*.idus.co.il

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:20:6c:2a:f6:72:21:dd:22:e2:10:ee:94:e3:39:01 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.idus.co.il

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:20:6c:2a:f6:72:21:dd:22:e2:10:ee:94:e3:39:01
Serial Number (int): 2826803395134256086253475014308477185
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 58:3e:26:fb:6d:7e:22:de:cd:e3:dc:ed:ef:ec:70:c3:cd:fc:c1:8f
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 1f:9c:f8:81:9f:47:29:6b:67:5d:fe:b2:42:df:03:d0:79:bb:eb:bd
Fingerprint (sha256): 46:ed:ae:44:eb:93:79:3a:85:46:01:79:ca:1f:46:1c:fa:6f:b0:02:de:1f:ae:84:31:78:2f:81:eb:6c:4b:a2

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.idus.co.il

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.idus.co.il

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.idus.co.il
idus.co.il

Other certificates including the domain name idus.co.il

(limited to 100 certificates)
gali.co.il
kiko3.m2.idus.co.il
*.idus.co.il
*.idus.co.il
*.idus.co.il
*.idus.co.il
mybaby.idus.co.il
mybaby.idus.co.il
*.idus.co.il
*.idus.co.il
*.idus.co.il
*.idus.co.il
*.idus.co.il
www.sce.2.idus.co.il
rebar.2.idus.co.il
upmc.2.idus.co.il
*.idus.co.il
mybaby.m2.idus.co.il
*.idus.co.il
rebar.2.idus.co.il
upmc.2.idus.co.il
rebar.2.idus.co.il
www.idus.co.il
*.idus.co.il
www.idus.co.il
galgalim.2.idus.co.il
vaadim.2.idus.co.il
*.idus.co.il
fritz.2.idus.co.il
rebar.2.idus.co.il
kiko3.m2.idus.co.il
mashbir.idus.co.il
*.idus.co.il
fritz.2.idus.co.il
mashbir.idus.co.il
stag.golbary.idus.co.il
*.idus.co.il
mashbir.idus.co.il
englander-il.co.il
idus.co.il

Certificate

The complete raw certificate details for *.idus.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2826803395134256086253475014308477185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.idus.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729708679049022977990368071813879897552489182406834326257224838619354446044702205711445258235846264627541497000421607343454482089046177440060653011904453058104452682190510877241627737237373377754325244402814526848722200272571224773279840146108969008726311347881454292550649008597343023605407711741910721288611470077588281993267917727302421425271891518259834025671278228106486425524778003692962254046926752205727570073430458212813605013933701766368609547334022241860841307227466256059931926594375009478183070366613580505633508215752972643272992865131961278773577063958504915797680849602217235673861432330976606076380237189245711041585277898842023703310137071291821921454679480272964749377425024350457983751238185751315026729685965437789420875363486226339541318681794193977703137050290037920153284728258673745940749843613223732108397514496467277900525529206960302931371667061182644073773930515769469407655958337966023574176870588975968991964263205627372482311471529031278296070532846713360417930954501218952169165130948663455396796112710359907078561987828195296328961233061275989041580048041909436141487387871187330469675715592679742857772965827520104422452296543282685691522094149217241012232798996069184905354556067916387980885387843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							583e26fb6d7e22decde3dcedefec70c3cdfcc18f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idus.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idus.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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