buk.co.il

Issued by R3

About this certificate

This digital certificate with serial number 04:86:d1:dd:37:24:3b:2e:f2:d5:62:9d:59:46:49:f9:f9:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=buk.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:86:d1:dd:37:24:3b:2e:f2:d5:62:9d:59:46:49:f9:f9:34
Serial Number (int): 394325938161574582729202098699837900454196
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:c9:73:56:e7:36:01:f4:e9:89:2c:4e:72:f4:05:d1:a6:cc:da:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:02:a5:c6:74:9b:2b:5d:81:ad:29:41:fd:25:00:8d:f9:36:01:0c
Fingerprint (sha256): aa:ee:49:2d:b1:c2:4b:2d:8c:48:ae:09:5a:f5:18:d5:f5:13:b1:1f:dd:83:e5:c8:98:f4:aa:7a:d0:bf:09:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate buk.co.il

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buk.co.il

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buk.co.il
www.buk.co.il

Other certificates including the domain name buk.co.il

(limited to 100 certificates)

Certificate

The complete raw certificate details for buk.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISBIbR3TckOy7y1WKdWUZJ+fk0MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDUyMTI2MjJaFw0yNDA2MDMyMTI2MjFaMBQxEjAQBgNVBAMT
CWJ1ay5jby5pbDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKtwnWNs
9qsOTPynxkZOwEHJOlfX07vCTpDJi5+pSWFVt3ToXBW0aHwYm4/IlYdLX46h69mw
jGgQDY71c+TKOn2qfix0Diw+cU1AdUDAY5KWfew8mUK+k6gBonLbH8J7QOBCN9mA
fiG1Is74UI5pLpU8uUfC4HNc+CF/5h3S+r0j/St2DJOpDTRid+WdUooGO4ff6dhY
1rw/Ud50mhAgYRxogOx59W/LYUseRage4Ie7Nuei3Gwa2Jm7gL9prYHdlSu1qVoV
lhcB41JRgZq2c0lixfCKp232GuN9gxg7KbOx1GtiNczvwwTJ0IclFhhy9zLlqL6d
rEncU2TUwUtaKTf8ZjcrbYUea2qp5tGyQe+2VYcDE7QSr0XTDOmVUEjHkkBHjERR
P8aCiLEj2NAMRpUt5DHuA+BtJQT+NHXRbKn66EClqxhTakcayJXqLxAF0AWfF8vq
Zi8VLZ9UXyLv3DwFEKZ66y9pus/L3L6R0K3hl02F/OlvaD1kWXEUh5A98g1lpiky
TKYVSEpfwuJenN1505CyFDZ0ALTmzF+WPl4huhze7g4M26A3DlIojqyvPv2xDwHU
TB+dovjBvgxyHdKnBVMP8qWnMd8DeeOiK3ues4+T1bHVEZ0KZ4B+ekV/xecJTSN1
/28xQSOK7Y+ktTd6vS7tCLlMi+FzCce1Q5BbAgMBAAGjggIcMIICGDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFIXJc1bnNgH06YksTnL0BdGmzNqnMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMCMGA1UdEQQcMBqCCWJ1ay5jby5pbIINd3d3LmJ1ay5jby5p
bDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3
AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjhC5l84AAAQDAEgw
RgIhALikvZHEl9meDIgcfm1Va9g2dG8ngihQaegmZ563HZvlAiEA7O7T1o3tFheh
Olz9g4DhMglG0zk7H5Pz8MsUK1fKL+YAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/TH
vQANLXJv4frUFwAAAY4QuZfZAAAEAwBIMEYCIQDoj0Prm/dljMry1Xys9zqbUhSE
c/t1A4n7Vm2sDchGYwIhAPq2yGNcxFXD8XsfaaxS8QCxdJGGjsRZLaxbELyMU3Gg
MA0GCSqGSIb3DQEBCwUAA4IBAQAttCTDpEzltq5SUh6jMe5ctb/FbZFwsNtn4C2+
laqLpwOH4RENLFN8Px3J+QJ1fLrBq0zbFLVqY6O1R7xbBeN56fsVTS4O3xus7m3h
pT3jxxEiTDCFb3KhNWm/nwdkKxJsiRwNNqZhhveBv8sbWSb///DDjwQdWBw2iJ4A
s6CqA/OZ9TCALwdThjLNE9fzUca970yC+4E7mbQJi7SqAQOF0RPJUWjoF7Zq7P8T
JcAQZFyXwRl5e8XV3MnwPln7MoNHm4wXiaehTIjYCyDNTi+do0DnsphmDCGG/9zk
m6WJiBV13vb+QzMCVH9gbURSyRgFYH69t8R4QXgklDNi/YWR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq3CdY2z2qw5M/KfGRk7A
Qck6V9fTu8JOkMmLn6lJYVW3dOhcFbRofBibj8iVh0tfjqHr2bCMaBANjvVz5Mo6
fap+LHQOLD5xTUB1QMBjkpZ97DyZQr6TqAGictsfwntA4EI32YB+IbUizvhQjmku
lTy5R8Lgc1z4IX/mHdL6vSP9K3YMk6kNNGJ35Z1SigY7h9/p2FjWvD9R3nSaECBh
HGiA7Hn1b8thSx5FqB7gh7s256LcbBrYmbuAv2mtgd2VK7WpWhWWFwHjUlGBmrZz
SWLF8IqnbfYa432DGDsps7HUa2I1zO/DBMnQhyUWGHL3MuWovp2sSdxTZNTBS1op
N/xmNytthR5raqnm0bJB77ZVhwMTtBKvRdMM6ZVQSMeSQEeMRFE/xoKIsSPY0AxG
lS3kMe4D4G0lBP40ddFsqfroQKWrGFNqRxrIleovEAXQBZ8Xy+pmLxUtn1RfIu/c
PAUQpnrrL2m6z8vcvpHQreGXTYX86W9oPWRZcRSHkD3yDWWmKTJMphVISl/C4l6c
3XnTkLIUNnQAtObMX5Y+XiG6HN7uDgzboDcOUiiOrK8+/bEPAdRMH52i+MG+DHId
0qcFUw/ypacx3wN546Ire56zj5PVsdURnQpngH56RX/F5wlNI3X/bzFBI4rtj6S1
N3q9Lu0IuUyL4XMJx7VDkFsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394325938161574582729202098699837900454196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 21:26:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 21:26:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buk.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699413777405349705643568056617272737590884111177747774744383213913240186223371348400284970763761305781017412052637821813578545012353489034443789196021010799190319003007010572725289029908373824230124732320164971193871000222320705764775175967406486170435866433963144256854877686864539119035517123264778478976029492429594783674233264512900831865641734898080364247759480959998841201626097404197863553437789251870317428894643985078787567081461768917080859752476577591616726749288980342545746824961239493478912240427092901107686385742761463866987302111510081703652391988215175493239363946304718376234028456304771701620600793772386906299979088100973539416021320060485935028122453337829764675996354399726313405740275795819106124971560639243573805019040934576718002119300667203887152805736511155130621961805227245463136173917773378800828796923744606222958336364704938895218586210459571991126064333013695559592673610496361228694617242350035237970501386224564978019446412573710156779772859890606650103152339692713626325008347521780496415319646507006137841317905965912860938454792880000984973058858413355202840505273338009299903561688120150177542572301857336471384228979018601162793852197032711204467855597647430720634176302897396669814847803483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c97356e73601f4e9892c4e72f405d1a6ccdaa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buk.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buk.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e10b997ce0000040300483046022100b8a4bd91c497d99e0c881c7e6d556bd836746f2782285069e826679eb71d9be5022100eceed3d68ded1617a13a5cfd8380e1320946d3393b1f93f3f0cb142b57ca2fe60077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e10b997d90000040300483046022100e88f43eb9bf7658ccaf2d57cacf73a9b52148473fb750389fb566dac0dc84663022100fab6c8635cc455c3f17b1f69ac52f100b17491868ec4592dac5b10bc8c5371a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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