DV SSL/TLS Certificate for *.twister.hr

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the *.twister.hr DV SSL/TLS Certificate

This certificate with serial number 05:29:a1:18:52:21:eb:7d:03:d5:43:87:6b:d7:e7:47:a9:92 for *.twister.hr was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.twister.hr provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:29:a1:18:52:21:eb:7d:03:d5:43:87:6b:d7:e7:47:a9:92
Serial Number (int): 449727138690850683500062741822848071346578
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 29:6e:b6:86:2b:3c:06:96:54:3a:6e:7f:50:4e:0b:3a:01:8e:d2:f0
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 8e:12:28:5e:0e:49:c7:56:0d:84:34:82:02:ca:08:c0:61:5e:5a:7c
Fingerprint (SHA-256): 3a:08:9a:5d:de:67:c9:1d:11:b8:18:ac:91:33:ec:c0:5c:e2:93:3f:e2:73:6e:92:fe:0c:a7:55:cc:23:e2:c4

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/19.crl

Check the revocation status for certificate *.twister.hr
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.twister.hr

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.twister.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxwqWxULHqqYqbSJdUCO
O89Ex12CBKHTa5sa/HJtjVMTlHS7IIVEMEjLLhckxeiCLZI40GCf3vCgdeM649ls
urQjmyN0c5Z4hHudcvYFLqLi9REhbi+FJG+UyEkt3YGd74c6Zex7Z4vzy4Ttu9N2
JYjPsNigM8GF1X5SExLP6E2dRnlJ1UpE9IPWRTj6ndX0ZiQeYvCHYTpt1TNYiKEM
4OMTXNjBaf3H4uWvtzEceeA0k8M92Ac04lEgE5lEcndshzfn8ExV3e+lA/h1NWs9
oNx0PyV+oJimIq8/ROhtAyTNLGsFXyb0LJGRKEe/1krC17YUHH2ethfo4zxgu4CI
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 449727138690850683500062741822848071346578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-20 05:58:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-18 05:58:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.twister.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22105592271237879406503957839369943415268535353990887614962940997097986111152869080506633564489793220917781407564982872090745488196714952289805585517858930581413688023762456305228605082225739454539094839163959663994461974608659754101272684648318325583395529219234833831998711325539013135386999069600466745382355563069904234514048983534660040876947341150400041281404721774763962887925409776167331835824519957740051756579427202665571527525584787048273682299535036044125300691889749772504539690901637984933578064463613170539148218593041050280823020781113892868899861678642755453608716166589622540561557448387937601357939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							296eb6862b3c0696543a6e7f504e0b3a018ed2f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twister.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twister.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/19.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000196ec7b0e54000004030046304402204b24c1a4914668988b995c0792e9924309aba4a1d607dd4ab7f382d3215af6250220027df51b9b7bc84eead46b3377fb6268a60458b6100cd3612e9f3def7500ea750077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196ec7b1de700000403004830460221008b59dab542ed89e6fc43fe0ec7a9125ae3459160b661499b062aab43c116b487022100a7de5c0cbd58a1fa6f723a07bcd0de010c5badd21384ffe820b3b770bde0023e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074a78dc19990827975032ce4380b1563a23e67d2f08779b226e7ab7dedf04b31630926d7c6359c7af84c84139f199a20122eaab6006d293abbe1e7db60c4ae8ae49211e32d08e0acd5b0fe1dc74a8bf4bc654399688d8301082a965c5020781d7ea5ced2cdbdcbaf4612ed8f528e195aa982ee041424cd3635ced79c933af4094248bb4c9a25a9cd08f0a036aa093198835d87938fc72fde8b2cf78f613a56d6da50b284cec47024a327942d9de9d273f549d11bef6dae1dee149b5c99a23440ce57394941fac846e1e01342002ac9f5306cfb7fbce60ebe2d7fa9719be2d9967e4a02ea1c5353f63debaf34274ac6c252ab2b18df414af46ef35a395e28fa3f