gb.leumi-card.co.il

- Leumi Card Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:94:2f:01:4b:51:1c:77:25:5a:9b:08:ba:48:65:aa was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Leumi Card Ltd

Organization: Leumi Card Ltd
Organization unit: IT
Locality: Bnei Brak
Country: IL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:94:2f:01:4b:51:1c:77:25:5a:9b:08:ba:48:65:aa
Serial Number (int): 19378605251840944004555439843110839722
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:43:f0:36:1d:16:06:90:3c:42:60:9b:f1:2f:7a:78:4c:3d:af:d9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ff:ce:24:94:a4:0f:79:34:e1:fc:d0:6f:f8:2c:49:7f:4d:67:29:2e
Fingerprint (sha256): 76:98:a9:fa:6c:ca:c7:ce:4e:2c:4c:b7:93:54:79:a7:e6:87:d1:38:f6:2a:19:2c:3a:61:23:9e:36:a7:89:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate gb.leumi-card.co.il

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gb.leumi-card.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gb.leumi-card.co.il

Other certificates including the domain name leumi-card.co.il

(limited to 100 certificates)
business.leumi-card.co.il
www.leumi-card.co.il
mx17nvdr.leumi-card.co.il
mx13nvdr.leumi-card.co.il
sapakim.leumi-card.co.il
esa.leumi-card.co.il
vi.leumi-card.co.il
media.leumi-card.co.il
media.leumi-card.co.il
chat.leumi-card.co.il
online.leumi-card.co.il
reports.leumi-card.co.il
kadams.leumi-card.co.il
survey.leumi-card.co.il
vi.leumi-card.co.il
businesslcApi.leumi-card.co.il
survey.leumi-card.co.il
kadammobile.leumi-card.co.il
sapakim.leumi-card.co.il
*.leumi-card.co.il
media.leumi-card.co.il
accessibility.leumi-card.co.il
mobile.leumi-card.co.il
survey.leumi-card.co.il
Businessinfo.leumi-card.co.il
api-test.leumi-card.co.il
mpg.leumi-card.co.il
*.leumi-card.co.il
kadam.leumi-card.co.il
www.leumi-card.co.il
ct.leumi-card.co.il
media.leumi-card.co.il
media.leumi-card.co.il
api-test.leumi-card.co.il
sapakim.leumi-card.co.il
accessibility.leumi-card.co.il
*.leumi-card.co.il
survey.leumi-card.co.il
*.leumi-card.co.il
kadam.leumi-card.co.il
gb.leumi-card.co.il
businesslc.leumi-card.co.il
media.leumi-card.co.il
gb.leumi-card.co.il
services-test.leumi-card.co.il
online.leumi-card.co.il
gb.leumi-card.co.il
ct.leumi-card.co.il
onlinelc.leumi-card.co.il
sapakim.leumi-card.co.il
ct.leumi-card.co.il
esa.leumi-card.co.il
vi.leumi-card.co.il
capp.leumi-card.co.il
onlinelcApi.leumi-card.co.il
online.leumi-card.co.il
*.leumi-card.co.il
mx13nvdr.leumi-card.co.il
sapakim.leumi-card.co.il
stt.leumi-card.co.il
online.leumi-card.co.il
esa.leumi-card.co.il
sapakim.leumi-card.co.il
businessinfo.leumi-card.co.il
businessinfo.leumi-card.co.il
vi.leumi-card.co.il
media.leumi-card.co.il
services-test.leumi-card.co.il
businessreports.leumi-card.co.il
*.leumi-card.co.il
developer.leumi-card.co.il
vi.leumi-card.co.il
onlinelc.leumi-card.co.il
gb.leumi-card.co.il
mx17nvdr.leumi-card.co.il
businessinfo.leumi-card.co.il
lcws.leumi-card.co.il
vi.leumi-card.co.il
lcfb.leumi-card.co.il
survey.leumi-card.co.il
gb.leumi-card.co.il
accessibility.leumi-card.co.il
kadammobile.leumi-card.co.il
mpg-test.leumi-card.co.il
cmpg.leumi-card.co.il
www.leumi-card.co.il
kadam.leumi-card.co.il
from.leumi-card.co.il
services-test.leumi-card.co.il
mpg.leumi-card.co.il
chat.leumi-card.co.il
services.leumi-card.co.il
prepaid.leumi-card.co.il
online.leumi-card.co.il
kadam.leumi-card.co.il
api.leumi-card.co.il
accessibility.leumi-card.co.il
mpg-test.leumi-card.co.il
mobile.leumi-card.co.il
mobile.leumi-card.co.il

Certificate

The complete raw certificate details for gb.leumi-card.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw37uc15qzrYJaDHApC7
pDjkQdKbfZDqHBdlBb6OMw3ZyMRzh7qtEUHOR7cWTtNjqvwWg0J3A81w1hXmxIDB
cxjpAIes3j4dEx5ZbnfDPaROIRY0t8AqHXTvsMn5R44vWv6dOSnyHwteOKGgIIfE
tudw5HSwj1bWTm1sBVDqvLpWCYFAzWFiDvQQ6ko61p/I7CwfaD8RoQFVY9TDdCK/
LPoTUucsG1AZYwNowniz6vy8gzfvIF9dw0hsT+6ELaqUskPVPgur5iusw1iR1kh7
qZ3T/13hGcCHNwL3xj0X5YN+fswoi68Dnwx3a7MxgpBEvZ+eGkG+hyjlv+eeFb1t
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19378605251840944004555439843110839722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bnei Brak'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leumi Card Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gb.leumi-card.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17554019814418028509516720486708078958240985472725686721336546370305080225281543020002807829121224633429265538815223337150390253694958563564061553920371852969775055234517761873516761932761985303533492271475335821793619263396223037290550484689424007098168088851529130687300119663455964275183378607072081178056557949205903385086911231060591950105197999507888376935834341717595055277867307528943821486136305400543404782237890450663794776310913540705447772243285528065505408455223950169546188326443200246188023941257168624495417464814820679632222081349308921868949353369793435764049628696474819007001947778394033686932769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5443f0361d1606903c42609bf12f7a784c3dafd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gb.leumi-card.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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