DV SSL/TLS Certificate for *.croma-co.hr

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the *.croma-co.hr DV SSL/TLS Certificate

This certificate with serial number 05:ae:2b:c0:78:86:f5:f7:de:b6:60:5e:b9:0d:f9:6b:0c:d8 for *.croma-co.hr was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.croma-co.hr provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:ae:2b:c0:78:86:f5:f7:de:b6:60:5e:b9:0d:f9:6b:0c:d8
Serial Number (int): 494828717672441965644111378040748509957336
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 61:5d:6b:55:ca:c7:ee:2f:86:6c:e8:58:83:e6:d7:7f:37:72:c0:e2
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): f4:00:f9:78:d2:3e:81:7d:30:f1:ed:3a:0e:fe:68:07:1a:80:19:7b
Fingerprint (SHA-256): e5:c7:fe:b8:19:b7:c9:00:eb:74:fe:02:72:87:d8:e2:2b:45:9d:5a:45:be:c2:e2:b7:51:4c:e3:6b:7e:a7:48

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/89.crl

Check the revocation status for certificate *.croma-co.hr
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.croma-co.hr

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.croma-co.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpgCWXUT97zxaw4JSp0M
IktCuI/pF1Xb2zY260keQEKcb7vGEKX9VOy1HDwsPmrQGWC1QqmgkkiGyWPwvVhQ
E/f5WO1TqSM+t22v5EXZ/iGADefk1ETfOqdpzwBiZxPkMZbjXR3qDAyxR0FEdupC
+Op+DkNvhpf9o5AqPaortN3S1bul/LQHZ0BJvh5mq2JTROX1Hoc0Gjl6Up8vLQiN
2Aam+1q1OUYwhufqS6WdL/RnUWV5Ft7xcSQJjRS/hhIgWK6cC+EvEQMBcO8NHz9N
Qr2DXXnGbnImHvv/Z4Em8WcwULRcAgCqpeqeVi51EXIZT0ZpGjAbKfmrp6m0c2PZ
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 494828717672441965644111378040748509957336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 09:55:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-23 09:55:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.croma-co.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25070142902452362184770480174644110818967164289344066773302654471560453888372091064178879460130382540481190052645729983195341920600297139912615295035669798728474070339417325731679106588075817085270960927994566410387207415526125493643404881147770579506141796285261621255462611494497497248539072126879023350630623649839956087238372820128601561642563326800971272483035892241615390694264527142388436466431834722738951355721054336319821729195860023238174509584988080348825687127169184852517912489505948230131646985485477886605612123202736605990400361749825057337937688994197391557648574328759824766485739843301174396836231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							615d6b55cac7ee2f866ce85883e6d77f3772c0e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croma-co.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croma-co.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/89.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197071458570000040300473045022100a694406cd35f5e757ed7c0d998ee8ad2c560fcc439898795fcc48fc70523567902204747bc7eda3577772ed5b5f7b895ce48849d4880287fe5be26a125c7016640da007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001970714583e000004030046304402205c344be238e7fabb57c31341575a01d6d10bbf7fb4257593e11a4e466c8c1cf902206091441b5dff6030d6fc07524f15d27d684a5d1f4c130a001da2e1dfc7d93b8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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