pama.co.il

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:46:90:5b:2b:b8:94:f3:4d:7e:ad:25:13:38:c4:64:4a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pama.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:46:90:5b:2b:b8:94:f3:4d:7e:ad:25:13:38:c4:64:4a
Serial Number (int): 431231554388444816566585790679010488116298
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:9e:f5:32:13:09:34:38:12:31:f5:74:d6:bb:72:a2:03:63:4c:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:cf:85:3d:b2:ac:c3:11:fa:a9:ce:2b:5f:da:6f:ef:8b:e0:85:3d
Fingerprint (sha256): 52:3f:dc:2e:e9:14:94:da:3e:d5:f7:83:66:1a:44:97:4d:c7:ba:c9:28:db:3a:b6:bf:34:76:f4:2f:e2:6b:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pama.co.il

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pama.co.il

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pama.co.il
www.pama.co.il

Other certificates including the domain name pama.co.il

(limited to 100 certificates)

Certificate

The complete raw certificate details for pama.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431231554388444816566585790679010488116298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-22 20:17:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 20:17:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pama.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781958174994087131319793363513800486772911334133695527475198068932387205041125377419031480272654726533889605200485032699970644842828027003517979135106504675845617892366817799135614948525729433908782197476124015041553196744171289474536252970799873453856495456201827059733033301441708580954634869835161927161949688977292704979727349664149595275621901014833533293449618816997422314043769827491333621214397670692130481127237913281774954944285865485576215442550910766661865330719932432761895639939916698398961460796479043804597534830758538266754288056615965800391761254383218927994446095774152493712291557628057136168717168430383435590054241587412342180099664330537334689612893004496070752847074943892683973055113516794728372580530376424149702587294373238480608102797381504947314445205698947290027072395039137030131139560445858568694770222767421808358227336964395117446971867889198348253398612808886044458624238524880832592680198984204548873665937131626655319450976723864115864930010723804014006727450545975692364571044602583110919812439567337764832869940498317091746634841716683269006405505899554610704080266438396737943128030624338593663445889470439954389573565001740396770327732062959700468799168641407095269735983954623647335318701369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a9ef532130934381231f574d6bb72a203634cbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pama.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pama.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187aad3f23a0000040300483046022100821b0a5849c32be8bbdf3f6a539e968bd8965fe469dd04b145d512dd66def19f022100d5ccb7b84039fe07c77dc8137125aa5d11e652020931b5ab736fb9b9272ec345007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187aad3f2380000040300473045022100e538d17001e613102103c2abf0172ab53448d7f61f43ab025d11a3fa744da69e022031332a21b5ba31c023c3851610ce0c32aae173086375579eb72e44fe705de81e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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