asif-bag.co.il
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:30:d1:10:07:69:fe:fa:89:6f:7c:8e:ec:16:5a:a9:50:42 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=asif-bag.co.il
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:30:d1:10:07:69:fe:fa:89:6f:7c:8e:ec:16:5a:a9:50:42Serial Number (int): 277948303285729306523322377663576669769794
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:fa:e7:b6:d6:81:e7:34:89:c5:cc:78:2b:5d:a1:8a:de:4d:dc:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 27:19:56:74:34:12:fb:a7:85:d3:58:72:c9:2a:da:14:4a:2c:8d:59
Fingerprint (sha256): 95:c5:0b:01:25:f8:c1:b1:b3:ce:0c:69:53:9d:d3:d8:13:e2:81:90:94:3c:58:a3:9e:e7:fc:ca:22:1b:79:5e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate asif-bag.co.il
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for asif-bag.co.il
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
asif-bag.co.il
www.asif-bag.co.il
www.asif-bag.co.il
Other certificates including the domain name asif-bag.co.il
(limited to 100 certificates)
Certificate
The complete raw certificate details for asif-bag.co.il in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISAzDREAdp/vqJb3yO7BZaqVBCMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTMyMTI4NTJaFw0x OTEyMTIyMTI4NTJaMBkxFzAVBgNVBAMTDmFzaWYtYmFnLmNvLmlsMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqZ6kSr6E45A4p7PNCjGp3vaDB8a/df3Q O0zpLvF6aKxitN6EU2XcuCh3hWi18Gfff806aZ5DUzeIoKwnnuWudfzVy3NabNUs GNUn/KquQcJAfVfwMQjRVoqvkaXXHcuBh9MG5duMWMGzsDseED59ANW/8fzCMPPf +QF4iZVOTTI6w/nj/sORFkPalolPn4RNGz+q7IH971t6vvsTZMXGNxg3KOhrWCfu uaPqyMjxg4KRwWm2WiB6YczKcWyUCkMDuEBHKhL+3a7cFY9TuHS70oqVu75NDI2f V+QNAZVSxVG2fj2t80rr7H0KnM0N26lSMlWyHMTmMADJdiNce4Oh2n3c1ZzInBxu 2rkuF016e1x9BuFvGCqPhSmLJKHIvLv0Ro98bHDFpzHCOWayWkk4qooAxZuULcVT 6eom987U7GgOErsoVfteOexaKRKOHx3yRQ+bDlXjeYfHatbNav4T2RGJNdSMee5H 0YEfmKfQlVNm390djJ2oUJIOignNQr9m2AAAec7fpaDUWMJ92Vr7n9p9JPePhBxo NyhFJgH9gA9jydkf6zLI0m5aiwEJ/6K8s2gPYcu9+jg63evGynFmBvWxIxdqw8b3 sr+DYfF5mieQ/CauegbKkB5XkwyWc2CMeFEax9f3iCjUFeLJeGcQLQl9UqfWgYLp 9TZ/Atg5uSMCAwEAAaOCAngwggJ0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUrPrn ttaB5zSJxcx4K12hit5N3PEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5hc2lmLWJhZy5jby5pbIIS d3d3LmFzaWYtYmFnLmNvLmlsMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI +6SPKJMBnd3x2/4AAAFtLL5OnQAABAMASDBGAiEAoIT3KbisRo1npNbj8XYD4Mvh 2DG3GayYwxYyrw7LXvUCIQD5jUnbWV5kH2Or5mylxA3ospT5C29JZuiJ0zIzVPlj vgB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbSy+UCgAAAQD AEcwRQIhAKZEF4PpNw8xuTACYMilsIBEHi0mgXNZlLhiBZoSgLDkAiBXcqNp+78e ZskhYLeAWiWCUINR/xO1iARYA4DQeFxzhjANBgkqhkiG9w0BAQsFAAOCAQEAVC6G qwBjmd3VoOktJVv0p87orUq6PsiHIrZ1ez63qHDHD+Q4jmWjjaFGSGaBF0eH+ylH zR439NFHvuqeA/3eVIUG+mJ+J+ZEPvyYS6M9mf/WCuYgSZD5TBP+MRDCWbSZ5dkH bFnGbCMR0sRER8QJ3mkcUYzQpJxAJxXEgGyVVnJXSD6ILG1vWTebZplPfZ0y8ghM /hcESkdyqz9+ix+hjfAXXO4LYZ1hROQFVtcBOitDyhaLwIC/juq5vbfcwLEQ4f89 878vwbxM0/JZe4VCpvrKZexHDidmrjOR5jS9NrTl4eodC1HitNuNO2L9notgRJHO g7CkQG+2ysJGmHxsww== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqZ6kSr6E45A4p7PNCjGp 3vaDB8a/df3QO0zpLvF6aKxitN6EU2XcuCh3hWi18Gfff806aZ5DUzeIoKwnnuWu dfzVy3NabNUsGNUn/KquQcJAfVfwMQjRVoqvkaXXHcuBh9MG5duMWMGzsDseED59 ANW/8fzCMPPf+QF4iZVOTTI6w/nj/sORFkPalolPn4RNGz+q7IH971t6vvsTZMXG Nxg3KOhrWCfuuaPqyMjxg4KRwWm2WiB6YczKcWyUCkMDuEBHKhL+3a7cFY9TuHS7 0oqVu75NDI2fV+QNAZVSxVG2fj2t80rr7H0KnM0N26lSMlWyHMTmMADJdiNce4Oh 2n3c1ZzInBxu2rkuF016e1x9BuFvGCqPhSmLJKHIvLv0Ro98bHDFpzHCOWayWkk4 qooAxZuULcVT6eom987U7GgOErsoVfteOexaKRKOHx3yRQ+bDlXjeYfHatbNav4T 2RGJNdSMee5H0YEfmKfQlVNm390djJ2oUJIOignNQr9m2AAAec7fpaDUWMJ92Vr7 n9p9JPePhBxoNyhFJgH9gA9jydkf6zLI0m5aiwEJ/6K8s2gPYcu9+jg63evGynFm BvWxIxdqw8b3sr+DYfF5mieQ/CauegbKkB5XkwyWc2CMeFEax9f3iCjUFeLJeGcQ LQl9UqfWgYLp9TZ/Atg5uSMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277948303285729306523322377663576669769794 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 21:28:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 21:28:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asif-bag.co.il' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691987980064103275516408801493848450058861654040266603155435282686486954681664038642022524819770182683311790572881116353529277408879332678266305417069921308155823503851720025691268509608908267922893283239039575713904484738724907962150025845047357995874807786162922831535687260217875231339411381919804803614801688246399276866527148668116014232992243379249543623965155201719406764161939138236667285793288833220801791000521286923172229454137343916199655560557910995423022214377467482748032389783250059919555223439367349571062308835993681151983509237609972895587199585349019449842106963859634673927530161890790637850291483729547523242825867737715442597837706223831122958931738776256295410082559703698782582511829324312723787369428737000195023604878636764981293921483643983804228501636169167414106164049622151142134396684294750864980871386336025703128138815193627963880958721408607786638663461186775905612319013033703524943736292190553691399565208793636916706978956912284219885512570137972264602923370755880729914439080633158712474537168890842710970910638564835193691478993035410059474559857221880854272327884579365779921232650240958015467550893429156668582802120456132476770824832623797952427492829689595698756341700047657964342177544483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acfae7b6d681e73489c5cc782b5da18ade4ddcf1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asif-bag.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asif-bag.co.il' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d2cbe4e9d0000040300483046022100a084f729b8ac468d67a4d6e3f17603e0cbe1d831b719ac98c31632af0ecb5ef5022100f98d49db595e641f63abe66ca5c40de8b294f90b6f4966e889d3323354f963be00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d2cbe50280000040300473045022100a6441783e9370f31b9300260c8a5b080441e2d2681735994b862059a1280b0e402205772a369fbbf1e66c92160b7805a2582508351ff13b58804580380d0785c7386 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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