DV SSL/TLS Certificate for *.fizi.co.il

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the *.fizi.co.il DV SSL/TLS Certificate

This certificate with serial number 05:39:3e:8f:fc:73:22:7d:67:ed:eb:ed:c6:eb:38:6a:bc:4b for *.fizi.co.il was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.fizi.co.il provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:39:3e:8f:fc:73:22:7d:67:ed:eb:ed:c6:eb:38:6a:bc:4b
Serial Number (int): 455040684327773293821218115797859498114123
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 21:49:a0:d7:d1:38:45:1d:13:65:02:a2:d9:ef:27:df:62:eb:24:31
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 49:0f:69:ff:51:d8:67:a2:36:96:21:3d:d5:a3:d9:d6:8b:ad:82:fe
Fingerprint (SHA-256): c3:8e:5a:6e:8b:86:e2:13:4b:09:7b:47:a0:36:12:fc:7a:21:fd:54:4d:ea:14:93:6d:57:b6:ef:a6:01:c8:20

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/76.crl

Check the revocation status for certificate *.fizi.co.il
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.fizi.co.il

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.fizi.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMh+CvoaiDXz45O7vko4
UpbulWfy42RRuSkH6K16H7eutV9kblnNkk0PHe0BW37xlAydehUWTWNFBiv/Y4ir
xG98Dr0lZct07oDG/kD/dH6/PxgPWY3xHsAQfeVXv32aJKehp595ojDlcB979Vsw
vDsI7ZsU28xQx1B0Dnm2DQbtf0EQl3njAGGQv13/q6A7Ze0LmiNOte+iy4eZ+ZTH
G0trolLrq25LEY9TvxxhPFaaATDCN+pb5LLPRCYr1gwYo8lV39rkzweRQd59jFJx
4S/Jltz6c6gCMVAt37yw7Vi3WSf20xUu7ia8R06BTniVXEcBVvFfUgzFhFIlHKuK
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 455040684327773293821218115797859498114123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 15:41:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-29 15:41:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fizi.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21306901699349610427738325153944851823141507615981485707225678788192230337228483359189705575830132668414757434870946980264434064527060813975055276853421776641412508527746543961373144932800729495555076118051041093996924125347669612903775385532140075704152337835904888789763374836254736191906851462423089906561468663295555990072039377558843882342890971873666554690498959902039754707237331517689617848214346675552458496212840563651245330994371356195482643250431417405080086440678326480122166492123755000774934750330957877378243811880865531999932388972001461083092325038833760586283619246605850188205501959956086299265653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2149a0d7d138451d136502a2d9ef27df62eb2431
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fizi.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizi.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/76.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001972736e378000004030047304502205d7e61e14510efd6cc2f4343ca117f0859e3bebdcc20001d9ca6ee9cd6f56bdf0221009bf80e75643e8e0b0a5fac0395d00b107d5d6ee04ae1fb1b6eb86a23d1cebb870076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001972736e3850000040300473045022100bd301133c24fdc32198df1cfd45b8c34922446f4331f4357151557e933dc6ff9022062c18c6919abb6e24d22b09c39fda25fe0dc8e542a9e768bffd94ecbc75334c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00136975e2b835da8db5f6effb2be5d7516c54678325a7db3c6c904727eca3bfa0dff7b128e0bfd88b4e0f8aba697ce37a1c32b81717341f851947330cc9895d9c58fcbb83e87b126efe4cd25391fb1d543012a456d045861647ebffabbef97927535fcd7bf9523077fb6113ffa1742dec76280d505e3cbc4df584ab8014cacc0c845eec459c973169a3f53b0b7890ecdd0b6a54795a186ee0cf3a72e4136f8de42a1e23c11173f5fca605b5b41f99e3d0494264ebc33c4fb72a9966014360da5a10af944e0aebaa41d73c3a5b64e4f4898852798b12af8ff57aa20593f2e64c434b9905d953a28abbb3fc7627cb1e9c240b00181c0dba5b31bbd97dcd2b73f159