poslovniprogram.com
Issued by R3
About this certificate
This digital certificate with serial number 03:60:1a:c3:ad:62:ee:f1:be:23:52:a6:a2:c2:8c:b4:08:21 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=poslovniprogram.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:60:1a:c3:ad:62:ee:f1:be:23:52:a6:a2:c2:8c:b4:08:21Serial Number (int): 294039540962163825575936842344754740201505
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:00:f2:b4:47:7d:2f:81:be:50:67:28:bf:39:17:f2:fe:cf:6b:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d5:cc:79:0f:c4:3f:fb:31:82:b6:92:b9:d1:fc:5e:41:cc:e3:67:d0
Fingerprint (sha256): 74:f8:dc:4d:60:12:14:a3:b7:fe:cd:45:26:71:65:54:64:48:0b:36:61:88:53:4d:be:6a:c5:e8:7f:e7:0d:35
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate poslovniprogram.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for poslovniprogram.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
poslovniprogram.com
www.poslovniprogram.com
www.poslovniprogram.com
Other certificates including the domain name poslovniprogram.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for poslovniprogram.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISA2Aaw61i7vG+I1KmosKMtAghMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDQwMTU4MTVaFw0yNDAzMDMwMTU4MTRaMB4xHDAaBgNVBAMT E3Bvc2xvdm5pcHJvZ3JhbS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCwJm4T5fTcLNI8DHhWJQcxz8oIKIm3jlX901KkrbsO6QyS5fPfsxRu8nxs KszNTjWHVohKJcIIfqKhdjcGYHm15Ftr36AecRSuiBopRJhDZloRBCQAU3XUnQYP enOhoFOdYkNK9y31cL/6uRr8IJxqUQxU1ltXnTmlsr7t80zSfMOpm8ln8491i4mD 1KlLfs8TJvfglQ75W/S/rG012MLm5JKJRvqdL4y6W73Y1XporHQ4Q8N2p35puJvm j5l8ChPtOHCLr5fcj3al4MGgHX8Uq1blxLxmKJbduceMitoY7bYC2u18jkT9Wtvd yVvFAQzCCo9yNudhOvq3Du4VFW7FWtocTY56yJDLA02rEVIUKtTcSUZy1FFKHrti GWkQsEhGqx8vQPtqhVsSgYRhp1qf0UF3MBDgQR8elDc6ze1xzo0MARjKaLWHVItx appefMI1lKFjJYNJ4n5sM7rwV4cfb4+Tyuu1EkYF0oDb5ZLImh0KVgyB/b3YZUXm xpKClpm2Ld7U90T99u8tfElKwkzDsCXQ85vWDAFegwqNOWZSyhvBWz9U6bLlToiX DtYWLoqi27cJJuz/Cf/ADK03U9e1e+J1mttTMndccknovYruj9o2w2mC4I/6BXhU c1Is3CgQjM766sMw/AasFkoZWiBS0IoCbxe2XGJ0Z871oVMaawIDAQABo4IBOzCC ATcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQSAPK0R30vgb5QZyi/ORfy/s9rUTAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREEMDAughNwb3Nsb3ZuaXByb2dy YW0uY29tghd3d3cucG9zbG92bmlwcm9ncmFtLmNvbTATBgNVHSAEDDAKMAgGBmeB DAECATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPK88 FhYlOmI1dFIewSp6GeN8C+8x7ey77AK8DJBPp5bNbY6q/h8d+gp0umLxgdH4KRg1 flYfNY74EsTp/NDi7thDgBqPl3543hMO7xiUvVSAqilbGlXtL28k+Xu8XeiaZaWD AhmTbdLoF+zxXDObGEQtk83Rth9rSVTxcYpCq0KMaz3KxHgVWtsGQpt7v9+iDpyY AVIGeIyyT1nJRDKz7nbBK6KNnYQFLCCgafmIz1XXjQu1ODnJBcMGgeu+DRawHR7+ cyTGOD9FTEILpD1sory+Isy8gh5aSTdThnuG3DNzbQFJqCVCvDaKXv9UTGb1I5LU HwiamaDAOODH+SWrEQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsCZuE+X03CzSPAx4ViUH Mc/KCCiJt45V/dNSpK27DukMkuXz37MUbvJ8bCrMzU41h1aISiXCCH6ioXY3BmB5 teRba9+gHnEUrogaKUSYQ2ZaEQQkAFN11J0GD3pzoaBTnWJDSvct9XC/+rka/CCc alEMVNZbV505pbK+7fNM0nzDqZvJZ/OPdYuJg9SpS37PEyb34JUO+Vv0v6xtNdjC 5uSSiUb6nS+Mulu92NV6aKx0OEPDdqd+abib5o+ZfAoT7Thwi6+X3I92peDBoB1/ FKtW5cS8ZiiW3bnHjIraGO22AtrtfI5E/Vrb3clbxQEMwgqPcjbnYTr6tw7uFRVu xVraHE2OesiQywNNqxFSFCrU3ElGctRRSh67YhlpELBIRqsfL0D7aoVbEoGEYada n9FBdzAQ4EEfHpQ3Os3tcc6NDAEYymi1h1SLcWqaXnzCNZShYyWDSeJ+bDO68FeH H2+Pk8rrtRJGBdKA2+WSyJodClYMgf292GVF5saSgpaZti3e1PdE/fbvLXxJSsJM w7Al0POb1gwBXoMKjTlmUsobwVs/VOmy5U6Ilw7WFi6Kotu3CSbs/wn/wAytN1PX tXvidZrbUzJ3XHJJ6L2K7o/aNsNpguCP+gV4VHNSLNwoEIzO+urDMPwGrBZKGVog UtCKAm8XtlxidGfO9aFTGmsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294039540962163825575936842344754740201505 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 01:58:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 01:58:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'poslovniprogram.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718629780523577181662712685818016910413626729343501809504984230078242955078020290739490061684474679692418544942676929426185787663603665872851295676815429700550278085666300304635912422238695143773170616373931371061298105169312404272540985287784267777050926219767534993031171414471975187023570931370372655987550016467681661219825774388888956067775615286321695534404488720206127174098009037619898853594781117257444023553418355275672636466257091690365597805197606944883395661909812725189125527004871379555920397927910357069138417243153633276467985881213849174209165260274072282772175699928745538519791499674631394631585980661766292955844170256802185292131378672338550404458805411519095904635371454056273155705905193725193552982933135418765285670955820079235693081101827228281020213815779484043108156419511915543436918916730864817476743678450671803857289855966082481922971889951504104536907573361177263469475020566730030998185802467889509492470682696474412653632724959210414319538375872633524751920015027829550495427058456982231013972461839653129491510439388721286721716384113187546008144443735112898502826986186766126440269646494296967290833515003598732312008247781824814859304704186076289856448660546056311842030526282053339989700450923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1200f2b4477d2f81be506728bf3917f2fecf6b51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poslovniprogram.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poslovniprogram.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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