sicas.gov.si

- Ministrstvo za javno upravo -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 73:0d:fb:ab:f9:cd:6e:d5:00:00:00:00:50:eb:e0:19 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministrstvo za javno upravo

Organization: Ministrstvo za javno upravo
Locality: Ljubljana
Country: SI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:0d:fb:ab:f9:cd:6e:d5:00:00:00:00:50:eb:e0:19
Serial Number (int): 152933823884562705279592372096358670361
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 64:7d:b2:04:4f:75:ef:eb:b6:1b:ba:95:35:f0:d6:08:38:38:70:4c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3a:ea:e4:7a:bc:f2:6a:a9:f4:19:65:6f:7d:87:80:8c:6f:e2:51:34
Fingerprint (sha256): 1a:68:40:36:a9:3a:f8:c3:aa:a4:01:c0:8c:66:80:0c:f3:1a:29:68:e7:b1:9d:9f:bd:47:be:e0:93:84:3c:22

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sicas.gov.si

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sicas.gov.si

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sicas.gov.si
sicas-x509.gov.si
sicas-x509si.gov.si
sipeps.gov.si
sipass.gov.si

Other certificates including the domain name gov.si

(limited to 100 certificates)
www.arrs.gov.si
prostor.gov.si
vs-sola.gov.si
www.umar.gov.si
testas2.ujp.gov.si
ajuda.mkfull.com.br
ajuda.mkfull.com.br
*.mzz.gov.si
vpndist.gov.si
storitve.pis.gov.si
ovn.gu.gov.si
ffws-rp.arso.gov.si
podpora.ema.arr.gov.si
arsktrp-mlkp.gov.si
mksid.ursjv.gov.si
www.meteo.si
ezrlkv.gov.si
etkv.gov.si
jep-test.gov.si
vpn.ujp.gov.si
faq.able.co.jp
esp.azil-test.gov.si
isk.gov.si
efotograf.gov.si
connect.sigov-ca.gov.si
spot.gov.si
rtes.arso.gov.si
faq8now.8securities.co.jp
ure.arso.gov.si
betaujpnet.ujp.gov.si
apl.ars.gov.si
efotograf.gov.si
volitve.gov.si
www.ujp.gov.si
zgs8.zgs.gov.si
storitve-ca.gov.si
ajuda.mkfull.com.br
vprasalnik.gu.gov.si
gis.gov.si
intra.gov.si
www.gov.si
sirena.arso.gov.si
sicas.gov.si
www.svv.mzz.gov.si
storitve-mkgp.gov.si
e-uprava.gov.si
ua.gov.si
www.potresi.si
sirena.arso.gov.si
tr.mss.gov.si
evem-sola.gov.si
emddsz.gov.si
cis.uvhvvr.gov.si
krimlb.arso.gov.si
www.ess.gov.si
prostor.zgs.gov.si
nerdcp.gov.si
faq.test-able.jp
efotograf.gov.si
siut.gov.si
predlagamvladi.gov.si
epanel.gov.si
odlozisce.ujp.gov.si
ujp-eplacila.gov.si
mkgp-crc.mkgp.gov.si
apis-g.arso.gov.si
teorija-priprava.gov.si
betaujpnet.ujp.gov.si
nm.gov.si
www.stopbirokraciji.gov.si
tr.mss.gov.si
ekt2jedro.gov.si
neo-test.gov.si
vprasalnik.gu.gov.si
e-uprava.gov.si
pgc5.gov.si
csmfaq.refuel4.com
vs.gov.si
enakvis.portal.gov.si
jodp.mf.gov.si
kos.arso.gov.si
imv-mop.gov.si
ovn.gu.gov.si
e-uprava.gov.si
storitve-mkgp.gov.si
ecarina.fu.gov.si
www.arrs.gov.si
sicas.gov.si
euprava-storitve.gov.si
ua.gov.si
ecarina.carina.gov.si
cip.gov.si
ecrp.gov.si
evidim.gov.si
www.meteo.si
sipeps-pprod.gov.si
etor.mnz.gov.si
faqchloe.8securities.co.jp
e-prostor.gov.si
ema.arr.gov.si

Certificate

The complete raw certificate details for sicas.gov.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L9v8kuZixMgO2hNmZTr
7hJP48bv+7t3q5qxawyZXGBBCMK5vWturhwG6mmq2tC7tjN3iixbWMxo+ssX5iKo
/GFY3bEH9V+yNzFQZWDrhgSfg/ku13aoWaeFy19LA30Z1DeVsPGcHuIhgm6GsVpl
b4t/2A6YXu07hugcUBu5NpcFOs/ZB6WVAHQAIN5QZoQQJgbbSMmlgjur5hbp2DC6
QZVeJzMq6YhA10EnK4IovtZOI7pDSH54NMJKEDKNeYllXJ13037yqc2BQZuaby/Y
NJgtx2FHGmViLqV08/AMPFJxwctsS9Wuk9iDl1BmLrqEwDJW0oa9DekuQRhwzXzq
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152933823884562705279592372096358670361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 07:08:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-08 07:38:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ljubljana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministrstvo za javno upravo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sicas.gov.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30896547658235376777081718567761840821973565961235846197601145222536900742101126106504712242780985332426105124095449184085593014703801083244548411754160391573932691894500875084788453294146759835988211475836626403453888991358976457855556250391851377914202712403093889012476503020536804007605532908787584546352616734468575808453579242566462455320041131533979525621349554068707786510038862106875403275192974472767984714926207194241422389677697484143917365973611070458528419227996391883718543458429026024412671384395031429292767881250535404802111870901730247915138736733262420127821470233716833437638244464001726755433187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicas.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicas-x509.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicas-x509si.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipeps.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipass.gov.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							647db2044f75efebb61bba9535f0d6083838704c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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