*.electra.netrise.co.il

Issued by R3

About this certificate

This digital certificate with serial number 03:12:c5:9f:46:37:54:95:bc:ad:d5:5b:a9:81:6b:a7:ad:28 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.electra.netrise.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:12:c5:9f:46:37:54:95:bc:ad:d5:5b:a9:81:6b:a7:ad:28
Serial Number (int): 267724625314380166702452571163005142150440
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:a9:93:e1:78:e1:74:de:80:86:82:07:12:e7:3c:41:b0:c7:db:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:f6:e2:4f:94:d2:fd:8b:02:71:82:87:f8:fa:cc:3d:af:5a:51:28
Fingerprint (sha256): 38:89:ee:65:fe:c9:c4:28:ba:2a:f7:97:e3:ba:f5:a1:ea:36:6b:5a:3c:06:d7:93:d4:54:b9:86:f4:0f:09:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.electra.netrise.co.il

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.electra.netrise.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.electra.netrise.co.il
electra.netrise.co.il

Other certificates including the domain name netrise.co.il

(limited to 100 certificates)
noamsleep.netrise.co.il
gobananaz.netrise.co.il
somet-integration.netrise.co.il
*.stage-minustress.netrise.co.il
yt-systems.netrise.co.il
lachovitz.netrise.co.il
qaonline.netrise.co.il
netrise.co.il
rdt.netrise.co.il
autoglass.netrise.co.il
landing.netrise.co.il
landing.netrise.co.il
yt-systems.netrise.co.il
diana.netrise.co.il
*.eytans.netrise.co.il
newsletters.netrise.co.il
lachovitz.netrise.co.il
weconnect.netrise.co.il
m-hatsafon.netrise.co.il
landing.netrise.co.il
renovation.netrise.co.il
brain.netrise.co.il
somet-integration.netrise.co.il
startpc2.netrise.co.il
test-gilan.netrise.co.il
annual2019.netrise.co.il
test-gilan.netrise.co.il
coffeedrivendevelopment.co.nz
chromagen.netrise.netrise.co.il
minustress.netrise.co.il
tit-test.netrise.co.il
netrise.co.il
so-arch.netrise.co.il
gobananaz.netrise.co.il
web-biton.netrise.co.il
mozello.netrise.co.il
bf-outlet.netrise.co.il
reading-easy.it
landing.netrise.co.il
chemo-aharon.netrise.co.il
landing.netrise.co.il
voltas.netrise.co.il
efrata2018.netrise.co.il
tit-express.netrise.co.il
diana.netrise.co.il
brain.netrise.co.il
diana.netrise.co.il
fun.netrise.co.il
yofi.netrise.co.il
amardev.netrise.co.il
yt-systems.netrise.co.il
qaonline-development.netrise.co.il
renovation.netrise.co.il
sometltd.netrise.co.il
bf-outlet.netrise.co.il
*.huji.netrise.co.il
*.seo-alain-test.netrise.co.il
qaonlinetest.netrise.co.il
advancedlipids.netrise.co.il
tit-test.netrise.co.il
gobananaz.netrise.co.il
fun.netrise.co.il
metomotion.netrise.co.il
brain.netrise.co.il
sometltd.netrise.co.il
m-hatsafon.netrise.co.il
antifire.netrise.co.il
shop.netrise.co.il
netrise.co.il
rdt.netrise.co.il
*.electra.netrise.co.il
uriella.netrise.co.il
ab-fortis.netrise.co.il
sometltd.netrise.co.il
ab-fortis.netrise.co.il
brain.netrise.co.il
ylm.netrise.co.il
www.asantk.com
nimrod.netrise.co.il
shaham.netrise.co.il
qaonline-development.netrise.co.il
dushi.netrise.co.il
somet-integration.netrise.co.il
qaonline-development.netrise.co.il
amram.netrise.co.il
fun.netrise.co.il
autoglass.netrise.co.il
gilantest.netrise.co.il
startpc.netrise.co.il
etrogbutik.netrise.co.il
dushi.netrise.co.il
pais.netrise.co.il
efla.netrise.co.il
timor.netrise.co.il
chromagen.netrise.netrise.co.il
gilantest.netrise.co.il
mateen.netrise.co.il
newsletters.netrise.co.il
peax.netrise.co.il
peax.netrise.co.il

Certificate

The complete raw certificate details for *.electra.netrise.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys1Kq2bidC3Bgayh5LOW
bVjZCI+kEIQuJCogQMqoAEr4w+okiV7y5DwyoX2Ltw9pvaBYvmgmxI/+G6Q/OxVM
bQZUEPfRmdXfUagFl3hIsZmT7a6nO07MPipFXgVGKVaMA9ivAI9WIJzSp7EJbNj0
a8DZA4wPr29Bq3+iHFTHqPKHy/lTJ0YCteucNoZIBX0z/PAZvs9InmppQZOnPUwb
9m6+ptLRPfTDtg1P/EJOkNcNxaM/Ny6jNugE3HmiS7jAf3VelZRtwbzUu8U/tPHT
3upzbp8613r+lh2VTqNpMd6XXi52h0txT7h1ztJLbhj9NK/wEx9S7mIZKlc/U0Ui
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267724625314380166702452571163005142150440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 13:07:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 13:07:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.electra.netrise.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25601370702518380820289606326842582970248419389282425773954211870732443135336025972185941510138781653764139523009001857856714059987177147645033807167141178111406771309532084338278736075073559826681480703952066430260595363722905861611523273051193856828676708978110699574099369856073221616056365977888053096187509583965058943810125767222523354954327428454028573163486646934848264242303527707242702548672998132882693229155317681790737188938944703898961341513360642340325109221133111051924628802496412097625856178078840109372591589933399236655790025682799462776421439743755647304746163105877510084347761878234808333968051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bba993e178e174de8086820712e73c41b0c7db70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electra.netrise.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electra.netrise.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eae95e30700000403004630440220311f29aef5604b304c18876052ee8a5342f8a8054d2f8391b6a72a9b25d00d2b02200931b97fe25fa6ef46f6b56cf18e52b8f6e4511c5ec9572304191d0efcb6b52000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eae95e2f50000040300473045022100d4dced588ad5097d0c979e0395ed601ad0959518a77ce895bf57fae2fa12ce1a02206d1660904e91003d23eccdb6236d6a254fa271b9f6308412140517a926204a6a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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