json.ynet.co.il

- Yediot Information Technologies ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:67:f9:b7:b8:71:df:4a:c7:ae:21:34:71:db:17:11 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Yediot Information Technologies ltd

Organization: Yediot Information Technologies ltd
Locality: Rishon LeTsiyon
Country: IL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:67:f9:b7:b8:71:df:4a:c7:ae:21:34:71:db:17:11
Serial Number (int): 12502923414321284370099408644664399633
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: eb:32:d2:56:81:b2:5f:02:fc:b6:fb:2d:cb:4c:d4:09:7d:fd:dc:58
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d6:e6:17:60:41:16:11:aa:d2:a7:25:b3:e0:35:8a:29:0b:e5:c5:10
Fingerprint (sha256): 02:41:d8:72:5a:c9:98:94:1d:41:c0:38:34:d4:cb:e2:a9:ac:dc:a6:ea:b8:6b:4a:ac:5e:5a:f3:33:b9:e5:3c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate json.ynet.co.il

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for json.ynet.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

json.ynet.co.il
m.pplus.ynet.co.il
m.yedioth.ynet.co.il
mtest.pplus.ynet.co.il
qa-m.yedioth.ynet.co.il
www.yediot.co.il
ynet.co.il

Other certificates including the domain name ynet.co.il

(limited to 100 certificates)
ottertech.fr
dominos.ynet.co.il
in-option.com
incapsula.com
familytrip.ynet.co.il
stories-en.ynet.co.il
dev.dobbymail.com
anv.com.mx
ymag.ynet.co.il
monomis.com
www.diegocoy.com
runy.ynet.co.il
json.ynet.co.il
json.ynet.co.il
related.ynet.co.il
liberoantoniooropallo.com
painel.pilotar.app
www.kaizeninfracon.in
ivysivani.cz
incapsula.com
incapsula.com
p.ynet.co.il
myday.ynet.co.il
static.dpsplus.app
staging-opentable.thelevel.ai
related.ynet.co.il
www.randmised.co.uk
newart.ceropapel.mx
magazine.ynet.co.il
korona-dezinfekce.cz
myfarm.seetree.ai
www.saqf.app
qa.vesty.co.il
yq.ynet.co.il
www.aryse.com
dev.akylix.com
yq-api.ynet.co.il
incapsula.com
bdaycountdown.app
app.appfahrt.ch
bravo.ynet.co.il
pensionspenguin.com
www.rnd.cl
matkonkaitz.ynet.co.il
instituicoes.vidaconnect.com.br
incapsula.com
johannfeser.de
doctorgarcia.net
biz.ynet.co.il
randyluecke.com
json.ynet.co.il
reliablecarcares.com
dev.sobridely.com
familytrip.ynet.co.il
qa.vesty.co.il
vk-fldu-prod.armath.ai
qa.vesty.co.il
www.qengy.com
forms.ynet.co.il
app.dvinum.es
kidsattractions.ynet.co.il
car.ynet.co.il
mmrr.com.au
martinovs.com
*.ynet.co.il
b.ynet.co.il
yit.co.il
mysport.ynet.co.il
*.ynet.co.il
www.uniquestoes.com.br
rhymepage.com
www.acaml.com
incapsula.com
continental-dealer.be
forms.ynet.co.il
superbrands21.ynet.co.il
www.ketobuns.com
x.dev.birli.dev
inmeik.com
json.ynet.co.il
memorialday2022.ynet.co.il
qa.vesty.co.il
www.zrce.app
ifudis.app
getmarketingtips.io
*.ynet.co.il
forms.ynet.co.il
lf-droner.dk
qa.vesty.co.il
www.tinos.co.in
p.ynet.co.il
childrenofdos.com
www.lockn.co
smokesgnl.com
word-segmentation.online
management.casalisa.co
coffeedrivendevelopment.co.nz
qa.vesty.co.il
source-alerts.ynet.co.il
myfamilytrip.ynet.co.il

Certificate

The complete raw certificate details for json.ynet.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/TOGB7a1Mx/x9x/Jl7w
3jBYUcsOmE5ZL087QMyBTSEoQXsypEsCcdeGNKCTrc2XUh0Vbt5qO59QIqRhEYBp
n5XhVp60dv78TWecMeK7Unkd8/EpOr/KoXo/VpNJNveHwpyVSW8y3D6hEYCvOuo/
KhKAE2NsqR1X6vR6oWhKfCOJagGbpP0NzX+xugMRAmbtTJqG2Z1qBs+pyEClj77P
N4P3k282gvz547w4MBOkyWq2U6vPyKALxuD9wWnRWYJfaKX6O08k/D65PK5D95q+
rbynLsi6rHnHpvdZHR07jVRw9Juc7BBoljFNnxGUi3L6VEvYTGHmhUofj76UebPB
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12502923414321284370099408644664399633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rishon LeTsiyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yediot Information Technologies ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'json.ynet.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27261953439811030696964705458491168172632223610932663796829543204447710654043530225709946262224829143349889874357991737234657278773297841297888095647476281019397704812815328285598291525487938163432841625494654459989340317237011595861126379960985524339846727155558726280224955639413682196929137464436196629731335348430397070535570432558441708922233311923854434657759466071520287263830582616922423542212933140421606542360625992472453245640377581893206595502668029153336239388543759081904743839970188593646277171903549132320114762694340422157223051553130362415873442096826850712187152950329153672240343001086355953664389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb32d25681b25f02fcb6fb2dcb4cd4097dfddc58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'json.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.pplus.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.yedioth.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.pplus.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-m.yedioth.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yediot.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ynet.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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