vpn.delavska-hranilnica.si

- DELAVSKA HRANILNICA d.d. LJUBLJANA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:10:39:46:9d:0d:48:b4:8f:b2:f9:4b:64:c2:65:f4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DELAVSKA HRANILNICA d.d. LJUBLJANA

Organization: DELAVSKA HRANILNICA d.d. LJUBLJANA
Locality: Ljubljana
Country: SI

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:39:46:9d:0d:48:b4:8f:b2:f9:4b:64:c2:65:f4
Serial Number (int): 4071922429015294923247184110231381492
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 45:06:49:7a:65:ad:ab:af:75:8b:b4:98:54:e9:85:08:60:da:be:8e
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 87:71:34:1c:be:80:cc:ed:51:90:f9:ac:96:c7:b1:c3:34:8e:24:d2
Fingerprint (sha256): ee:40:22:91:5b:34:87:b3:19:e9:fe:69:30:e9:6f:dc:97:8f:a1:c9:bb:4b:09:bc:7e:62:03:25:9c:ed:56:4d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate vpn.delavska-hranilnica.si

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.delavska-hranilnica.si

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.delavska-hranilnica.si

Other certificates including the domain name delavska-hranilnica.si

(limited to 100 certificates)
dhpam.delavska-hranilnica.si
esign.delavska-hranilnica.si
www.delavska-hranilnica.si
lytee.delavska-hranilnica.si
lytee.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
mail.delavska-hranilnica.si
delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
webmail.delavska-hranilnica.si
dheb.delavska-hranilnica.si
vpn.delavska-hranilnica.si
dheb.delavska-hranilnica.si
box.delavska-hranilnica.si
neb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dheb.delavska-hranilnica.si
www.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
wsauth.delavska-hranilnica.si
lytee.delavska-hranilnica.si
vloge.delavska-hranilnica.si
lytee.delavska-hranilnica.si
www.delavska-hranilnica.si
esign.delavska-hranilnica.si
dheb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhpam.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
dheb.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
www.delavska-hranilnica.si
lytee.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
www.delavska-hranilnica.si
www.delavska-hranilnica.si
dheb.delavska-hranilnica.si
www.delavska-hranilnica.si
eposlovanje.delavska-hranilnica.si
hitrikrediti.delavska-hranilnica.si
dhbipswsprod.delavska-hranilnica.si
www.delavska-hranilnica.si
neb.delavska-hranilnica.si
lytee.delavska-hranilnica.si
www.delavska-hranilnica.si
esign.delavska-hranilnica.si
webmail.delavska-hranilnica.si
webmail.delavska-hranilnica.si
webmail.delavska-hranilnica.si
vpn.delavska-hranilnica.si
www.delavska-hranilnica.si
vpn.delavska-hranilnica.si
mail2.delavska-hranilnica.si
box.delavska-hranilnica.si
dhpam.delavska-hranilnica.si

Certificate

The complete raw certificate details for vpn.delavska-hranilnica.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvljHeKeJD3gYNXjuZq51
nXuCoECU+VI4yYH9baLBPR8lt56pLvJsKat9DVPzgvhyc92J2p8GtVQpLM9OWJ8T
ctU4y5/Wa3YjhwhbgqPgIeSuWFRuVRGbeZsUEB3Pv1Hj1zRxojRbJcg2T23haGnW
szDHjcXhaiR4wMysuCTxs4h/0CTTA8v11Yra8onm3wKXBn2rvrtJOFFZu9HDeOJM
ZKhsPVAioFI9zr7jgBc8CmoRBIzScVqxQ/SaPivcpCi4LgcrjTWv/6RyWGG40rQW
mzMTP5hN3UQsL5T/KQqcXzqdFBLELBLMiu60SCxaCL2tO7PMRrgCTC9ZnGK7LHss
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4071922429015294923247184110231381492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ljubljana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DELAVSKA HRANILNICA d.d. LJUBLJANA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.delavska-hranilnica.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24029056591223914347324449314749273088451163898158396734324044130795744297253187097304218856819891454823383457663601415424680222456943825561436981897554159785702963254402491141647387603742419341692818078312181876538826764578183209682819726580886147604606558331922638786564491449955533840367515548074433819281087714204249711385117398560315553102964811134781657936440468273942925516991406635581874475411404035863672877842221630172752972242136748913197121202029019227160991822858816509196788003544837871220528234423714980787621540313427176587760883619188740350904030527950422729072289361256950390525853875940105891032173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4506497a65adabaf758bb49854e9850860dabe8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.delavska-hranilnica.si'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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