pama.co.il
Issued by R3
About this certificate
This digital certificate with serial number 04:68:95:a4:22:d0:75:35:9d:4e:29:0c:8c:ec:b8:5e:07:45 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pama.co.il
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:68:95:a4:22:d0:75:35:9d:4e:29:0c:8c:ec:b8:5e:07:45Serial Number (int): 384037417100992997852674958760752302655301
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 46:66:9c:11:f2:3c:f8:65:67:a1:ec:25:a3:95:9e:cc:3c:ba:23:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:15:7e:a2:03:aa:38:ab:64:51:da:9d:fd:9f:74:c3:09:67:68:3c
Fingerprint (sha256): 8c:34:c0:dc:6f:a4:03:8e:41:74:1b:6c:a7:4c:6d:4e:fd:43:c1:b9:d0:17:1a:77:a9:60:b9:6b:d0:8f:fc:5c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate pama.co.il
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pama.co.il
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pama.co.il
www.pama.co.il
www.pama.co.il
Other certificates including the domain name pama.co.il
(limited to 100 certificates)
app.pama.co.il
pama.co.il
pama.co.il
app.pama.co.il
pama.co.il
pama.co.il
style.pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
style.pama.co.il
app.pama.co.il
pama.co.il
mail2.pama.co.il
calc.pama.co.il
pama.co.il
pama.co.il
app.pama.co.il
thequestgame-orders.co.il
pama.co.il
pama.co.il
pama.co.il
app.pama.co.il
pama.co.il
pama.co.il
style.pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
pama.co.il
style.pama.co.il
app.pama.co.il
pama.co.il
mail2.pama.co.il
calc.pama.co.il
pama.co.il
pama.co.il
app.pama.co.il
thequestgame-orders.co.il
pama.co.il
Certificate
The complete raw certificate details for pama.co.il in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgISBGiVpCLQdTWdTikMjOy4XgdFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAyMjAyMTE1NDZaFw0yMzA1MjEyMTE1NDVaMBUxEzARBgNVBAMT CnBhbWEuY28uaWwwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAJGar 0tuYbaYnRUKlV8DC0ohO4ASt5rvFqnuKmuzic//ZPo6L4oF3L4yyTx3gJRlf606T sjnTLUGa2WXaOWQk8BsHlnpdRElfumYvPbteWgA7gBoXa/6f7dCZsEHgzdEGRnw4 dAZNmGNZ3TtHZKNleyLWB0d1y4VCrkQYfEb2dKJoWAMGG32BeM9bBEVd96F4cGcD wzaMxKMK4neWCKUpfMj/nE4onkLRQzxjmGXrPBivdWV4CiMkk6R/9y365rGOZrJ+ 49UG7cLSwI0UodKC9Dw7CSR0n+jzZ36UfDKT6qwNJsu8vVGZtHpEUIQ4UTbhy1tL 5d+FBnRei50RKVqWfeeE2NfWFoiFvk6tz/a8OamML8ivpcZzk6Ji/s/Zm6L7Ylgr ATgZIjjvBMa3BLxoKIpnl75RfNBbqmHq4Nr3yJ02Mp3eHU7gjYPyQevUUof/2aRA T6msOT0zQIl3I31eE5XL1w5MPMSp4dqpPErq6jZXFlgEKquEglnlGfs3sJSKIrwp QMUM1QtgTOGb2TYeGLZlVeq+Az13cOtyXKr0vB5AcfxbokHeKdMqSrAGGcVdKebO jufi9lhVoU4ax+2B+NP9sSH3neU/Or+3E42L8a+FvLU151O7d7y2MGcjmnfQeHs9 qPHdWcWZ942TjuNruv3M1bkVSSMgGcvFd4kfrwIDAQABo4ICVTCCAlEwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBRGZpwR8jz4ZWeh7CWjlZ7MPLojUzAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcggpwYW1hLmNvLmlsgg53d3cucGFtYS5j by5pbDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB hnDlrzIAAAQDAEYwRAIgdZPBW/QDdFYuQ75JmQ22HxIzrZ392bm26V8F1KdAOagC IAyMT8qGkrGyBNe+FAOcRVPxFOsYP5FVgNl1++AiRvw6AHcArfe++nz/EMiLnT2c Hj4YarRnKV3PsQwkyoWGNOvcgooAAAGGcOWvPwAABAMASDBGAiEAtElaGOisFfGq 1CJKLtVtmWOw+4Dge9fyJmudrDza3fsCIQCAOur1PAhSxyM/1Yu7E32JE9y0Gki5 Ws9NnxbVx1mGoDANBgkqhkiG9w0BAQsFAAOCAQEAS/HIleHEzADJCcNcbhepbD8j /f8jLxM1OEr1bIFEJWkeD6OtoYRVZeTL4ojU8biU31QS5CWdBdZdvQ4+64xKN12+ Aa4blqm+FLuHP0NhAp0Bwoh7mwDdLvbDOcfuVELJv0CvtkA+wEHS24dEq3Xe6tcX uyTNqEk1+CVuXtTEolkSBDbbbCvy/GsrI90685hZG54vRH5RD94eCVCtSZo/EyGl WKytE200+vVcWJA04pjVzUEYgsogUUb+u8/IuabsLWsKahapNSt8gTI3lss8AMP9 LvNTjwNLFM0S6ZLrlmMqvN1FLnwvP2AuUOmIwwIIXIp9i4vdfv7cyJ/vSXBirw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwCRmq9LbmG2mJ0VCpVfA wtKITuAErea7xap7iprs4nP/2T6Oi+KBdy+Msk8d4CUZX+tOk7I50y1Bmtll2jlk JPAbB5Z6XURJX7pmLz27XloAO4AaF2v+n+3QmbBB4M3RBkZ8OHQGTZhjWd07R2Sj ZXsi1gdHdcuFQq5EGHxG9nSiaFgDBht9gXjPWwRFXfeheHBnA8M2jMSjCuJ3lgil KXzI/5xOKJ5C0UM8Y5hl6zwYr3VleAojJJOkf/ct+uaxjmayfuPVBu3C0sCNFKHS gvQ8OwkkdJ/o82d+lHwyk+qsDSbLvL1RmbR6RFCEOFE24ctbS+XfhQZ0XoudESla ln3nhNjX1haIhb5Orc/2vDmpjC/Ir6XGc5OiYv7P2Zui+2JYKwE4GSI47wTGtwS8 aCiKZ5e+UXzQW6ph6uDa98idNjKd3h1O4I2D8kHr1FKH/9mkQE+prDk9M0CJdyN9 XhOVy9cOTDzEqeHaqTxK6uo2VxZYBCqrhIJZ5Rn7N7CUiiK8KUDFDNULYEzhm9k2 Hhi2ZVXqvgM9d3Drclyq9LweQHH8W6JB3inTKkqwBhnFXSnmzo7n4vZYVaFOGsft gfjT/bEh953lPzq/txONi/Gvhby1NedTu3e8tjBnI5p30Hh7Pajx3VnFmfeNk47j a7r9zNW5FUkjIBnLxXeJH68CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 384037417100992997852674958760752302655301 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 21:15:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-21 21:15:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pama.co.il' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783871752332242128519204928228851162303725909221156421898689697150948627916431997215105877962312119635540807956160021809274431336248084505493167775528445027881914303496555780262825709030777018302775665378531028870566915456449219293577203327553260431173488285336589483213116715551937613417902865723922700089699138596279692103269811162523739115883470204030631675205799592405811362200951143319218488864463745852392086084968085510154054983097969115917947287526880332050029160738716094884708678929332118561746033852042554728069040840259755784729187843544162112621133382341967753083299020778928699098791358360023285318285469074396518913030888905113042837795532820953456970365629964035464560988130925529054457014341767493889674409854441375443775920478385137485282631286037944020250625958211189352710258872137167146432510797122565801511348047688471555858903792029749916687828460073638021138375120523639136088649321350057426521480677136394126264587105235914327348712988950682503670820888900022991589276739140834754872157925358347146679754169121621478903890523245434309356116367036075345332204276007986371621014727508763902282604897445377937991700878324452333935712976384967025533337475069462538163447707156148738928782397209540150756305870767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 46669c11f23cf86567a1ec25a3959ecc3cba2353 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pama.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pama.co.il' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018670e5af32000004030046304402207593c15bf40374562e43be49990db61f1233ad9dfdd9b9b6e95f05d4a74039a802200c8c4fca8692b1b204d7be14039c4553f114eb183f915580d975fbe02246fc3a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018670e5af3f0000040300483046022100b4495a18e8ac15f1aad4224a2ed56d9963b0fb80e07bd7f2266b9dac3cdaddfb022100803aeaf53c0852c7233fd58bbb137d8913dcb41a48b95acf4d9f16d5c75986a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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