galx.co.il

Issued by R3

About this certificate

This digital certificate with serial number 03:c7:d2:e2:cf:a8:c5:7a:df:4c:fb:18:e3:58:ed:c1:08:7b was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=galx.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c7:d2:e2:cf:a8:c5:7a:df:4c:fb:18:e3:58:ed:c1:08:7b
Serial Number (int): 329333364362582591722121848888450487486587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:c4:64:f7:da:29:60:37:b6:f2:24:5f:90:81:9b:4d:e9:4d:d9:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:f9:96:34:df:bc:a2:9a:87:f3:85:7e:d0:44:d8:e7:2f:e7:56:1f
Fingerprint (sha256): 62:f1:ac:39:e5:df:3b:12:fa:a1:90:f0:bc:76:8c:31:e1:0c:00:1a:f1:56:de:02:bd:83:c7:11:84:93:1f:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate galx.co.il

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for galx.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.galx.co.il
galx.co.il
www.daat.galx.co.il
www.test.galx.co.il

Other certificates including the domain name galx.co.il

(limited to 100 certificates)
mail.galx.co.il
latet-lachaim.org
latet-lachaim.org
galx.co.il
latet-lachaim.org
r-w.co.il
latet-lachaim.org
latet-lachaim.org
galx.co.il
latet-lachaim.org
latet-lachaim.org
galx.galx.tempurl.co.il
latet-lachaim.org
smarton-weight.com
latet-lachaim.org
galx.co.il
galx.galx.tempurl.co.il
r-w.co.il
kinderlach.galx.tempurl.co.il
sh-college.galx.tempurl.co.il

Certificate

The complete raw certificate details for galx.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqFRyrdGU0JNLPteLEIQ
kwztRzMjCfSYda62IYXXJKyjpA5A5Nr6U9J3cfhPc0WIlN7oywpJNr7okUYX/VHQ
9O0NFqe7NDX1yUnzlADSPeznfHwWoF4ryMH4KOCwcWAoUTl84V225M0lHZGb3yXc
Zl4aMX/vmVQd67wgS+/HeyuOHwbnApGCi/EUaJS7CW3gXiRoLlhh0mFqNwQQzX45
+533vZyzMcWrpHelwsruM8SaZEWulLxmSnSGBA31hM4p7ZBmjLdF4tR0RBt+1enQ
tnRs60Sh4OSluagFI+rh8R5KBz0g0RTa+6mcyalFW1opugWCw3LWnxQssFNgBmzk
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329333364362582591722121848888450487486587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 09:33:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 09:33:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galx.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23054921113855743909438185847388844919429798450162057432796090078561296525318912246176710090010837109015479540987602101564994027846536298368949406552908963407906604877220002155785931555862950847883113046415475435493715389325238679098158436951253995416291678524469757633404247258794028328464176627967136015173468997267317670065704100809757249436560066768935176413602866666374331930857967538150210730623135488473112355068683345167356649952683564676622241090448731703873103149361864727150875409572971341137841317158518133555373950962608121797440127512103318695366216228095642032920222620341718107629143418283451724129449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2c464f7da296037b6f2245f90819b4de94dd9ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galx.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galx.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daat.galx.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.galx.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f861d95980000040300473045022100b7102307a10a93fd0e6a6084de101bd5f13cd01918e65993b9f956d08880132d02204ed27bd22ea525350b77611e61569c36d13e588c26c8e1dc9780bf6cf4b998570076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f861d95e60000040300473045022100e52dc5f036ff379911e5e25c60314a708283f166a86987b2bd8aaa8faef42053022037b33556b19be7c0fc658c1ac4f5b820d2d99ab52b142abe54410d38628398f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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