jodp.mf.gov.si

- Ministrstvo za javno upravo -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 08:53:0a:87:bf:63:79:ca:2b:19:29:f7:0d:70:17:04 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministrstvo za javno upravo

Organization: Ministrstvo za javno upravo
Locality: Ljubljana
Country: SI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:53:0a:87:bf:63:79:ca:2b:19:29:f7:0d:70:17:04
Serial Number (int): 11064998184667589286499348368751335172
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:a8:df:fc:a1:65:99:d3:61:ea:10:b1:24:01:ba:7b:3a:df:46:91
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7f:fe:64:d7:2f:6d:a8:23:74:22:82:af:28:34:ea:cc:36:26:9d:ee
Fingerprint (sha256): 17:b8:bc:af:7e:1d:41:95:35:7a:95:53:53:12:1a:81:2b:dc:18:3d:d1:cb:e9:65:ac:ce:a5:ca:eb:b2:82:a8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate jodp.mf.gov.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jodp.mf.gov.si

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jodp.mf.gov.si

Other certificates including the domain name gov.si

(limited to 100 certificates)
www.arrs.gov.si
prostor.gov.si
vs-sola.gov.si
www.umar.gov.si
testas2.ujp.gov.si
ajuda.mkfull.com.br
ajuda.mkfull.com.br
*.mzz.gov.si
vpndist.gov.si
storitve.pis.gov.si
ovn.gu.gov.si
ffws-rp.arso.gov.si
podpora.ema.arr.gov.si
arsktrp-mlkp.gov.si
mksid.ursjv.gov.si
www.meteo.si
ezrlkv.gov.si
etkv.gov.si
jep-test.gov.si
vpn.ujp.gov.si
faq.able.co.jp
esp.azil-test.gov.si
isk.gov.si
efotograf.gov.si
connect.sigov-ca.gov.si
spot.gov.si
rtes.arso.gov.si
faq8now.8securities.co.jp
ure.arso.gov.si
betaujpnet.ujp.gov.si
apl.ars.gov.si
efotograf.gov.si
volitve.gov.si
www.ujp.gov.si
zgs8.zgs.gov.si
storitve-ca.gov.si
ajuda.mkfull.com.br
vprasalnik.gu.gov.si
gis.gov.si
intra.gov.si
www.gov.si
sirena.arso.gov.si
sicas.gov.si
www.svv.mzz.gov.si
storitve-mkgp.gov.si
e-uprava.gov.si
ua.gov.si
www.potresi.si
sirena.arso.gov.si
tr.mss.gov.si
evem-sola.gov.si
emddsz.gov.si
cis.uvhvvr.gov.si
krimlb.arso.gov.si
www.ess.gov.si
prostor.zgs.gov.si
nerdcp.gov.si
faq.test-able.jp
efotograf.gov.si
siut.gov.si
predlagamvladi.gov.si
epanel.gov.si
odlozisce.ujp.gov.si
ujp-eplacila.gov.si
mkgp-crc.mkgp.gov.si
apis-g.arso.gov.si
teorija-priprava.gov.si
betaujpnet.ujp.gov.si
nm.gov.si
www.stopbirokraciji.gov.si
tr.mss.gov.si
ekt2jedro.gov.si
neo-test.gov.si
vprasalnik.gu.gov.si
e-uprava.gov.si
pgc5.gov.si
csmfaq.refuel4.com
vs.gov.si
enakvis.portal.gov.si
jodp.mf.gov.si
kos.arso.gov.si
imv-mop.gov.si
ovn.gu.gov.si
e-uprava.gov.si
storitve-mkgp.gov.si
ecarina.fu.gov.si
www.arrs.gov.si
sicas.gov.si
euprava-storitve.gov.si
ua.gov.si
ecarina.carina.gov.si
cip.gov.si
ecrp.gov.si
evidim.gov.si
www.meteo.si
sipeps-pprod.gov.si
etor.mnz.gov.si
faqchloe.8securities.co.jp
e-prostor.gov.si
ema.arr.gov.si

Certificate

The complete raw certificate details for jodp.mf.gov.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHKE3Q/ffp5mzDZCeIOE
qGRZK5/0VY/DXNtRojm9IZ5HZ3h5bN/GaJSgcGvpToYlo7MR0LHGCTp6yDqM1KPm
QuCxn0fQlBjLeYJ3aZnZlYAVD1riBJd/IfDv4MwvkwwUS7XUJ/Ow6QjvVFnujNWm
oz1uQIfgFRAZ7Tfvb5vQJsFvwP6+asagwrYnUcOJ/PsrBjW1O0FtgBw8ilbJWT/5
aIUpXSKFOLx86zVr2qWJs+Or21OZ9Zg5A/9Y3JhLa8Be3O855bp+le54yjMuj485
pbG+/VcP0prhMXZ4LxT5E0K1qmGNTdrGKt1Wiu6lnFH9LJUElTSbAZTSpC01H6Z3
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11064998184667589286499348368751335172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-21 08:35:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 08:35:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ljubljana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministrstvo za javno upravo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jodp.mf.gov.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23284319536455622663363231901178963741738465370689610352704142018288685592291695563872058941706307023594320880491183383131389407495933085152043347477894127459665371879798985386468421241688498925035835670208867177462652880319962607131160825080417075125601522205297149833827247624251960380314404464653113763414701843000230230016853424285444932280611466792116940908809770275474622653666057714872251306963217439997920821651859379643700331994328056943830949456274565021693187422756597305810664502803823595415406807468283929630600711558056740545269610602959089504620620153010593564712142176962225157635444072198913265137637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cca8dffca16599d361ea10b12401ba7b3adf4691
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodp.mf.gov.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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