vdvoje.si

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:10:da:1e:e3:b6:a9:46:2f:67:3e:e2:55:92:bc:e9:46:e5 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vdvoje.si

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:da:1e:e3:b6:a9:46:2f:67:3e:e2:55:92:bc:e9:46:e5
Serial Number (int): 354183593688341763128879724214506909943525
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:ca:c7:6e:e5:25:5a:84:8f:dd:fd:27:2d:04:cc:0b:b0:27:df:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:f2:66:4b:60:6e:b4:f3:d8:45:af:83:b3:91:ba:86:a3:92:dd:d7
Fingerprint (sha256): f4:83:6b:38:0f:c6:58:d9:f9:5c:36:1c:da:29:89:a3:85:9f:e7:dd:3d:e1:c4:f6:7d:c4:5f:16:02:c1:41:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vdvoje.si

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vdvoje.si

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jazinti.com
jazinti.mojzmenek.com
mail.jazinti.com
mail.mojzmenek.com
mail.mojzmenek.si
mail.vdvoje.si
mail.zmenkarije.net
mojzmenek.com
mojzmenek.mojzmenek.com
mojzmenek.si
vdvoje.si
www.jazinti.com
www.jazinti.mojzmenek.com
www.mojzmenek.com
www.mojzmenek.mojzmenek.com
www.mojzmenek.si
www.vdvoje.si
www.zmenkarije.mojzmenek.com
www.zmenkarije.net
zmenkarije.mojzmenek.com
zmenkarije.net

Other certificates including the domain name vdvoje.si

(limited to 100 certificates)

Certificate

The complete raw certificate details for vdvoje.si in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ/lWJwT3bizzOU/c9OL
yugoxgSLPJ0DyFruXk8TBrFFvjpCqevKcpbP3OiPBtHhEQmWLoErQNmZh0YOvV3m
bwdY5T/62QjjiJPu/DyBY+qwSXo3hc6bxcURM0sObBYh2KdalMalGb0s0K0On80u
hzctx0831APn0E9vsa4PaO8BpEvee1P2UUjfQOILjImThHldXm6l9NlZ6E3gqc1L
gNPMO7BUS1ljEQauAAFmeSMmzZR1SyX5JknRTvAOQNvaCCmg5v/wVaHjxxTmAGVg
h8WUIwzuZALS9p5bjfDfbJkbtTFfNyfZJDJeOFDsx96CMsg8EvYZZJ+LaekWSBVS
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354183593688341763128879724214506909943525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 10:16:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-07 10:16:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vdvoje.si'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25957700116800509111668632647919814000164537467648176539837256047466668727374814666044880799726305561816108037153455086391754319192040782865741642670179110093702211188929125909834839225157882775638677815574251521961013118058433178361086626254974147552500859650657375883740259510673718867193730542787296933648475643646397783331199812569741205553442458571847221551497091338194404011465615698929042601974900736884271428327942077112103050872641668178546781064196219773268939936804355620207601658055108266942419063177000697805774095102803434100360118327960612991043606108758766456200745356438141647567877192407948849402537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9cac76ee5255a848fddfd272d04cc0bb027df3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazinti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazinti.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jazinti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mojzmenek.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vdvoje.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zmenkarije.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojzmenek.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojzmenek.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdvoje.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jazinti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jazinti.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojzmenek.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojzmenek.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdvoje.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zmenkarije.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zmenkarije.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmenkarije.mojzmenek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmenkarije.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168c28666060000040300463044022061c8ade4e17dcdd65ecf30cf6a5c67fe64b2bbb07e43097bb039a878a778f2a1022058981fb9493e0a38c231f524e373284f7ddbd70f189555197916e23919410009007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168c28665fa0000040300473045022100c9089c4b023ad40e58b0271f106fa5235a0c6d2af51c8fb9cd63c0fbac2a03630220454f28dd215f277613e6572f06bcfd0944ff81e7b45f2ead818326d5d2872f5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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