www.potresi.si

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:fe:0c:43:d2:cf:ca:85:c2:25:ab:ae:99:f6:8e:42:8c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.potresi.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:fe:0c:43:d2:cf:ca:85:c2:25:ab:ae:99:f6:8e:42:8c
Serial Number (int): 429433752281418739281326624241295435907724
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:f7:df:25:a9:93:d3:22:b4:97:85:53:7b:f6:a5:d0:e5:9f:45:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:ba:5e:ed:9a:5b:39:3b:53:a3:47:58:17:dc:91:d3:26:b6:5e:b0
Fingerprint (sha256): 0f:dd:0a:0b:59:45:d8:ab:8a:cb:eb:59:91:98:48:19:24:7c:a0:10:e2:e2:00:38:87:fb:e8:49:4b:15:24:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.potresi.si

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.potresi.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

potresi.arso.gov.si
www.potresi.si
www.seizmo.si

Other certificates including the domain name potresi.si

(limited to 100 certificates)
www.potresi.si
www.potresi.si
www.potresi.si

Certificate

The complete raw certificate details for www.potresi.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429433752281418739281326624241295435907724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 10:33:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 10:33:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.potresi.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688189391856385963374063982813031606526260277712813906590922612532075648523464842862891084948464453926925555882533097820734964059012726921312292987676225696204043562953087038052466398777526339835748908120516009796033725223494682921939566836588770696229381484748892245855135268837745087241155439582928669596906534317340209489900772480372522367719870067175089382949087253808070175208986069507464086799533015177856302860188533100810222768298899645544498321573848211471378403695636692429463339795415286525886288871410411070068201875101134042651781622626195748829160905513599112607658026591289361281314074031286759644908410287348923616038454023761661918549692036649679579603067006665396354521769778956986624476503443375030045565040606537446899978788304476188239267814514520678964365735511937087094747260119231815169661337206201819230145864384251093109378981314424203573322605553367199620948666459292458614270075716654257079757608224803899895884407053776862895464357427926387099976542395232789504767500720772297313352628337371784279516225712599203658492242972949889034234215655600115660517506312288852782835595334621115256557749408593499327699015721969025791105968383448704788868527147377017878373894416448150796491375901714110491315549253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ef7df25a993d322b49785537bf6a5d0e59f4557
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potresi.arso.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potresi.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seizmo.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188e2e1f37a0000040300473045022100fa7e1c796b916a816ac24c35222f83155d52392f630968417523cf376b199c9602207367ef3ab91193a3e70d63586a221b7b25e5516600a85727b904d508d4b97d93007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188e2e1f3ad0000040300473045022100ef784531f34ba3b6668f279599d5c7517abc0819820cd4a227951e3d78e9182e02204b5e0c2667ac4154549dc6cf7345a62669c044d4f159b40b0b8d0f25d9199e2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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