digitalforms.leumi.co.il

- Bank Leumi Le-Israel B.M -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:a8:d5:60:b2:f0:87:07:64:c2:86:a0:ff:76:e1:b9 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Leumi Le-Israel B.M

Organization: Bank Leumi Le-Israel B.M
Locality: Tel Aviv-Yafo
Country: IL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a8:d5:60:b2:f0:87:07:64:c2:86:a0:ff:76:e1:b9
Serial Number (int): 11510457653041468800770132338619638201
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:4f:ca:4d:fe:23:a1:ca:a5:f7:cc:ee:9a:52:a5:15:c6:d0:b7:86
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 20:25:64:9e:1c:fe:0b:24:c3:aa:29:d6:30:e5:24:6a:34:4a:68:86
Fingerprint (sha256): 55:5c:8d:c9:d0:21:0d:15:3b:25:f7:4f:01:ed:5c:a7:55:54:b4:2b:c5:d5:4c:11:da:e6:0f:97:28:63:ea:80

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate digitalforms.leumi.co.il

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digitalforms.leumi.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitalforms.leumi.co.il

Other certificates including the domain name leumi.co.il

(limited to 100 certificates)
app.leumi.co.il
content.leumi.co.il
cert00037-azurecdn.akamaized.net
digitalforms.leumi.co.il
cash.leumi.co.il
english.leumi.co.il
english.leumi.co.il
cash.leumi.co.il
apps.leumi.co.il
biz.leumi.co.il
biz.leumi.co.il
cert00037-azurecdn.akamaized.net
www.leumi.co.il
arabic.leumi.co.il
callvu.leumi.co.il
m.leumi.co.il
now.leumi.co.il
www.leumi.co.il
cert00037-azurecdn.akamaized.net
leumi.co.il
cb.leumi.co.il
cert00037-azurecdn.akamaized.net
plus.leumi.co.il
fb.leumi.co.il
akamai-san113.exacttarget.com
biz.leumi.co.il
eservice.leumi.co.il
students.leumi.co.il
labs.leumi.co.il
cash.leumi.co.il
cash.leumi.co.il
goodys.leumi.co.il
content.leumi.co.il
manage.leumi.co.il
cert00037-azurecdn.akamaized.net
apps.leumi.co.il
biz.leumi.co.il
cert00037-azurecdn.akamaized.net
web.leumi.co.il
cert00037-azurecdn.akamaized.net
cb.leumi.co.il
labs.leumi.co.il
trustcompany.leumi.co.il
goodies.leumi.co.il
manage.leumi.co.il
labs.leumi.co.il
apps.leumi.co.il
students.leumi.co.il
eservice.leumi.co.il
english.leumi.co.il
leumi.co.il
labs.leumi.co.il
www.leumi.co.il
www.leumi.co.il
BIZ.leumi.co.il
trustcompany.leumi.co.il
labs.leumi.co.il
cert00037-azurecdn.akamaized.net
biz-ob.leumi.co.il
english.leumi.co.il
leumi.co.il
goodys.leumi.co.il
fb2.leumi.co.il
biz.leumi.co.il
callvu.leumi.co.il
app.leumi.co.il
snifd2egl.wpc.edgecastcdn.net
mortgage.leumi.co.il
biz.leumi.co.il
cert00037-azurecdn.akamaized.net
english.leumi.co.il
english.leumi.co.il
trustcompany.leumi.co.il
cb.leumi.co.il
digitalforms.leumi.co.il
fb2.leumi.co.il
now.leumi.co.il
fb2.leumi.co.il
biz.leumi.co.il
plus.leumi.co.il
cert00037-azurecdn.akamaized.net
cloud.digital.leumi.co.il
cert00037-azurecdn.akamaized.net
www.leumi.co.il
arabic.leumi.co.il
pilot.leumi.co.il
biz.leumi.co.il
rummobile.leumi.co.il
digitalforms.leumi.co.il
goodys.leumi.co.il
eservice.leumi.co.il
labs.leumi.co.il
students.leumi.co.il
www.leumi.co.il
english.leumi.co.il
labs.leumi.co.il
walkme.leumi.co.il
akamai-san113.exacttarget.com
cloud.digital.leumi.co.il
plus.leumi.co.il

Certificate

The complete raw certificate details for digitalforms.leumi.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRJAm0jKvitpfV57W6yN
NDadpaGQvl+e/NCxm/SfpMTVD9yiIk53locv45+dNxdQx+yUU46mFQWSE3aI+lPz
ZvOSydMeb7aQ2/bSe+nuAK9xrvgJ9b5ymRREDYoA3yxIedCQ4XuHKhuUx/PNzWYh
fW/AYX2hnSpudFt/GthP3fIFx1ZCiVYQZbjVMG2jT6/dRwkKdvAkCiPbVWKC8bqN
vOz7nCylvJ8gl0RL23aaf4vZ+O85dqXaMpQM88RxghD4Lffdy2PExxb2HTbtQjBg
rti7OM48sC5ZxThnzv4lPTW+RAn24xJIsWtJn/arrYnsmjCpV9EGh0k6c6xYZqHh
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11510457653041468800770132338619638201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tel Aviv-Yafo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Leumi Le-Israel B.M'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digitalforms.leumi.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17303648359182507995877747512151471555213935271308565448302139352856602029630538996297864586467961105050164203171402237181980938225554593941395868080613732200020167158010456808093358860977277282015442226236879634226314375667100350166146845905519787924856539855312392166019591922922731401033646891785901906778865505342326429110746301222148942354015646732562848028740284314414736766699527858962005131817302518310952091474187294616091556640393034371028091406244010809834680253630429596263156329567505099070529380002637418573367935682323060550930448768511196405407465768233417460719672928670168938628425914671859224404363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							934fca4dfe23a1caa5f7ccee9a52a515c6d0b786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalforms.leumi.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d0fbbf1e6fd0d15eba2eb6be7f5f6f956f8ea9cc6ff6fc6f674735123d967b1561adde62cf3ebe80a4ca82a7ee7d69b4faad6c4f002a4f5b002eea7f56157be82ac2ed9a4829709288796a241cdebdcb45fafcdf161cf8113d7a5528d92369b929748b4996e6eab3ef0daf9066d98d92eae1f71284745f3477b0b855a38531707c78875bdee852a3f93c35c254e01694d01ccec1b21b42352ad892d4ca4f156b3c621311346977e1e63b299a95825bbed0a7173d20bfb81d98d3bd24f88771caba933fa2dda4bf44c7f685793fadd2419b044df9e84e8fdd7de96017557a611385a7602bbf4aeec1225a99c79304feaa2d4171760224b0dad0fb2e45a233614