esign.delavska-hranilnica.si

- DELAVSKA HRANILNICA D.D. LJUBLJANA -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 25:be:25:bb:9c:6f:36:1a:89:14:cc:40:1f:2c:d3:7f was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DELAVSKA HRANILNICA D.D. LJUBLJANA

Organization: DELAVSKA HRANILNICA D.D. LJUBLJANA
State / Province: LJUBLJANA
Locality: LJUBLJANA
Country: SI

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:be:25:bb:9c:6f:36:1a:89:14:cc:40:1f:2c:d3:7f
Serial Number (int): 50168737560399337621488691469192319871
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 7a:b7:42:78:57:af:e4:68:98:f0:32:eb:0a:2b:e5:3e:f6:7f:84:b8
Fingerprint (sha256): 81:b2:57:20:ba:47:1c:82:97:c4:90:77:cb:33:31:8b:ca:90:7c:34:ce:18:46:2e:c7:84:a6:d1:e4:53:b4:64

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate esign.delavska-hranilnica.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esign.delavska-hranilnica.si

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esign.delavska-hranilnica.si

Other certificates including the domain name delavska-hranilnica.si

(limited to 100 certificates)
dhpam.delavska-hranilnica.si
esign.delavska-hranilnica.si
www.delavska-hranilnica.si
lytee.delavska-hranilnica.si
lytee.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
mail.delavska-hranilnica.si
delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
webmail.delavska-hranilnica.si
dheb.delavska-hranilnica.si
vpn.delavska-hranilnica.si
dheb.delavska-hranilnica.si
box.delavska-hranilnica.si
neb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dheb.delavska-hranilnica.si
www.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
wsauth.delavska-hranilnica.si
lytee.delavska-hranilnica.si
vloge.delavska-hranilnica.si
lytee.delavska-hranilnica.si
www.delavska-hranilnica.si
esign.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
dheb.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
www.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
www.delavska-hranilnica.si
www.delavska-hranilnica.si
dheb.delavska-hranilnica.si
www.delavska-hranilnica.si
eposlovanje.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
www.delavska-hranilnica.si
neb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
www.delavska-hranilnica.si
esign.delavska-hranilnica.si
webmail.delavska-hranilnica.si
webmail.delavska-hranilnica.si
webmail.delavska-hranilnica.si
vpn.delavska-hranilnica.si
www.delavska-hranilnica.si
vpn.delavska-hranilnica.si
mail2.delavska-hranilnica.si
box.delavska-hranilnica.si
dhpam.delavska-hranilnica.si

Certificate

The complete raw certificate details for esign.delavska-hranilnica.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlATa206q9g2Y89Udz2DF
Sj+Ik1RRuHlfkvufEPepTimqzJWW1cDDq+xwmv4uO83OT81btK8s5qUw+36Fgd8m
PJbg69rfs/rzgLRZ0fcdVVJstpR4XUOf395R2u6EyMIXVWFRo6PPCU+mm4zaUGsA
RJ2B5xGvjZopGCoTSSpTUfjWjDMGu2+WqJ4PRpBdMkAmaurx2wnrhps8DUs+C6D0
trq/bpbVhe3qPLB5zFnqENGnBm/WUvh5InVudgZxIUaqg3rSiHYpVxHh/wv1x09M
8d0Ip9juLFZnOUWUkXH8duuTThDsr+LhWwSpVN0HszMv+WKN6ksN6zo71n4vmwpJ
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50168737560399337621488691469192319871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LJUBLJANA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LJUBLJANA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DELAVSKA HRANILNICA D.D. LJUBLJANA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'esign.delavska-hranilnica.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18685663179764673234529318791436119661732238117616769885273034721361660233261171442618540346359690686253261337205468049825500987500490009448771772157373643625096855575524901571960405978628437810456306072439150082124913678670715961901931038324866993636206751757005313879115145802062646655849736126467652057634179844343923891522096687359521011776660979359353378974654920538491961506349400002088196346094239908703296408450592822892233343139331232128768111672431909337702330476223477024722916609826873718180199557535576172124296070675779012851892481833151823533554866415980591160808752511074578360932951646771306386049423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.delavska-hranilnica.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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