www.meteo.si

Issued by R3

About this certificate

This digital certificate with serial number 03:11:b1:35:85:80:fc:3e:f7:d0:9b:55:c7:b3:67:57:8c:50 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.meteo.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:b1:35:85:80:fc:3e:f7:d0:9b:55:c7:b3:67:57:8c:50
Serial Number (int): 267357209287703874707763786569354839559248
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:53:75:bd:74:14:23:6a:ca:80:5a:6e:7e:a5:c7:7f:87:61:19:97
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:7c:1f:60:89:a5:7e:8a:8a:84:20:75:62:e0:f4:83:29:7b:5a:90
Fingerprint (sha256): 4e:28:52:1e:81:96:5a:43:2a:6a:25:3a:2b:88:95:68:d7:e1:88:a9:c6:7a:0a:25:0a:16:09:03:f6:fc:4e:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.meteo.si

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meteo.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meteo.arso.gov.si
www.meteo.si

Other certificates including the domain name meteo.si

(limited to 100 certificates)
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si

Certificate

The complete raw certificate details for www.meteo.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267357209287703874707763786569354839559248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 19:38:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 19:38:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meteo.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737926194650462732405529948850059307414104023076384183032800844077597999465381818741878268990443271270649591552758704167924375304529176908260438068134177622134482367251260246383632298667632536774894780709344321652958636066342457602524818981523552443137715955381980306941221635823069610066880891693550622500633138319554329478792815731611577563584573488639482057541788137249903495237036327275689086216334885083536771287614658310607956822178044062913345025029008582729182315327967093022873871237401729463516743291326171453901748026818041810337587934964736142840336676770851262213990231789620534772136269100784954166502957380460814235893361399074946306402166562479387338898313298262365384387413083763462004283313913946088988675374317272226285217233641809972093005999541060066643535884893235765390834878299884924771143191025587570688459771174907740107294448111116677042330211249687023504905405632143544727150071067860182406301423673007887458555278685019463923166522826340649913780457424029009020471940799614702774582795098572680087429845755113486133705106807533373764006677826875329330829322422578692611806507176716910250279454334002035431673532595135680042214960505869407972703248809412166092844562150322232044344150047563007609357864483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e25375bd7414236aca805a6e7ea5c77f87611997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteo.arso.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meteo.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001877c57548a0000040300483046022100e057413bbead2f95aba80e62d1585f1f702a738edafd17ffdd5da447dd234c28022100f014cf14f07a846458a5b79f47a9af5c4b9fc10c39b7fd718f98289b42a142e1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001877c5754800000040300483046022100a9e497c5438f125beb1399e0cf992c2ac7e30c859dd57808020cb9a4947e057c022100a46313dc400959df2bf3eb9a2d0d555d1b37e5d8577cea88549caa889fc245f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f80449650058889e4bdf50bdd0a66b759493239e98728e20f5da38c9b59c880437b6471c1261a64d24523ad58e780d889f8c528ad02e69a59807aec481a05a04f2b2525cc2c9692eaf513384a445896885b040a487fd6e92c2a0d39c870f4e19e79851dee46db94bd2d0147e10c71f7d65119842bc7e2b6a83bb9422982e2abb79185c6f5c9aa64af4366e8afbd2cd922f1787ee9b62839681db242e618c3a8d263c54a7adc4e20f2bb136960cdecf8b1b90de5a5447fcfb2d354f46ac7c0550f4cfd7e07f00e31e5c464b841aeca3043fac26c4aa73bbfa85e655df37853150529d1e5cfa6bd783b2d930fc00640cdd64ae0f68851b08886efbd4d45f9c395