buk.co.il
Issued by R3
About this certificate
This digital certificate with serial number 04:86:d1:dd:37:24:3b:2e:f2:d5:62:9d:59:46:49:f9:f9:34 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=buk.co.il
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:86:d1:dd:37:24:3b:2e:f2:d5:62:9d:59:46:49:f9:f9:34Serial Number (int): 394325938161574582729202098699837900454196
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 85:c9:73:56:e7:36:01:f4:e9:89:2c:4e:72:f4:05:d1:a6:cc:da:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f8:02:a5:c6:74:9b:2b:5d:81:ad:29:41:fd:25:00:8d:f9:36:01:0c
Fingerprint (sha256): aa:ee:49:2d:b1:c2:4b:2d:8c:48:ae:09:5a:f5:18:d5:f5:13:b1:1f:dd:83:e5:c8:98:f4:aa:7a:d0:bf:09:00
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate buk.co.il
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for buk.co.il
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
buk.co.il
www.buk.co.il
www.buk.co.il
Other certificates including the domain name buk.co.il
(limited to 100 certificates)
viao.co.in
buk.co.il
servicecu.staging.wallit.app
ficheinteractive.etoh.app
buk.co.il
enterprise.sharo.io
www.so-vedant.in
jtv.basketballireland.tv
www.tritun.net
www.vincentbourdeau.com
servicecu.staging.wallit.app
ficheinteractive.etoh.app
buk.co.il
www.stavehumle.com
admin.visits-innovators.com
wildbrains.xyz
portal.buk.co.il
www.miksang-asia.com
bo.buk.co.il
buk.co.il
bytewavelabs.com.br
cockpit.tmtgps.io
bhattiassociate.com
www.wehatid.ph
www.metatools.io
wildbrains.xyz
blog.rubell.com
chunet.org
www.saiga.uz
app-qa.upflowy.com
buk.co.il
servicecu.staging.wallit.app
ficheinteractive.etoh.app
buk.co.il
enterprise.sharo.io
www.so-vedant.in
jtv.basketballireland.tv
www.tritun.net
www.vincentbourdeau.com
servicecu.staging.wallit.app
ficheinteractive.etoh.app
buk.co.il
www.stavehumle.com
admin.visits-innovators.com
wildbrains.xyz
portal.buk.co.il
www.miksang-asia.com
bo.buk.co.il
buk.co.il
bytewavelabs.com.br
cockpit.tmtgps.io
bhattiassociate.com
www.wehatid.ph
www.metatools.io
wildbrains.xyz
blog.rubell.com
chunet.org
www.saiga.uz
app-qa.upflowy.com
Certificate
The complete raw certificate details for buk.co.il in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISBIbR3TckOy7y1WKdWUZJ+fk0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDUyMTI2MjJaFw0yNDA2MDMyMTI2MjFaMBQxEjAQBgNVBAMT CWJ1ay5jby5pbDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKtwnWNs 9qsOTPynxkZOwEHJOlfX07vCTpDJi5+pSWFVt3ToXBW0aHwYm4/IlYdLX46h69mw jGgQDY71c+TKOn2qfix0Diw+cU1AdUDAY5KWfew8mUK+k6gBonLbH8J7QOBCN9mA fiG1Is74UI5pLpU8uUfC4HNc+CF/5h3S+r0j/St2DJOpDTRid+WdUooGO4ff6dhY 1rw/Ud50mhAgYRxogOx59W/LYUseRage4Ie7Nuei3Gwa2Jm7gL9prYHdlSu1qVoV lhcB41JRgZq2c0lixfCKp232GuN9gxg7KbOx1GtiNczvwwTJ0IclFhhy9zLlqL6d rEncU2TUwUtaKTf8ZjcrbYUea2qp5tGyQe+2VYcDE7QSr0XTDOmVUEjHkkBHjERR P8aCiLEj2NAMRpUt5DHuA+BtJQT+NHXRbKn66EClqxhTakcayJXqLxAF0AWfF8vq Zi8VLZ9UXyLv3DwFEKZ66y9pus/L3L6R0K3hl02F/OlvaD1kWXEUh5A98g1lpiky TKYVSEpfwuJenN1505CyFDZ0ALTmzF+WPl4huhze7g4M26A3DlIojqyvPv2xDwHU TB+dovjBvgxyHdKnBVMP8qWnMd8DeeOiK3ues4+T1bHVEZ0KZ4B+ekV/xecJTSN1 /28xQSOK7Y+ktTd6vS7tCLlMi+FzCce1Q5BbAgMBAAGjggIcMIICGDAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFIXJc1bnNgH06YksTnL0BdGmzNqnMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMCMGA1UdEQQcMBqCCWJ1ay5jby5pbIINd3d3LmJ1ay5jby5p bDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjhC5l84AAAQDAEgw RgIhALikvZHEl9meDIgcfm1Va9g2dG8ngihQaegmZ563HZvlAiEA7O7T1o3tFheh Olz9g4DhMglG0zk7H5Pz8MsUK1fKL+YAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/TH vQANLXJv4frUFwAAAY4QuZfZAAAEAwBIMEYCIQDoj0Prm/dljMry1Xys9zqbUhSE c/t1A4n7Vm2sDchGYwIhAPq2yGNcxFXD8XsfaaxS8QCxdJGGjsRZLaxbELyMU3Gg MA0GCSqGSIb3DQEBCwUAA4IBAQAttCTDpEzltq5SUh6jMe5ctb/FbZFwsNtn4C2+ laqLpwOH4RENLFN8Px3J+QJ1fLrBq0zbFLVqY6O1R7xbBeN56fsVTS4O3xus7m3h pT3jxxEiTDCFb3KhNWm/nwdkKxJsiRwNNqZhhveBv8sbWSb///DDjwQdWBw2iJ4A s6CqA/OZ9TCALwdThjLNE9fzUca970yC+4E7mbQJi7SqAQOF0RPJUWjoF7Zq7P8T JcAQZFyXwRl5e8XV3MnwPln7MoNHm4wXiaehTIjYCyDNTi+do0DnsphmDCGG/9zk m6WJiBV13vb+QzMCVH9gbURSyRgFYH69t8R4QXgklDNi/YWR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq3CdY2z2qw5M/KfGRk7A Qck6V9fTu8JOkMmLn6lJYVW3dOhcFbRofBibj8iVh0tfjqHr2bCMaBANjvVz5Mo6 fap+LHQOLD5xTUB1QMBjkpZ97DyZQr6TqAGictsfwntA4EI32YB+IbUizvhQjmku lTy5R8Lgc1z4IX/mHdL6vSP9K3YMk6kNNGJ35Z1SigY7h9/p2FjWvD9R3nSaECBh HGiA7Hn1b8thSx5FqB7gh7s256LcbBrYmbuAv2mtgd2VK7WpWhWWFwHjUlGBmrZz SWLF8IqnbfYa432DGDsps7HUa2I1zO/DBMnQhyUWGHL3MuWovp2sSdxTZNTBS1op N/xmNytthR5raqnm0bJB77ZVhwMTtBKvRdMM6ZVQSMeSQEeMRFE/xoKIsSPY0AxG lS3kMe4D4G0lBP40ddFsqfroQKWrGFNqRxrIleovEAXQBZ8Xy+pmLxUtn1RfIu/c PAUQpnrrL2m6z8vcvpHQreGXTYX86W9oPWRZcRSHkD3yDWWmKTJMphVISl/C4l6c 3XnTkLIUNnQAtObMX5Y+XiG6HN7uDgzboDcOUiiOrK8+/bEPAdRMH52i+MG+DHId 0qcFUw/ypacx3wN546Ire56zj5PVsdURnQpngH56RX/F5wlNI3X/bzFBI4rtj6S1 N3q9Lu0IuUyL4XMJx7VDkFsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 394325938161574582729202098699837900454196 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 21:26:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 21:26:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buk.co.il' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699413777405349705643568056617272737590884111177747774744383213913240186223371348400284970763761305781017412052637821813578545012353489034443789196021010799190319003007010572725289029908373824230124732320164971193871000222320705764775175967406486170435866433963144256854877686864539119035517123264778478976029492429594783674233264512900831865641734898080364247759480959998841201626097404197863553437789251870317428894643985078787567081461768917080859752476577591616726749288980342545746824961239493478912240427092901107686385742761463866987302111510081703652391988215175493239363946304718376234028456304771701620600793772386906299979088100973539416021320060485935028122453337829764675996354399726313405740275795819106124971560639243573805019040934576718002119300667203887152805736511155130621961805227245463136173917773378800828796923744606222958336364704938895218586210459571991126064333013695559592673610496361228694617242350035237970501386224564978019446412573710156779772859890606650103152339692713626325008347521780496415319646507006137841317905965912860938454792880000984973058858413355202840505273338009299903561688120150177542572301857336471384228979018601162793852197032711204467855597647430720634176302897396669814847803483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 85c97356e73601f4e9892c4e72f405d1a6ccdaa7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buk.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buk.co.il' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e10b997ce0000040300483046022100b8a4bd91c497d99e0c881c7e6d556bd836746f2782285069e826679eb71d9be5022100eceed3d68ded1617a13a5cfd8380e1320946d3393b1f93f3f0cb142b57ca2fe60077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e10b997d90000040300483046022100e88f43eb9bf7658ccaf2d57cacf73a9b52148473fb750389fb566dac0dc84663022100fab6c8635cc455c3f17b1f69ac52f100b17491868ec4592dac5b10bc8c5371a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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