the Privacy Policy. The security and protection of your data is very important to us, and even that is why we hold the ISMS certification (ISO/IEC 27001).
In order to be able to comply with the requirements of data protection legislation, but also to keep you informed of what is happening or going on to happen with your domain name in time, it is necessary that you keep your data up to date. If you find any discrepancy with the actual status, contact your registrar as soon as possible.

Why do you show my home address on your website? Can I disable it?

The data in the public part of the register is used to identify domain name holders to others. All personal information is automatically hidden, except for the name of the organization, the name of the individual and the postal address. It is also possible to hide the postal address information if the contact is registered to a natural person (the Organization field is not filled in) and at the same time is managed via the MOJEID service and the contact is validated. Therefore, only the information about the name or organization will always remain visible. This is due to the protection of the rights of you as the holder of the domain name and other persons, including consumers, ensuring safety on the Internet and also confidence in the content published on it. There is therefore a wide range of people who have a legitimate interest in the availability of the Whois database and the correctness of the data contained in it and the possibility to obtain data on domain name contacts without unnecessary costs and delays.

Please note, however, that we may disclose even hidden data in accordance with the obligations imposed by law – to courts, including an arbitrator, the police, tax authorities and others. We will also provide them to those who request it - but they must prove their identity, as well as state and document the purpose for which they need the data. CZ.NIC is not obliged to comply with such a request (if it comes to the conclusion that it is against good morals, the applicant does not provide the purpose, etc.).

If you would like your data to be publicly displayed in the Whois database, you can edit the settings in the Domain Browser or contact your registrar.

Can I get historical data about a domain?

Yes, we provide it to a current holder of a domain but no longer than 5 years back if available (in most cases they are). We also convey data from the history of a domain to parties to whom we must provide it by law - such as police, courts, tax offices and others.

Is it possible to pledge a domain name?

A domain name can be considered as another's asset or a subjective right of the holder of a domain name deriving from the contract on the registration of a domain name. A domain name or a right hereto can be a subject to the pledge. The pledge follows from the conclusion of a written contract unless stated otherwise. CZ.NIC does not record the existence of a pledge in the registry of domain names. Regulation of mutual rights and obligations is entirely the responsibility of the contractual parties. CZ.NIC points out that it has no jurisdiction to resolve any disputes related to pledge contracts that may emerge between the contractual parties.

I registered an .eu domain with diacritics. Is it also possible to register the same .cz domain version?

The .cz domain administrator is technically prepared for the IDN system, which allows domain names to contain the national alphabet characters. So far, however, the system is not implemented, as the Internet user community in the Czech Republic (both individuals and organizations) is not interested in introducing IDN.

Detailed information including various opinions on the introduction of diacritics in .cz domains can be found at háčkyčárky.cz.

Who is my administrator of the name server set?

If you are not sure who your technical administrator of the name server set is, you can find it on our website. On the https://www.nic.cz/whois/ link, enter your domain name in the form and see which entity is listed as a Technical Contact or Designated Registrar in the Name server set section. After clicking on one of the listed entities, a page with more information will be displayed together with a contact to which you can direct your requests.

What is Automated Key Management (AKM)?

AKM is a keyset management service for domains that have set DNSSEC (Domain Name Protection) security. These keys need to be changed periodically to avoid cracking them. This is an automated process between the technical administrator of your domain and the CZ domain registry, in which we exchange the information necessary to operate DNSSEC on your domain. The process is set up in such a way that you as domain holder do not have to deal with anything. Adding a domain to the Automated Key Management System means no changes for domain holders or end users. Both the domain and website work the same way as before, with no changes to billing or contact information.

During the scan, you can find the current scan results in the Whois web application on the domain detail page.

How to exclude a domain from the Automated Key Management (AKM)?

You can exclude a domain from the AKM System by sending a request to your technical administrator of the name servers set, which will issue a so-called erase CDNSKEY to ensure that your domain is excluded from the Automated Key Management System. You can then set up DNSSEC security through your administrator. Who is your administrator of the name servers set can be found HERE.

How to prevent a domain from being added to Automated Key Management (AKM)?

Send a request to your technical administrator of the name server set to cease publishing CDNSKEY records on your domain. Who is your administrator of the name servers set can be found HERE.

When changing the name server set, is it necessary to turn off DNSSEC?

No, DNSSEC does not need to be turned off when you make changes inside a set of name servers or when you replace the entire set of name servers.

What is the procedure for resolving disputes between a domain holder and another person?

If there is no agreement between a domain holder and another person then the court must resolve the dispute. This is either the Arbitration Court attached to the Economic Chamber of the Czech Republic and the Agricultural Chamber of the Czech Republic or the court according to the law. A comprehensive process of dispute resolution is available here.

For detailed information about the arbitration clause and the proceedings at the Court of Arbitration go here.

What is the role of CZ.NIC in the context of disputes concerning domains?

CZ.NIC does not resolve any disputes – it is a private entity and can not decide whether someone has broken the right of someone else or not. However, as a statutory duty it provides necessary cooperation to courts, police, finance, trade offices, notaries, liquidators, executors and other authorities. The cooperation is mostly in a form of providing information about the holder of a domain or domains that he has now or had in the past. However, it must always be a specific person or a specific domain and the information is provided specifically for the purposes of the proceedings.

Based on the decisions of such authorities such as courts in most cases, CZ.NIC carries out in particular:

  • blocking a domain (a domain holder can not transfer such a domain to someone else or to cancel it)
  • putting a domain out of DNS (a domain does not work)
  • changing a domain holder
  • cancelling registration of a domain.

What exactly CZ.NIC can or can not do is available here. To block a domain in case of a dispute may be done at the request of the prosecuter; however, such a blocking can not last longer than four months and can not be repeated in less than a year.

Where can I find the Rules for registering domain names?

The Rules for registration of domain names in the ccTLD .cz valid from January 1, 2014 are available for download in PDF file here. Older versions are not available on Internet but we can send it to you. Just send a request to the e-mail podpora@nic.cz.

MojeID

MojeID is a new service based on the OpenID principle thanks to which you can subscribe to various websites where you can see the icon mojeID or OpenID. You change data by yourself in your mojeID account which brings a benefit to the domain owners because mojeID can be linked as a contact person to domains.

You can find out more at www.mojeid.cz.

Domain Browser

Domain Browser is an application that is used to display data from the domain registry and at the same time it is directly linked to mojeID account.

If you have your mojeID account by your domain stated as a domain holder or an administrative contact then you can check the following about your domain in the domain browser: its status, the date to which the domain is paid (and by which registrar you may extend its validity), if the domain is protected by DNSSEC and what is the role of mojeID account in relation to the domain - whether it is a domain holder or an administrative contact. It is also possible to display all the domains where mojeID account occurs regardless by which registrar the domain is registered.

If the account is held as a technical contact for a nameserver set or key set then it is possible to display them. You can list the name servers sets, key sets and also domains for which these sets are kept.

You have all your data clearly in one place.

I can't log in to the Domain browser or it is not possible to manage the contact (e.g. hide the address).

Only those who have a MOJEID account can log into the Domain Browser. It also depends on the level of the identification of your account, whether it is partially identified (PIN1 and PIN2) or validated.

With a partially identified account, you can only log in to the Domain Browser. If you want to manage a contact via the Domain Browser, e.g. hide a postal address in the public Whois database, or block changes to the domain, it is necessary to have the MOJEID account validated.

CZ.NIC-CSIRT or how is security of Czech domain space provided?

Security is provided by a security team CZ.NIC-CSIRT which is in charge of security incidents in the Czech national domain. It cooperates with other security teams in this area in the Czech Republic and abroad. Organizationally, the security team is ensured by the staff of CZ.NIC, it is not a separate legal entity.

Within this activity CZ.NIC may exclude those domains from the zone that are used in a such way that there is a threat to national or international computer security. It means in particular that malicious software (viruses) is spread via domains or a content of other services (phishing) is pretended, etc. A domain can be excluded from the zone up to one month even repeatedly. The Association is of course also working in this area with state authorities especially with police of the Czech Republic.

However, the security team does not solve standard disputes between a holder and other persons, copyright infringement, distribution of spam, etc.

CSIRT.CZ

CSIRT.CZ (CSIRT = Computer Security Incident Response Team) is a security team to coordinate the resolution of security incidents in computer networks operating in the Czech Republic.

The goal of CSIRT.CZ is to help providers of Internet networks in the Czech Republic to set up their own security teams and security infrastructure to deal with security incidents and to improve the security of their networks and the global Internet. CSIRT.CZ also helps to transmit reports on security incidents to administrators of networks or domains of which incidents come but which do not respond to complaints. In this respect CSIRT.CZ serves as a kind of "institution of last rescue" in case that other methods of contacting administrators fail.

The security team CSIRT.CZ is operated by CZ.NIC, the administrator of Czech national domain, on the basis of the memorandum signed in 2012 with the National Security Agency.

CZ.NIC Labs

CZ.NIC Labs is a development and research department of CZ.NIC Association which is engaged in research on the Internet, Internet protocols, network operations analysis, passive and active monitoring and design prototypes for further development within CZ.NIC. The responsibilities of CZ.NIC Labs is focused on the benefit of the local Internet community; however, its outreach is international. The staff of CZ.NIC Labs actively participate in international working groups of organizations dealing with the development of Internet protocols, monitoring of network operation and administration of Internet in general.

More information about CZ.NIC Labs and their activities can be found on this website.

CZ.NIC Edition

Book publishing is one of the other activities of CZ.NIC. The aim of this project is to publish expert and popular publications associated with Internet and its technologies. In addition to printed versions the electronic format of books is also being published in this edition. Moreover, it is possible to write and cooperate on the publication of books for the edition.

For more information go here.

CZ.NIC Academy

A specialized learning centre was opened on the 1st of April 2009. The Academy offers training opportunities for those who are interested in Internet and Internet technologies. The courses are designed for those who want to learn more about the listed topics, to try the presented topics in practice, to share experiences with lecturers but also with other course visitors. The lecturers of CZ.NIC Academy are employees of the association, university professors and expert practitioners. Another part of the training center is a laboratory equipped with hardware and software needed for testing and experimentation in the classroom.

Go here for more information about CZ.NIC Academy.

What is DNSSEC?

DNSSEC is an extension of DNS and it prevents to forge false, altered or incomplete data about domain names.

Fred

CZ.NIC Association uses DSDng registration system FRED (Free Registry for ENUM and Domain) for managing domain registrations. This internal project of CZ.NIC was released as open source software licensed under GNU GPL (General Public License). Those interested can obtain the system including source codes on this website - pages are available in English only.