www.delavska-hranilnica.si

- DELAVSKA HRANILNICA d.d. LJUBLJANA -

Issued by Thawte EV RSA CA G2

About this certificate

This digital certificate with serial number 0f:64:f5:3e:1f:06:a3:47:8c:dd:01:4a:c9:64:e6:b4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DELAVSKA HRANILNICA d.d. LJUBLJANA

Company registration number: 5448557000
Organization: DELAVSKA HRANILNICA d.d. LJUBLJANA
Locality: LJUBLJANA
Country: SI

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:64:f5:3e:1f:06:a3:47:8c:dd:01:4a:c9:64:e6:b4
Serial Number (int): 20462623734728251325038145860362626740
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:f1:66:ee:76:ec:ce:ea:29:cb:62:33:62:8a:a4:a1:b7:06:5a:a3
AuthorityKeyId: 6c:2e:e4:61:b4:c3:b9:bd:f0:ca:ad:a6:c1:68:7a:b8:d4:cc:1d:a0

Fingerprint (sha1): fb:f2:18:c0:42:31:86:ec:a3:e2:43:bf:ad:a5:23:3d:6b:3a:3d:fe
Fingerprint (sha256): cd:6c:eb:a0:5e:fd:6c:65:8f:d8:f8:69:4e:fc:3b:84:2b:16:e1:b8:a0:0d:da:61:0c:67:06:9f:68:06:2b:21

Issuing Certificate URL: http://cacerts.digicert.com/ThawteEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ThawteEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/ThawteEVRSACAG2.crl

Check the revocation status for certificate www.delavska-hranilnica.si

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.delavska-hranilnica.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.delavska-hranilnica.si
delavska-hranilnica.si

Other certificates including the domain name delavska-hranilnica.si

(limited to 100 certificates)
dhpam.delavska-hranilnica.si
esign.delavska-hranilnica.si
www.delavska-hranilnica.si
lytee.delavska-hranilnica.si
lytee.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
mail.delavska-hranilnica.si
delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
webmail.delavska-hranilnica.si
dheb.delavska-hranilnica.si
vpn.delavska-hranilnica.si
dheb.delavska-hranilnica.si
box.delavska-hranilnica.si
neb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dheb.delavska-hranilnica.si
www.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
wsauth.delavska-hranilnica.si
lytee.delavska-hranilnica.si
vloge.delavska-hranilnica.si
lytee.delavska-hranilnica.si
www.delavska-hranilnica.si
esign.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
dheb.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
www.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
www.delavska-hranilnica.si
www.delavska-hranilnica.si
dheb.delavska-hranilnica.si
www.delavska-hranilnica.si
eposlovanje.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
www.delavska-hranilnica.si
neb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
www.delavska-hranilnica.si
esign.delavska-hranilnica.si
webmail.delavska-hranilnica.si
webmail.delavska-hranilnica.si
webmail.delavska-hranilnica.si
vpn.delavska-hranilnica.si
www.delavska-hranilnica.si
vpn.delavska-hranilnica.si
mail2.delavska-hranilnica.si
box.delavska-hranilnica.si
dhpam.delavska-hranilnica.si

Certificate

The complete raw certificate details for www.delavska-hranilnica.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20462623734728251325038145860362626740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5448557000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LJUBLJANA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DELAVSKA HRANILNICA d.d. LJUBLJANA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.delavska-hranilnica.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651682306615733482195322651821297955169701764270397948888333353759834422398835006512185947598564482649556634481467489567327545546863522944915318459132778865796953534042733431226032889122472048932032415604110652263839595077714100525987338586538787105839043189350284898488569381387927810329201861993455870661970043678186229700805656316059294406446878591912013154103761173420272164824043020917679830679749932115730836702886939406717105393192885724167003959368468425578126420344357934417586907763694213472260280857163889816637474837954027833802139143447631701944505464552420584507489281920875330385603966003032536018814085676662697979029676731513131701655964810738747964998287336913775876189446467335606124416931132267890816262400455773583923241247167281510606610963211839914217388108868787003387962277890622189773068998197098385363070453666397220184969709783435948389648649207865097223561853410324651915716510520663656015908189554983795043725846019042814240274817694731696381864330829976292425887396095876436564270409295503600445171496835384929276176980758766396062056201286127736523297790624147643252015176286893532537988034458759982405323393728944887337785341786927851346575543129345279268220470687945244584912570443638209225118710641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6c2ee461b4c3b9bdf0caada6c1687ab8d4cc1da0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fff166ee76ecceea29cb6233628aa4a1b7065aa3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delavska-hranilnica.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delavska-hranilnica.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ThawteEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ThawteEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/ThawteEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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