krimlb.arso.gov.si

Issued by R3

About this certificate

This digital certificate with serial number 04:1d:30:a7:a8:e2:af:c7:27:ae:bd:76:4b:8b:0c:21:11:b7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=krimlb.arso.gov.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:30:a7:a8:e2:af:c7:27:ae:bd:76:4b:8b:0c:21:11:b7
Serial Number (int): 358382005850526032087103697658066736583095
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:99:ce:8b:bb:86:3e:18:9b:8e:db:a3:2a:2e:12:4d:ff:ec:75:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:6e:06:72:4f:d6:80:0e:48:2a:b9:48:03:5a:ce:53:31:0e:2f:70
Fingerprint (sha256): 11:b9:8f:51:80:e4:4d:8e:67:54:d5:a3:6a:e5:76:50:49:a0:bc:37:65:4b:b5:37:58:3d:2a:e2:7d:63:ac:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate krimlb.arso.gov.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for krimlb.arso.gov.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

krimlb.arso.gov.si

Other certificates including the domain name gov.si

(limited to 100 certificates)
www.arrs.gov.si
prostor.gov.si
vs-sola.gov.si
www.umar.gov.si
testas2.ujp.gov.si
ajuda.mkfull.com.br
ajuda.mkfull.com.br
*.mzz.gov.si
vpndist.gov.si
storitve.pis.gov.si
ovn.gu.gov.si
ffws-rp.arso.gov.si
podpora.ema.arr.gov.si
arsktrp-mlkp.gov.si
mksid.ursjv.gov.si
www.meteo.si
ezrlkv.gov.si
etkv.gov.si
jep-test.gov.si
vpn.ujp.gov.si
faq.able.co.jp
esp.azil-test.gov.si
isk.gov.si
efotograf.gov.si
connect.sigov-ca.gov.si
spot.gov.si
rtes.arso.gov.si
faq8now.8securities.co.jp
ure.arso.gov.si
betaujpnet.ujp.gov.si
apl.ars.gov.si
efotograf.gov.si
volitve.gov.si
www.ujp.gov.si
zgs8.zgs.gov.si
storitve-ca.gov.si
ajuda.mkfull.com.br
vprasalnik.gu.gov.si
gis.gov.si
intra.gov.si
www.gov.si
sirena.arso.gov.si
sicas.gov.si
www.svv.mzz.gov.si
storitve-mkgp.gov.si
e-uprava.gov.si
ua.gov.si
www.potresi.si
sirena.arso.gov.si
tr.mss.gov.si
evem-sola.gov.si
emddsz.gov.si
cis.uvhvvr.gov.si
krimlb.arso.gov.si
www.ess.gov.si
prostor.zgs.gov.si
nerdcp.gov.si
faq.test-able.jp
efotograf.gov.si
siut.gov.si
predlagamvladi.gov.si
epanel.gov.si
odlozisce.ujp.gov.si
ujp-eplacila.gov.si
mkgp-crc.mkgp.gov.si
apis-g.arso.gov.si
teorija-priprava.gov.si
betaujpnet.ujp.gov.si
nm.gov.si
www.stopbirokraciji.gov.si
tr.mss.gov.si
ekt2jedro.gov.si
neo-test.gov.si
vprasalnik.gu.gov.si
e-uprava.gov.si
pgc5.gov.si
csmfaq.refuel4.com
vs.gov.si
enakvis.portal.gov.si
jodp.mf.gov.si
kos.arso.gov.si
imv-mop.gov.si
ovn.gu.gov.si
e-uprava.gov.si
storitve-mkgp.gov.si
ecarina.fu.gov.si
www.arrs.gov.si
sicas.gov.si
euprava-storitve.gov.si
ua.gov.si
ecarina.carina.gov.si
cip.gov.si
ecrp.gov.si
evidim.gov.si
www.meteo.si
sipeps-pprod.gov.si
etor.mnz.gov.si
faqchloe.8securities.co.jp
e-prostor.gov.si
ema.arr.gov.si

Certificate

The complete raw certificate details for krimlb.arso.gov.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISBB0wp6jir8cnrr12S4sMIRG3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDgyMjM0MjFaFw0yMzExMDYyMjM0MjBaMB0xGzAZBgNVBAMT
EmtyaW1sYi5hcnNvLmdvdi5zaTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAOQc4Kp8XnyxO+jGrHqgmQasqaIa3O8lnu1Ir2P/6jxo7twj1Gzi633no7Mm
0TGGXB4xq0nz0YdZa1CCJKtVML+wdtZ3Fyz+anU6NsMdJ6gzvUcUAa/IN3M1GURc
3WZ5qYsj8DSA9qioS05gtUe8UiT6tIoOH/+9j0SLsSdTChYIpSkCnd+V9rFJW8Dm
tlPByuIF0Dd39pQUMKyJKm8zFPEk4/bkb1VbTJD5XdgE5r7R6xW1+1/EB6LFAvbV
Xe4klBlW+qA04fdGVNxrJvsiKeIyJMmpjeBjzqDJIsaAzFlgPhlzLsZNueEdNwTL
2WVENvn2h/AmNjO+UPZ715fQQPyXDN4gDco03qgslghhcE6BQGzOCxFnDDbCw67S
enUtt9e4tk97k4cz3Muic0XklGfuKCzQp0hc2eF6xjoNRbjtwyuEKJgttJIOTYCQ
FLaIrry6+cNt4ZMi+jiAnNEAalGdOkezHDh4uRd7Hp9dngJK7ULaKa6Eol2b3/lO
wu+vs/+GiVpIVvCLPvdotEMte9CKs8vqsc7taTz88YZzHlpEYhDD4NlBx18Aj3iZ
hYk2DcHZ4bT1Vl6AL/OW09UKlEwNr/TWzmKiKF9xt9wieeRFD0BrSiYwMhLxatVg
cklTJENBoN/MZen6sx0vu6ipXcExa8nuocRmncFD6sBIFiyzAgMBAAGjggITMIIC
DzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFL6Zzou7hj4Ym47boyouEk3/7HVbMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEmtyaW1sYi5hcnNvLmdv
di5zaTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABideAX7UAAAQD
AEYwRAIgFOToPh7L9TvBJlZ8gdzIT58Bm87Wt3mgGGmMO0h7VL0CIHpQgjiVsL1e
bGtz/wIkli7a67KF1pu35VlcAcuLqMsSAHYA6D7Q2j71BjUy51covIlryQPTy9ER
a+zraeF3fW0GvW4AAAGJ14BfwwAABAMARzBFAiBQBb7wHh1xeeeTbtuF+CY3Q3FI
1MFsTde6uj/I5kL7xQIhAP5fDZ3FcdGr1zzQqH1hiZKhq5hMNrYUrfruWWbx9Y6V
MA0GCSqGSIb3DQEBCwUAA4IBAQAufRKn/MlFE4TUt+EpLLc+2xXhwsyfDJUT1+9t
XjOe4WwcRsKba3A4fl5ijkh/WXxYfQOJelG1DFLbCps7JH6ZU48Nj7Ee9mOqPLIs
4+jVrRZ9kC6ikAR2Er/HVFILjdLA61KZotp2Q1p4gO2RUvPipRfwD/INR7GgW3Jp
ROcvevCdC2TzHBIfxFYNcpSDIs7EuoaQFjp1KujKgA/AP/AEXsUP+InvYDR7Q9x+
Qn/SR11gD2Po09eV+517DZzg1UkV/7OljjE1B/yM8vO8/kshCmP7zUfBGUXh5rKD
RgWNUhAYj4fx+GNSKZKdd6DUGdaQiyY0yzmaYj4ZmvtYVVAR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358382005850526032087103697658066736583095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 22:34:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 22:34:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krimlb.arso.gov.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930619044130773290042063909994909277654471004527546012367005738557401214811059063293674880150365326760616898367493473967592908215812146247111165779011935726913723765227837670941835927152360804774317571503747539948135636441542462138180062040476878114112238163905067707998456241536150191637851053934880124204032492825385152619220468365815518615078114581210169108857923492435488310433935673691650577196415480466769305010950739057973108183669134376494545321974753375394645425773731709786513629981139446015639169887658786558174435742879650675377529827068680224220590089901945218661723922596827376401040611493449502410065566445423045608916419041025092482285831276923549838774658437033566909321242000648018763162233264293715880629221766656879376956475345992341513536883832850282119619863384062652465516695792620701632197465728375255584772238488031886621031883397325360742979752639046755673057135928748796605061716445501725855470481838975371681515401716586930644046666136936958292016903819290287689155532073563452235659670366041742765970420433306417387442252035341804952481222074719991062506559854200341843607499514377396715219572502994002663829395332783975011726572737268556558902943370549575802984153504977096191716392636935328557778218163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be99ce8bbb863e189b8edba32a2e124dffec755b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krimlb.arso.gov.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189d7805fb50000040300463044022014e4e83e1ecbf53bc126567c81dcc84f9f019bced6b779a018698c3b487b54bd02207a50823895b0bd5e6c6b73ff0224962edaebb285d69bb7e5595c01cb8ba8cb12007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189d7805fc3000004030047304502205005bef01e1d7179e7936edb85f82637437148d4c16c4dd7baba3fc8e642fbc5022100fe5f0d9dc571d1abd73cd0a87d618992a1ab984c36b614adfaee5966f1f58e95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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