ezrlkv.gov.si

- Ministrstvo za javno upravo -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 58:8f:c3:be:bd:1f:45:a3:91:ac:ca:f7:20:df:de:b2 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministrstvo za javno upravo

Organization: Ministrstvo za javno upravo
Locality: Ljubljana
Country: SI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:8f:c3:be:bd:1f:45:a3:91:ac:ca:f7:20:df:de:b2
Serial Number (int): 117718532261597139369617556274927361714
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 01:7d:bb:a6:24:17:66:97:91:93:f9:de:37:e1:09:81:c0:3b:6b:aa
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 07:ef:28:42:3e:9c:a5:e0:3c:9d:9a:fe:e3:85:64:66:a0:c5:c4:39
Fingerprint (sha256): 05:1e:ad:4c:b1:f1:ea:f3:c7:a8:a1:19:c8:e5:fc:75:ee:ca:ad:3e:97:ec:0c:33:a1:92:88:34:fe:1b:77:0f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ezrlkv.gov.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ezrlkv.gov.si

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ezrlkv.gov.si

Other certificates including the domain name gov.si

(limited to 100 certificates)
www.arrs.gov.si
prostor.gov.si
vs-sola.gov.si
www.umar.gov.si
testas2.ujp.gov.si
ajuda.mkfull.com.br
ajuda.mkfull.com.br
*.mzz.gov.si
vpndist.gov.si
storitve.pis.gov.si
ovn.gu.gov.si
ffws-rp.arso.gov.si
podpora.ema.arr.gov.si
arsktrp-mlkp.gov.si
mksid.ursjv.gov.si
www.meteo.si
ezrlkv.gov.si
etkv.gov.si
jep-test.gov.si
vpn.ujp.gov.si
faq.able.co.jp
esp.azil-test.gov.si
isk.gov.si
efotograf.gov.si
connect.sigov-ca.gov.si
spot.gov.si
rtes.arso.gov.si
faq8now.8securities.co.jp
ure.arso.gov.si
betaujpnet.ujp.gov.si
apl.ars.gov.si
efotograf.gov.si
volitve.gov.si
www.ujp.gov.si
zgs8.zgs.gov.si
storitve-ca.gov.si
ajuda.mkfull.com.br
vprasalnik.gu.gov.si
gis.gov.si
intra.gov.si
www.gov.si
sirena.arso.gov.si
sicas.gov.si
www.svv.mzz.gov.si
storitve-mkgp.gov.si
e-uprava.gov.si
ua.gov.si
www.potresi.si
sirena.arso.gov.si
tr.mss.gov.si
evem-sola.gov.si
emddsz.gov.si
cis.uvhvvr.gov.si
krimlb.arso.gov.si
www.ess.gov.si
prostor.zgs.gov.si
nerdcp.gov.si
faq.test-able.jp
efotograf.gov.si
siut.gov.si
predlagamvladi.gov.si
epanel.gov.si
odlozisce.ujp.gov.si
ujp-eplacila.gov.si
mkgp-crc.mkgp.gov.si
apis-g.arso.gov.si
teorija-priprava.gov.si
betaujpnet.ujp.gov.si
nm.gov.si
www.stopbirokraciji.gov.si
tr.mss.gov.si
ekt2jedro.gov.si
neo-test.gov.si
vprasalnik.gu.gov.si
e-uprava.gov.si
pgc5.gov.si
csmfaq.refuel4.com
vs.gov.si
enakvis.portal.gov.si
jodp.mf.gov.si
kos.arso.gov.si
imv-mop.gov.si
ovn.gu.gov.si
e-uprava.gov.si
storitve-mkgp.gov.si
ecarina.fu.gov.si
www.arrs.gov.si
sicas.gov.si
euprava-storitve.gov.si
ua.gov.si
ecarina.carina.gov.si
cip.gov.si
ecrp.gov.si
evidim.gov.si
www.meteo.si
sipeps-pprod.gov.si
etor.mnz.gov.si
faqchloe.8securities.co.jp
e-prostor.gov.si
ema.arr.gov.si

Certificate

The complete raw certificate details for ezrlkv.gov.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotiSQdjVhRh0xEqkZAmV
8vApbWVFsIyLoLTzKdHKbCDJomDaja2GCE6uqaLV4Ny7c8pjzJ92VfcNV3r3NZds
DEKRJgOhJXYQsRO3YzEHm+v+BRIJGGyzSzK/nnuECQRi2Hzs/EwerCu14lN63erE
3jqL4h4JgIfGRKSFk1e6plsjNWDyThS6zPYfJa1gj6VHJ9SRzuvNjuQptiJ/09AC
vbiq1QHrPxmLYjgZgpQjQNfWieXNBbkTFlWIPIU09i81+H7btrJ/yjDxxJbOUb7Z
SA9MNUUt7msoD8KpSu4+yhA/9P2tJORl8snnmZI/r9/sYq48+KCDqaT178GMh0ec
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117718532261597139369617556274927361714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 09:26:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 09:26:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ljubljana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministrstvo za javno upravo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ezrlkv.gov.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20557400701350527590622843021849248281941866648721048574091691379241428249699380628080115160963861360965343423817969800837549121574496555635808117498180528118761407775611235070277642637332988528105223424900088235082863778323882019553083179138352222648046255061537287815003288406018644250338736172812432255605532099695883118572339849354062090183922322834281528044731097598654578617063340259233759442706871808795649830319792736178927170746408877658184252152642389894054570406037359087497233077070900806991152779669708588563302998860021751554014183722891957208825241424856988600841367250857229499602777524948526669733037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							017dbba6241766979193f9de37e10981c03b6baa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezrlkv.gov.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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