bb.si

Issued by R3

About this certificate

This digital certificate with serial number 03:77:4f:24:6d:b7:55:d3:d1:05:fd:31:e8:4d:36:e4:e1:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bb.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:4f:24:6d:b7:55:d3:d1:05:fd:31:e8:4d:36:e4:e1:d9
Serial Number (int): 301935657618534295534177580914182988292569
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:a8:47:ae:78:c5:ad:d4:3c:9f:d4:69:6d:87:5a:b3:46:6a:09:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:e8:5d:52:05:7f:ae:46:6e:71:ce:5b:39:aa:58:5f:73:75:85:5f
Fingerprint (sha256): 4b:f5:dc:3a:b3:f8:d3:d3:62:00:a7:4d:19:da:b5:67:c6:0d:4d:0a:bd:8e:14:a6:31:df:b0:c2:05:ad:23:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bb.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bb.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bb.si

Other certificates including the domain name bb.si

(limited to 100 certificates)
bb.si
bb.si
bb.si
www.bb.si
evidenca.bb.si
evidenca.bb.si
www.bb.si
bb.si
www.bb.si
www.bb.si
www.bb.si
bb.si
www.bb.si
www.bb.si
bb.si
bb.si
www.bb.si
nova.bb.si
dashboard.bb.si
www.bb.si
bb.si
tracking.bb.si
bb.si
www.bb.si
www.bb.si
www.bb.si
bb.si
bb.si
bb.si
bb.si
www.bb.si
bb.si
bb.si
dashboard.bb.si
www.bb.si
bb.si
bb.si
www.bb.si
e-ucilnice.bb.si
www.bb.si
bb.si
www.bb.si
bb.si
posta.bb.si
www.bb.si
e-ucilnice.bb.si
bb.si
bb.si
bb.si
bb.si
bb.si
www.bb.si
bb.si
bb.si
dashboard.bb.si
bb.si
www.bb.si
bb.si
bb.si
bb.si
dashboard.bb.si
evidenca.bb.si
bb.si
www.bb.si
bb.si
bb.si
www.bb.si
dashboard.bb.si
www.bb.si
bb.si
bb.si
bb.si
bb.si
bb.si
www.bb.si
www.bb.si
bb.si
www.bb.si
evidenca.bb.si
bb.si
dashboard.bb.si
www.bb.si
bb.si
evidenca.bb.si
bb.si
www.bb.si
dashboard.bb.si
www.bb.si
www.bb.si
evidenca.bb.si
www.bb.si

Certificate

The complete raw certificate details for bb.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISA3dPJG23VdPRBf0x6E025OHZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMTIyMDQzMDFaFw0yMzA0MTIyMDQzMDBaMBAxDjAMBgNVBAMT
BWJiLnNpMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvzrzWgaw9hga
aJwiZxiBGVfDcpIqf+EG4uM1YR+80UZZKRVS89I1Y0JgfNjRvO9ylT871x0lq5iK
WQVUT4At+vl+Q9hF2yz6xw0xjIwX6kOPPoS3xIj04bqsJNR5cSHAb/pOX6Fnl0Ik
O4wK9oFqWQC+GskJyv3cWns8yfeKPhaR3mZ4vB95IVIwRD3aNvDh7GGcQWwfjIPX
uSZUImXo9Te51Tox85Tf/YYGuG4otC8YPDyrW+pUfRazPF7xTeAoDvw+qwmoB97V
OSuqc9hHGn4yHynYjHPHgYtK2jSmkxz+A6FsGpa4L5mafMo3lM7aOPTj6c6mwoAn
JFYsDL9HRzfX5xucKm6RsA3Ol6RSYjOrhCOundQjR0rAmLKXt0Jsync1XLz+0cIb
mf0QRfg386gNOoRIFlFKfqKN0/bP7caiZ7g0idUac10pxHUN2Bh5Wo2gtbzybPB9
93dSlIhhiw8USYVRORYZo2dUrf+JxN2iObtAzg2cF3e1vDxfDTTRI0GEOWDX4WKn
op/UlmcOvI0KMR7d3AG9FQ9g0BcxjOYUyzcLnko4H3zjdBGpozTbx0tL1f5MyPxq
4c6JexGVpjUm1tfxwB9ndKoaW05UgEspJDdsp7blQKi9qn1DUVlP0jBKpV2ZqQRr
fbzGSI0I4sgmrSKfX/9UI3V30zP5/N0CAwEAAaOCAj8wggI7MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUOKhHrnjFrdQ8n9RpbYdas0ZqCSYwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wEAYDVR0RBAkwB4IFYmIuc2kwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXyOcW6
WPRsXfxCz3qfNcSeHQmBJe20mQAAAYWn77EjAAAEAwBHMEUCIQDw7xUhFYVu9Zhk
SHPh8TFCD0dGduhYr2WoMw3b5rOyxgIgYqWLkCZ+MU4IADLMDCkjQ6Wgy/p4K/S5
Wk6YIhBJj6QAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYWn
77EgAAAEAwBGMEQCIHIbeKOLL1VsoKIEwZAINFia2eRSHBD5eRi+x2FoNIyhAiBm
y9BsawvG2Ej3NN3lAzPmF8WHdmrazvVh58Z2NW3HvDANBgkqhkiG9w0BAQsFAAOC
AQEAFvyiKbTYAjM/CYf+P5n0vE2x/e6YRl4Z9E5HVp9p2cNasCvWU5uyZ7fip+yc
+sS9svo18C97F04zhB6FM1kE7MOQk9weLqdTapI1Sbupun+6XAp8uNn7EM10WoT/
JqUfuW2tOCRJnE3g024Tq7mR5qy2k10J9uFz/J6UqNZlv97D0hEZ90UZYATUCyPz
Av/7AlaMy6LThdaK1KrZaC9CbfivVdyMfTsV95BNvOZQNDo352nwJHyrDWrXC9v5
7tcQ0hz7mcDu+W0iRljgahnyUPVbqHAWuJJRltwzyi5n7eFw4luj1UM4oFWVcoQr
kNs1n3KiMownA7mZlBQXqBcr/g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301935657618534295534177580914182988292569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 20:43:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 20:43:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bb.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780151460096350065039456334833218709372862914831374672278995215887331400872641915065027569484218916200979100753282715821250062515097299087137919343028256074595848638850002745955619006437902406365849748347551507839597654509707504503902825208515488325379152084043939019933569188087298898634202147253628080583065984587747743700894642046109216929566777049644605733249041346025381341132549102528978206043235569281837449760376436780229807464046469312965188983050417285609615631045875832652398396260083783130130848724077234019224138434598235728316415257249529253324331198951387461364006743419928395352678370305743781582889360498881398084495564745912091712079910788039478714190226368917766472160860172235035855583910950354045034026062966845316811368772037131166857334244397722317809739273424161948970954976097280447080831096301220723947721989816719571944340757298509994335916303565807727032049341690807346015153901146008530961047301291858900372018934530940441852527282532364996808338400215123893954969291129971158250349068179367695021043814493904426648380367365389658678984957493069316392600768892379245210873467229532366616228601733460542155289987363515289305546239465758487467107448503413223050767765984122930536717297658106926051960159453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38a847ae78c5add43c9fd4696d875ab3466a0926
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (9 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185a7efb1230000040300473045022100f0ef152115856ef598644873e1f131420f474676e858af65a8330ddbe6b3b2c6022062a58b90267e314e080032cc0c292343a5a0cbfa782bf4b95a4e982210498fa4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185a7efb12000000403004630440220721b78a38b2f556ca0a204c1900834589ad9e4521c10f97918bec76168348ca1022066cbd06c6b0bc6d848f734dde50333e617c587766adacef561e7c676356dc7bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016fca229b4d802333f0987fe3f99f4bc4db1fdee98465e19f44e47569f69d9c35ab02bd6539bb267b7e2a7ec9cfac4bdb2fa35f02f7b174e33841e85335904ecc39093dc1e2ea7536a923549bba9ba7fba5c0a7cb8d9fb10cd745a84ff26a51fb96dad3824499c4de0d36e13abb991e6acb6935d09f6e173fc9e94a8d665bfdec3d21119f745196004d40b23f302fffb02568ccba2d385d68ad4aad9682f426df8af55dc8c7d3b15f7904dbce650343a37e769f0247cab0d6ad70bdbf9eed710d21cfb99c0eef96d224658e06a19f250f55ba87016b8925196dc33ca2e67ede170e25ba3d54338a0559572842b90db359f72a2328c2703b999941417a8172bfe