odlicnaponuda.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:ab:83:4f:73:27:5d:a4:c9:a1:ed:34:52:d2:d4:96:ed was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=odlicnaponuda.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:ab:83:4f:73:27:5d:a4:c9:a1:ed:34:52:d2:d4:96:ed
Serial Number (int): 289808274039320101585311865149223085577965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:a0:4e:86:20:b4:87:dd:11:61:85:a7:f3:63:c1:04:5d:9f:ba:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:17:81:f9:51:8b:ab:16:74:e7:3f:76:4f:88:2e:0b:db:e7:84:fd
Fingerprint (sha256): 1e:2d:b3:a5:8f:e6:11:d4:82:3d:9c:50:33:fd:31:da:3d:67:87:bb:21:a3:de:d9:ba:e2:4e:ee:2d:81:50:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate odlicnaponuda.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for odlicnaponuda.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

odlicnaponuda.net
www.odlicnaponuda.net

Other certificates including the domain name odlicnaponuda.net

(limited to 100 certificates)
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net
odlicnaponuda.net

Certificate

The complete raw certificate details for odlicnaponuda.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289808274039320101585311865149223085577965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 23:47:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 23:47:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odlicnaponuda.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980927523035778342110338580969101344533658951175714722654901019355198201322569584072884521538854993812713924951487667949061141696719577012120595327267605640840527111783461329385315731356256080838264687914154502332490536151580773998719617476247717553696846580746712593369185044441328667095663420263084920630488220223674683416069256323632301989106057205261515807832482489842869210564172246845574843637439397569141035300802669394705524785833167108288636347744366359931953201037688768501555357099852753599776057666750915947659851521568619609865014066909678041634794903158137245180591488083213150142083790602535999983880737388364969357226966919013370279405746409834651108818236438720568532849679110559239859610388936626483941271828105219747109945760283869928561240552104076120495759976082710086696995196507242320405789975929829208529808185055269886099787043279733213926872019188973711689164386448178310160385365195683415531920068978850350958624740715665359308741286905198726606327340435229747250447221106666075387964228771280161053079962289832958271640827949087973501164043198181782587860089792116780801470236743660828844996246011673471857097790241974493812698991139875497839645833637864760605780667683389680766261075952126290552989396911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90a04e8620b487dd116185a7f363c1045d9fbaa5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odlicnaponuda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odlicnaponuda.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165d065b99d0000040300483046022100ce7e11884d6bfd4f6bfc1a38346f9f866ab7f8e265b262a7182dc81dea867795022100f92a434020f26bd95d07b2772d0261661472ee208ceac56549461418c8b0e2ab007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165d065b955000004030047304502210092e205342a9798d57ee457ff578ee01b4ad6017dd98f0925866153f75f584e2b02203d51a29cb253ede379be750cae5d617e3be8638206cc4d1f1e81146aeaef0e5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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