slots.hr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9d:91:8c:11:1b:ff:70:87:1f:83:37:88:fc:67:40:33:1a was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=slots.hr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:91:8c:11:1b:ff:70:87:1f:83:37:88:fc:67:40:33:1a
Serial Number (int): 402066940661596511392945011253513776280346
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:aa:2e:bc:00:a9:0a:ab:85:5c:42:1c:ad:31:0a:ae:37:ae:0f:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:d1:36:cc:aa:0a:47:c4:98:c1:08:2f:25:90:d6:73:6e:d3:d4:2e
Fingerprint (sha256): 69:0d:fd:3b:32:48:30:9b:83:8c:ae:d6:48:5a:1e:a6:4a:51:1d:f9:f3:cc:54:3a:2a:be:ee:b8:8c:a7:67:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate slots.hr

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for slots.hr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aero-lu.radicalnames.com
autodiscover.conem.com
autodiscover.slots.hr
conem-com.radicalnames.com
conem.com
cpanel.conem.com
cpanel.slots.hr
mail.conem.com
mail.slots.hr
slots-hr.radicalnames.com
slots.hr
webdisk.conem.com
webdisk.slots.hr
webmail.conem.com
webmail.slots.hr
www.aero-lu.radicalnames.com
www.conem-com.radicalnames.com
www.conem.com
www.slots-hr.radicalnames.com
www.slots.hr

Other certificates including the domain name slots.hr

(limited to 100 certificates)
slots.hr
slots.hr
slots.hr
slots.hr
slots.hr
slots.hr

Certificate

The complete raw certificate details for slots.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UMja1EVHwSuT8qvFcsT
PBLQ45oIAhfrEydDSB4UbYg1AZUAGoMXWHPE8qcXOapQEKAsGsYt9vtHQ79BsP0z
VploQz14kU0KOTON7mABhXhpzfCNWnPM1yz26rJQpiX+KkgTuwgeCxuPexEjgtnU
Jck2SOYf+hQORF8oSt5dJMESnmj9gy1Hv8X0xLHhL4fVKp/0dkMSdqdU4KumvZL0
44HhCKGMTs3O61S1e1wHlT0eKslsVtCCJSRI+XYs8isBrnbrg0O/OJirKJjJUICY
ArJ0nRayR5+Lv1pVZbjPrtGh82xt4D18AZUGq12isxmNTw2EdxtxuxdU7HntmAKG
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402066940661596511392945011253513776280346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 12:31:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 12:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'slots.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28941678994626454639037640269176866247374417728169133965668754544066687695355682587621284530949688281356450373237555884280205258388753404023319124219807017644563920472107867546770335799987672081853755950181813771920861696024900084365800332407842445316247377171804276695928177220858337959850353113974324084236423407621854883536116613499720915298248765906557037299704683818981888123719102960299439459224661527694434837813242389331423907679615796407735617160090335527732026148224795364736685450234907709904968344041084108553900122020553946129956585909425536028955456491547172251383043774964476067033218633063034691683897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1aa2ebc00a90aab855c421cad310aae37ae0f0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aero-lu.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.slots.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conem-com.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.slots.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.slots.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slots-hr.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slots.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.slots.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.slots.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aero-lu.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conem-com.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slots-hr.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slots.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f32f4f1fe000004030047304502200f77380ff542cdc91182cc45425b307b284d139fd87cc17bccc81a1f3ce0ca6e0221008a332cc0902ab8bbd221851c4ec1cdae955673a7650ad4bff049a23be289864600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f32f4f22300000403004630440220309124bc748a138d70b29488d819cb523e50c174a10b67306088beb5b17069f802207d10450a4b8ed0c139d553b851e4044ee4be5f3449e5f2c456d79fcd7446f7eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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