kos.arso.gov.si

Issued by R3

About this certificate

This digital certificate with serial number 04:19:6a:ac:b1:14:82:78:30:6b:ba:26:45:b1:25:35:1e:57 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kos.arso.gov.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:19:6a:ac:b1:14:82:78:30:6b:ba:26:45:b1:25:35:1e:57
Serial Number (int): 357097997734288758693626760673449936756311
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 51:32:d8:c0:36:19:b1:40:a6:1f:34:4e:99:eb:4b:6b:b4:7c:46:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:db:e9:12:6b:6a:90:42:a3:d4:5d:3c:4d:40:77:82:86:8c:31:3b
Fingerprint (sha256): 18:04:36:5e:1b:bd:2e:f7:b5:2e:3b:0d:9f:85:24:2f:0b:56:cc:44:d6:61:ea:f1:a2:36:b5:90:99:bb:0a:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kos.arso.gov.si

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kos.arso.gov.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kazalci.arso.gov.si
kos.arso.gov.si

Other certificates including the domain name gov.si

(limited to 100 certificates)
www.arrs.gov.si
prostor.gov.si
vs-sola.gov.si
www.umar.gov.si
testas2.ujp.gov.si
ajuda.mkfull.com.br
ajuda.mkfull.com.br
*.mzz.gov.si
vpndist.gov.si
storitve.pis.gov.si
ovn.gu.gov.si
ffws-rp.arso.gov.si
podpora.ema.arr.gov.si
arsktrp-mlkp.gov.si
mksid.ursjv.gov.si
www.meteo.si
ezrlkv.gov.si
etkv.gov.si
jep-test.gov.si
vpn.ujp.gov.si
faq.able.co.jp
esp.azil-test.gov.si
isk.gov.si
efotograf.gov.si
connect.sigov-ca.gov.si
spot.gov.si
rtes.arso.gov.si
faq8now.8securities.co.jp
ure.arso.gov.si
betaujpnet.ujp.gov.si
apl.ars.gov.si
efotograf.gov.si
volitve.gov.si
www.ujp.gov.si
zgs8.zgs.gov.si
storitve-ca.gov.si
ajuda.mkfull.com.br
vprasalnik.gu.gov.si
gis.gov.si
intra.gov.si
www.gov.si
sirena.arso.gov.si
sicas.gov.si
www.svv.mzz.gov.si
storitve-mkgp.gov.si
e-uprava.gov.si
ua.gov.si
www.potresi.si
sirena.arso.gov.si
tr.mss.gov.si
evem-sola.gov.si
emddsz.gov.si
cis.uvhvvr.gov.si
krimlb.arso.gov.si
www.ess.gov.si
prostor.zgs.gov.si
nerdcp.gov.si
faq.test-able.jp
efotograf.gov.si
siut.gov.si
predlagamvladi.gov.si
epanel.gov.si
odlozisce.ujp.gov.si
ujp-eplacila.gov.si
mkgp-crc.mkgp.gov.si
apis-g.arso.gov.si
teorija-priprava.gov.si
betaujpnet.ujp.gov.si
nm.gov.si
www.stopbirokraciji.gov.si
tr.mss.gov.si
ekt2jedro.gov.si
neo-test.gov.si
vprasalnik.gu.gov.si
e-uprava.gov.si
pgc5.gov.si
csmfaq.refuel4.com
vs.gov.si
enakvis.portal.gov.si
jodp.mf.gov.si
kos.arso.gov.si
imv-mop.gov.si
ovn.gu.gov.si
e-uprava.gov.si
storitve-mkgp.gov.si
ecarina.fu.gov.si
www.arrs.gov.si
sicas.gov.si
euprava-storitve.gov.si
ua.gov.si
ecarina.carina.gov.si
cip.gov.si
ecrp.gov.si
evidim.gov.si
www.meteo.si
sipeps-pprod.gov.si
etor.mnz.gov.si
faqchloe.8securities.co.jp
e-prostor.gov.si
ema.arr.gov.si

Certificate

The complete raw certificate details for kos.arso.gov.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357097997734288758693626760673449936756311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 14:00:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 14:00:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kos.arso.gov.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757606531515428812327998251506316304884170152980203780476628023281843207564053346473075866060735780323884757793673938187596818954074629100798269788657481977059900973674874749262536492934570323701000134781555274274997950843435758800290225562534622645993480454403273728202842819850868542083262574445406973277688749545748072997901748750425944125213609974972513558870407445101415955200729939979254328852279231684065779422064945084827070456887446672914256165661185104054733075454517595989288947382835049963202567538842638257914075739568555231808258362584447724370381275852926985510118770469872033987749372655271274076110327318318326122017645350264803554582251232466084968868558135935846479704471089106030036727884202663678915850314103376237715973049904819020623343255738394851073813878276614692943384009158243033693778333943136798964987485704118400221797757861155034455298428601145532879935557832112416850380622064997067282630018258554082205843477004373757341594925122233987806286832610330778234212361710527693786488325866860533973965139750843470118763255162200147173101428160079468893612453888555445326634345878495044217658315641157347767040842834008892745265635385440175970608986200263380328998259976397632002487669102538659842784222233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5132d8c03619b140a61f344e99eb4b6bb47c46ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazalci.arso.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kos.arso.gov.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e74715050000040300483046022100e7b4e184b0e0bb229e100e97fe7f854eee9d32b88f39c98ef4501059f5bfc0f6022100be5a7e89bba246a5a01220babaeeaede14294f9ee011906b211981cb0b002561007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187e74714fc000004030046304402202780c2ec6a79bcc15625d2b279bda258184dd64276f3e0fb54ef32dcaa0b0dce022035edd270debcec891d194903a6ddd136ea6583166e35f03d622f163ab6b06108
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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