www.meteo.si

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:10:93:13:89:4b:fc:c1:cd:63:11:d6:cb:17:37:c0:50 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.meteo.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d1:10:93:13:89:4b:fc:c1:cd:63:11:d6:cb:17:37:c0:50
Serial Number (int): 332477903793571199751429394880786203131984
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:f0:33:7a:1b:b7:4c:02:07:56:7e:68:f4:6c:d9:a0:12:a4:fd:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:cd:ea:bc:68:8a:8e:42:2b:1c:2c:38:dd:a7:e4:96:b3:41:22:fd
Fingerprint (sha256): d0:36:30:71:40:c8:f5:98:9e:82:4d:b1:18:d4:0a:0d:01:ce:46:20:84:ee:73:fe:fa:5a:b9:20:46:d8:b5:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.meteo.si

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meteo.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meteo.arso.gov.si
www.meteo.si

Other certificates including the domain name meteo.si

(limited to 100 certificates)
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si

Certificate

The complete raw certificate details for www.meteo.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332477903793571199751429394880786203131984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 06:16:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 06:16:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meteo.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1001373052196256441148039842040737804705575276747445685463856581712919547348050581046931087019882828204741472593820429780030442689225440663202370416031614766655801538969098857697970289377649167002227791579428559521003697380814583300293073704891847083198930941944091032468395772757616041271769911218767201678563356803261251654046769824382210510952864725500211426817190508466164752346160811717222088712939130599618507767788926738635227466178611090522552048427102575094368609823270416878079449701158762978648816952058133772711890230603495541215836757088552103238761209469966601980865536477206631134289912374212733161100309353667417010560540150025076012959280775361361003371298529776579276208821762003587177488692965925630119608486518624048951366677382654706372199132454546805140742695340957087295049363078205722936436039680144336417222048097250387378533384775511974167446552842304618430934456775292521086382767475403490052415651636859002777864235213400711770005229513666220084073530062087332081454428350192050794657659421796896790932482478957919531236607844015484561971666455045837599034064040047081413517379201207602290384795631393027245434826834207889002283830621554567366777033452379919015415746460386394561467153333204677542513635151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0f0337a1bb74c0207567e68f46cd9a012a4fd06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteo.arso.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meteo.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec1b6fd990000040300473045022002e43c39da8f2c9eb075a63f189b1576de53cff0eb2f8200fa623dccbefe1bcf022100a8e96f9e3642ff3aab16d90c267869aac8cbaa9190146a64bd2066ae3692ac800076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ec1b6fe8c00000403004730450220510ea72462047bc2306a3793d161609bdf3720fa9b3e7f3e2786ad287ec943a7022100d976a93be34375b8e4b68557501b64187f75b0a84398532617e18ca38d3bcda6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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