harabanit.prigan.co.il

Issued by R3

About this certificate

This digital certificate with serial number 03:48:44:1d:cd:e7:25:2c:b4:35:c8:96:65:d7:f3:eb:82:99 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=harabanit.prigan.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:44:1d:cd:e7:25:2c:b4:35:c8:96:65:d7:f3:eb:82:99
Serial Number (int): 285927730470117760377098406416174600127129
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:7b:88:06:3a:cd:c0:db:80:8e:13:67:79:02:c8:80:b8:32:ef:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:ab:69:9e:c5:bf:d4:d9:eb:62:37:1f:0f:fc:16:79:80:fd:13:13
Fingerprint (sha256): 70:1d:17:63:26:73:ca:aa:1c:83:c5:62:af:3a:71:1a:f2:0e:42:78:0a:b1:85:cd:b9:2c:bf:dd:00:54:2b:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate harabanit.prigan.co.il

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for harabanit.prigan.co.il

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

harabanit.prigan.co.il
prigan.co.il
son.prigan.co.il
travel.prigan.co.il
www.harabanit.prigan.co.il
www.prigan.co.il
www.son.prigan.co.il
www.travel.prigan.co.il

Other certificates including the domain name prigan.co.il

(limited to 100 certificates)
prigan.co.il
raziel.prigan.co.il
prigan.co.il
harabanit.prigan.co.il
sni.cloudflaressl.com
prigan.co.il
harabanit.prigan.co.il
sni.cloudflaressl.com
harabanit.prigan.co.il
harabanit.prigan.co.il
raziel.prigan.co.il
prigan.co.il
harabanit.prigan.co.il
sni.cloudflaressl.com
harabanit.prigan.co.il
food.prigan.co.il
prigan.co.il
prigan.co.il
raziel.prigan.co.il
harabanit.prigan.co.il
food.prigan.co.il
harabanit.prigan.co.il
harabanit.prigan.co.il
harabanit.prigan.co.il
raziel.prigan.co.il
sni.cloudflaressl.com
harabanit.prigan.co.il
harabanit.prigan.co.il
harabanit.prigan.co.il
prigan.mekomi.wpwithus.com
prigan.co.il

Certificate

The complete raw certificate details for harabanit.prigan.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285927730470117760377098406416174600127129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 23:11:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 23:11:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harabanit.prigan.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872351474888394540286197375363903200076470426866134991954951955000415692673219623909860778779143879155453554750790877868291142894061200599232996809144423286036550609907294007534758237645549241538991141134737606649849850567706146454959275070047986403464971963780555396112405016434374018554942393384332448595664902990619120719318411147643546920934169442544620334004439441477423061029939652731222391972630797938357448110406127292300869628799958787259228171980039784459908024014466803849956300820335024423454955885470978657406487668070837144210425826770480291644469057651267642255293814300829627116777880414263386218319457032006895028002021469626378044165751569661523263360486446398278394067466582167779020904642132141340789142076467306004046764021625722340839067357010363944086131672516466276444229372120695178227352590851625278489227118541748765708690912928455381063451904909913529414706480911555957439729013506308824833115170187461335152011465741784031921535216046010307938534930304112403099491764932844042456129945864265098469178632668838641650355346075316087385292303531139675722405755138268382469893637378014431773141069184266846445244044879557269988691924325408244035667981183692636541257004692963784852819418767073805881667820939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							367b88063acdc0db808e13677902c880b832eff8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harabanit.prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'son.prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harabanit.prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.son.prigan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.prigan.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b6952af1b0000040300473045022100e6e5bbe00f51ac5f6aaf8adf7784cc4f62c2356f9d87bc255e64d187832e018a02206a4d39b51dc25b0823789fe5dae6859466c7a1bb107b082607bc0eb28239856b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b6952af5e00000403004730450220341be787c39790a3c65f5ca3accaec86a06f5998fc25f189c5e3ad2a70c2e466022100fdc31efcc5084e92ba4f81693528048adc595f79e5034f4d089f77e094eff62b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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