pama.co.il

Issued by R3

About this certificate

This digital certificate with serial number 04:68:95:a4:22:d0:75:35:9d:4e:29:0c:8c:ec:b8:5e:07:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pama.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:95:a4:22:d0:75:35:9d:4e:29:0c:8c:ec:b8:5e:07:45
Serial Number (int): 384037417100992997852674958760752302655301
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 46:66:9c:11:f2:3c:f8:65:67:a1:ec:25:a3:95:9e:cc:3c:ba:23:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:15:7e:a2:03:aa:38:ab:64:51:da:9d:fd:9f:74:c3:09:67:68:3c
Fingerprint (sha256): 8c:34:c0:dc:6f:a4:03:8e:41:74:1b:6c:a7:4c:6d:4e:fd:43:c1:b9:d0:17:1a:77:a9:60:b9:6b:d0:8f:fc:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pama.co.il

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pama.co.il

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pama.co.il
www.pama.co.il

Other certificates including the domain name pama.co.il

(limited to 100 certificates)

Certificate

The complete raw certificate details for pama.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384037417100992997852674958760752302655301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 21:15:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-21 21:15:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pama.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783871752332242128519204928228851162303725909221156421898689697150948627916431997215105877962312119635540807956160021809274431336248084505493167775528445027881914303496555780262825709030777018302775665378531028870566915456449219293577203327553260431173488285336589483213116715551937613417902865723922700089699138596279692103269811162523739115883470204030631675205799592405811362200951143319218488864463745852392086084968085510154054983097969115917947287526880332050029160738716094884708678929332118561746033852042554728069040840259755784729187843544162112621133382341967753083299020778928699098791358360023285318285469074396518913030888905113042837795532820953456970365629964035464560988130925529054457014341767493889674409854441375443775920478385137485282631286037944020250625958211189352710258872137167146432510797122565801511348047688471555858903792029749916687828460073638021138375120523639136088649321350057426521480677136394126264587105235914327348712988950682503670820888900022991589276739140834754872157925358347146679754169121621478903890523245434309356116367036075345332204276007986371621014727508763902282604897445377937991700878324452333935712976384967025533337475069462538163447707156148738928782397209540150756305870767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46669c11f23cf86567a1ec25a3959ecc3cba2353
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pama.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pama.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018670e5af32000004030046304402207593c15bf40374562e43be49990db61f1233ad9dfdd9b9b6e95f05d4a74039a802200c8c4fca8692b1b204d7be14039c4553f114eb183f915580d975fbe02246fc3a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018670e5af3f0000040300483046022100b4495a18e8ac15f1aad4224a2ed56d9963b0fb80e07bd7f2266b9dac3cdaddfb022100803aeaf53c0852c7233fd58bbb137d8913dcb41a48b95acf4d9f16d5c75986a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004bf1c895e1c4cc00c909c35c6e17a96c3f23fdff232f1335384af56c814425691e0fa3ada1845565e4cbe288d4f1b894df5412e4259d05d65dbd0e3eeb8c4a375dbe01ae1b96a9be14bb873f4361029d01c2887b9b00dd2ef6c339c7ee5442c9bf40afb6403ec041d2db8744ab75deead717bb24cda84935f8256e5ed4c4a259120436db6c2bf2fc6b2b23dd3af398591b9e2f447e510fde1e0950ad499a3f1321a558acad136d34faf55c589034e298d5cd411882ca205146febbcfc8b9a6ec2d6b0a6a16a9352b7c81323796cb3c00c3fd2ef3538f034b14cd12e992eb96632abcdd452e7c2f3f602e50e988c302085c8a7d8b8bdd7efedcc89fef497062af