www.meteo.si

Issued by R11

About this certificate

This digital certificate with serial number 03:69:8b:90:ff:cc:32:c8:80:ab:df:ee:45:06:c8:c8:47:0c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.meteo.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:69:8b:90:ff:cc:32:c8:80:ab:df:ee:45:06:c8:c8:47:0c
Serial Number (int): 297252021892333721652412481970016524715788
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:a0:8a:45:74:8d:eb:55:d8:83:ce:87:56:33:13:f7:50:6f:42:65
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 3e:9b:e4:0a:60:a3:e9:1e:21:79:d1:b3:6c:95:29:6a:af:be:f3:85
Fingerprint (sha256): e4:49:aa:92:18:e6:c3:c9:a0:96:27:3f:4c:98:22:bd:45:e1:b6:01:4a:24:10:33:52:35:84:88:b3:1e:d6:67

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate www.meteo.si

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meteo.si

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meteo.arso.gov.si
www.meteo.si

Other certificates including the domain name meteo.si

(limited to 100 certificates)
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si
www.meteo.si

Certificate

The complete raw certificate details for www.meteo.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297252021892333721652412481970016524715788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 05:19:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 05:19:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meteo.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742121983155746992636962391628438711418779178136622760501570013828724718031272684364163843588254499049064886567286939461055587510705712079240518303102231432255550568387458577685369838461327671254621113326108362567086300114188619146834253856452579072630771826851641368522845124811507214820269282946922163837995820526091326762127934500488553422774990355635595975893441497869476266343321780410456521283276565162798085837629277955898588276243398771607518679580581753084928318758061331435756319449604475204720984633009959478015523402726105917942582094880352297077922733189673271840972929621993626079755015023841527571937094000225553675154889613393967271485190701421082617404118966970410938071332206748959090208904683794644688450153084921608446966593059599733180525499845511271100933334838962967601047818225209150738051661132661165563542860259608889055208380138225238524834409099558169167911620566351651237230904596676774624299418436352827058078191551816420969181507668974674072515534220166059423637074197954334995199817273288465878490490820068151012578909394681208865042368797757061518679581723946708750372111690018264315923969576406555059900075144017855578887221017220937889489168006432072177915924884722063270541258404775711275813667261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25a08a45748deb55d883ce87563313f7506f4265
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteo.arso.gov.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meteo.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff6803c570000040300473045022040a8832a833da779673f53cb1ce55af7b685eba78637041d3f1c4e5f6f98864c022100b325a08d9d7e5b6d19b4710fde113a3ff63748cb00c24f86cb1f024e8dace5e1007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff6803d1f000004030046304402200b176c4c6c0b6064206360ef302bafe2d2bd2147db6b355b8c427505f148fe240220656174d92e292226c5d254bcad32efc2ed7ca60aab56e419683d767379bae3f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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