pilot.leumi.co.il

- Bank Leumi le-Israel Ltd. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:80:95:21:41:82:7f:4b:92:6b:57:82:05:23:a7:3b was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Leumi le-Israel Ltd.

Organization: Bank Leumi le-Israel Ltd.
Locality: Tel Aviv-Yafo
Country: IL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:80:95:21:41:82:7f:4b:92:6b:57:82:05:23:a7:3b
Serial Number (int): 7313778690651631500124331559904061243
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:3d:f9:50:e5:cf:61:5d:82:11:e5:60:da:58:50:43:1a:8d:6b:18
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 78:c8:9d:2c:df:26:f1:74:0b:6e:42:aa:54:24:89:db:80:2d:da:62
Fingerprint (sha256): 63:14:9e:da:35:08:ea:c3:60:65:87:2b:3b:60:f8:2e:c5:17:24:e7:30:a3:3f:7d:15:e4:90:71:71:ad:80:c0

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate pilot.leumi.co.il

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pilot.leumi.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pilot.leumi.co.il
leumi.co.il
www.leumi.co.il

Other certificates including the domain name leumi.co.il

(limited to 100 certificates)
app.leumi.co.il
content.leumi.co.il
cert00037-azurecdn.akamaized.net
digitalforms.leumi.co.il
cash.leumi.co.il
english.leumi.co.il
english.leumi.co.il
cash.leumi.co.il
apps.leumi.co.il
biz.leumi.co.il
biz.leumi.co.il
cert00037-azurecdn.akamaized.net
www.leumi.co.il
arabic.leumi.co.il
callvu.leumi.co.il
m.leumi.co.il
now.leumi.co.il
www.leumi.co.il
cert00037-azurecdn.akamaized.net
leumi.co.il
cb.leumi.co.il
cert00037-azurecdn.akamaized.net
plus.leumi.co.il
fb.leumi.co.il
akamai-san113.exacttarget.com
biz.leumi.co.il
eservice.leumi.co.il
students.leumi.co.il
labs.leumi.co.il
cash.leumi.co.il
cash.leumi.co.il
goodys.leumi.co.il
content.leumi.co.il
manage.leumi.co.il
cert00037-azurecdn.akamaized.net
apps.leumi.co.il
biz.leumi.co.il
cert00037-azurecdn.akamaized.net
web.leumi.co.il
cert00037-azurecdn.akamaized.net
cb.leumi.co.il
labs.leumi.co.il
trustcompany.leumi.co.il
goodies.leumi.co.il
manage.leumi.co.il
labs.leumi.co.il
apps.leumi.co.il
students.leumi.co.il
eservice.leumi.co.il
english.leumi.co.il
leumi.co.il
labs.leumi.co.il
www.leumi.co.il
www.leumi.co.il
BIZ.leumi.co.il
trustcompany.leumi.co.il
labs.leumi.co.il
cert00037-azurecdn.akamaized.net
biz-ob.leumi.co.il
english.leumi.co.il
leumi.co.il
goodys.leumi.co.il
fb2.leumi.co.il
biz.leumi.co.il
callvu.leumi.co.il
app.leumi.co.il
snifd2egl.wpc.edgecastcdn.net
mortgage.leumi.co.il
biz.leumi.co.il
cert00037-azurecdn.akamaized.net
english.leumi.co.il
english.leumi.co.il
trustcompany.leumi.co.il
cb.leumi.co.il
digitalforms.leumi.co.il
fb2.leumi.co.il
now.leumi.co.il
fb2.leumi.co.il
biz.leumi.co.il
plus.leumi.co.il
cert00037-azurecdn.akamaized.net
cloud.digital.leumi.co.il
cert00037-azurecdn.akamaized.net
www.leumi.co.il
arabic.leumi.co.il
pilot.leumi.co.il
biz.leumi.co.il
rummobile.leumi.co.il
digitalforms.leumi.co.il
goodys.leumi.co.il
eservice.leumi.co.il
labs.leumi.co.il
students.leumi.co.il
www.leumi.co.il
english.leumi.co.il
labs.leumi.co.il
walkme.leumi.co.il
akamai-san113.exacttarget.com
cloud.digital.leumi.co.il
plus.leumi.co.il

Certificate

The complete raw certificate details for pilot.leumi.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvk8PM3ZGJsI+ChWOAi5
Z7JFkLZf+yxPtdgxobaMa/X8Wm2HHSDskHDF6wAqj8eIqbefkoeA3WjrNGyFrQqQ
l0aCl0fPyRuLBvS2+FiATzFReUJh9XaQwTErF36GsL+4BGvOz4lTkxz2K8WErIIB
mpoCo1Ru71PTl8KCVQT09ywO0NXcC+s3r9Wbmy9zWRrhU4f2FGpcj/7qHJeCJCq5
NaGlKIvpBJXbOXkiwgtHAGXGr6vjSCmPhz0HS2fZFZRi3UUzU9YQ4zri/B561+a4
iFztwmO7G5jbjslWdYRIvrgWwOJkgxtvFfu7wUD3CXf0oBJaj7/GFhMc1ALU4hay
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7313778690651631500124331559904061243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tel Aviv-Yafo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Leumi le-Israel Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pilot.leumi.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19058648253357136208343199322570643215102250007838363699082222093738497814028785210704506400827156296332486691798008099679360261077419117444394397354908304650897533090206942679191196724174361344418199768556348392362702439639535985080339023861406176190228119971960138959896958552386617687288837564526878466035789664100847009386021798649093436465745078844537816401032600954572041404187912681536276575481239930783870486621215360190921851415005298260508316978299968355410379884235965404125756531402139565359411331376046247089224518397780622783516548846116522664441998581596003719186838877044403462701735473547107783586331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							723df950e5cf615d8211e560da5850431a8d6b18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.leumi.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leumi.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leumi.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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