apis-g.arso.gov.si

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:60:2f:17:1c:a9:0c:36:28:38:a4:71:22:4b:63:4e:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apis-g.arso.gov.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:60:2f:17:1c:a9:0c:36:28:38:a4:71:22:4b:63:4e:22
Serial Number (int): 428543350347775355724993142412744795049506
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 15:27:48:82:ad:a2:84:4e:1c:ec:83:f4:e7:4f:e1:8b:d9:96:6e:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 76:18:fd:c4:d8:de:c9:70:b0:43:27:94:4e:b0:13:f1:d4:21:c0:8a
Fingerprint (sha256): 14:d2:12:2f:3d:dd:7e:cf:78:26:1e:89:ea:54:5e:03:a5:3d:c5:a4:ed:bb:6e:7a:58:f3:82:4e:21:5c:13:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apis-g.arso.gov.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apis-g.arso.gov.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apis-g.arso.gov.si

Other certificates including the domain name gov.si

(limited to 100 certificates)
www.arrs.gov.si
prostor.gov.si
vs-sola.gov.si
www.umar.gov.si
testas2.ujp.gov.si
ajuda.mkfull.com.br
ajuda.mkfull.com.br
*.mzz.gov.si
vpndist.gov.si
storitve.pis.gov.si
ovn.gu.gov.si
ffws-rp.arso.gov.si
podpora.ema.arr.gov.si
arsktrp-mlkp.gov.si
mksid.ursjv.gov.si
www.meteo.si
ezrlkv.gov.si
etkv.gov.si
jep-test.gov.si
vpn.ujp.gov.si
faq.able.co.jp
esp.azil-test.gov.si
isk.gov.si
efotograf.gov.si
connect.sigov-ca.gov.si
spot.gov.si
rtes.arso.gov.si
faq8now.8securities.co.jp
ure.arso.gov.si
betaujpnet.ujp.gov.si
apl.ars.gov.si
efotograf.gov.si
volitve.gov.si
www.ujp.gov.si
zgs8.zgs.gov.si
storitve-ca.gov.si
ajuda.mkfull.com.br
vprasalnik.gu.gov.si
gis.gov.si
intra.gov.si
www.gov.si
sirena.arso.gov.si
sicas.gov.si
www.svv.mzz.gov.si
storitve-mkgp.gov.si
e-uprava.gov.si
ua.gov.si
www.potresi.si
sirena.arso.gov.si
tr.mss.gov.si
evem-sola.gov.si
emddsz.gov.si
cis.uvhvvr.gov.si
krimlb.arso.gov.si
www.ess.gov.si
prostor.zgs.gov.si
nerdcp.gov.si
faq.test-able.jp
efotograf.gov.si
siut.gov.si
predlagamvladi.gov.si
epanel.gov.si
odlozisce.ujp.gov.si
ujp-eplacila.gov.si
mkgp-crc.mkgp.gov.si
apis-g.arso.gov.si
teorija-priprava.gov.si
betaujpnet.ujp.gov.si
nm.gov.si
www.stopbirokraciji.gov.si
tr.mss.gov.si
ekt2jedro.gov.si
neo-test.gov.si
vprasalnik.gu.gov.si
e-uprava.gov.si
pgc5.gov.si
csmfaq.refuel4.com
vs.gov.si
enakvis.portal.gov.si
jodp.mf.gov.si
kos.arso.gov.si
imv-mop.gov.si
ovn.gu.gov.si
e-uprava.gov.si
storitve-mkgp.gov.si
ecarina.fu.gov.si
www.arrs.gov.si
sicas.gov.si
euprava-storitve.gov.si
ua.gov.si
ecarina.carina.gov.si
cip.gov.si
ecrp.gov.si
evidim.gov.si
www.meteo.si
sipeps-pprod.gov.si
etor.mnz.gov.si
faqchloe.8securities.co.jp
e-prostor.gov.si
ema.arr.gov.si

Certificate

The complete raw certificate details for apis-g.arso.gov.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428543350347775355724993142412744795049506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 16:06:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 16:06:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apis-g.arso.gov.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843022129572536518073585651795657325683453035517285006332797506401173378572845705812781827420136984974621508661178186330810114054220268982917595388382618855554831803185440006422038890561749276047132101925945188050408516645026941755891493909172437387486811312835822521466152236075958297805924446905081173509287436825991656859992367980427846204467601846307744923855882997004543499326490028721752978272417585943641551381432020190692969590694602285468379956405991636982017102497576019138134050422247129697078420569642007208186946741500265356980031153008433407856856257688686625308766687223268022235294297639184272134787329787100646797073568667160505221059238160945819089675992576856516253308472707051490304660899830221078901994283128124878240941842783753562990136475735251670201146947721869498026893692308679582564385758830039324396530140819272522786398394478294619239276250026005300853434176685929922447138357245468291608879417184101636251281081112005203069354106428456142854796380113204513945361801254637718226735471072403247606875612468506515270205492370794679752867639262986071400819730243689533694534924050269027237927018588352079791978392512347404746131803433784014031750670056476634855024774223684454420516941058914543967133269427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15274882ada2844e1cec83f4e74fe18bd9966ec6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis-g.arso.gov.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189db434c78000004030046304402205d23025db465d74f1ec2f32868a513eff2229201453b4ba9422578ed6fc61c3c02203f0585f770378b94f20f4eb3aa4e99e128212b76a1aac40ddc41526102eb8273007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189db434c940000040300473045022100be38b41a59d9614838550ba2f3a4ff7bd845d69aa4f1f5f0276410d436ce70d902207204b698c15556881c6ce3f0ee68e0071461aa322391fcff5fc9551650ca1a8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ff011deede6b1a073b855b4cb90a2d5e89d5b2747c01ae0914bc155f63ea0375df59cd47e7c41073760b8d33098b6795fd2807634678e9b1f1004322887a8d92ab88c634e9ec44f49f27feaef1c518472bd18365e13e3d8255284db380115d424b4bdb818196c8067077c83d6fc1558328d3abecf08b95e05416ce1d676250a7fda07acda1c7061f06351b6fa1467691f2931b829ff0ea381221129bda62e4b53129739e70503c5ecf5d067baa63749e9114393fb1bbd6879964fb5ee00b5c699b1218f14e2c064bea62f2ed11078272a9e8457a6ffaadb9c6aa9418e49ca613dc0e564e6df70082341e108fcd1088d63d9a50d7dc78129a9a57b11c5800f3c