www.mani.co.il

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:1d:1e:a7:2f:90:22:3f:29:6c:b9:98:3b:f1:7e:7e:ed was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mani.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:1d:1e:a7:2f:90:22:3f:29:6c:b9:98:3b:f1:7e:7e:ed
Serial Number (int): 342022485527257409076999311430160647880429
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:3c:12:9a:fe:0b:ab:30:25:9a:57:0c:f3:11:a6:61:b2:26:82:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:ae:5d:1a:31:de:8e:ed:43:60:48:5f:1d:91:71:fe:8e:cd:da:bc
Fingerprint (sha256): b8:f8:c7:8c:14:7d:2f:49:f1:24:44:db:c9:96:8e:63:65:ef:88:81:a7:92:9d:5c:21:9e:5f:47:a9:1c:1c:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mani.co.il

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mani.co.il

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mani.co.il
mani.eu-1.evennode.com
static.mani.co.il
www.mani.co.il

Other certificates including the domain name mani.co.il

(limited to 100 certificates)
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
server.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
aws.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
server.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
server.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il
www.mani.co.il

Certificate

The complete raw certificate details for www.mani.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvS32pYP7NrH0ALb2rGjF
8CbNvtO+Y2W6arNr9snaDqYrr3P+njkYx11lqx1bAjWLpqmfFeoGNTq4zIvClN/B
V0qgwRJjsIUgpBlByARaDGWwutklnBFIA5ogSv/qvaIQEPthCebZHJL7GssrxOIl
W7k7AihW6uPBvukFSJYwmr0GU9Uk9XORTq07nxWh0s/VBHkoPKKB9i0nST4m5HOs
cm0YbhqQfmfQBuvzYYYnMKsRxN8bviaJbxPX1sSrTAJ34/tQj4qF5SSdPrK7ov1u
Rgpwg2eFAObYsaFLjEDd3rpjEXwR/72t7c8ExR/CG6uViOqzqX1hEsmfFYUHOkLa
z3TOlzfXQtCdokkN+k/14tUAVITe18XIt3ka4VYbI7TW/zyPZSISauCBGIuxN2u4
l0hUCTh3V20fD4cVk1ufJ2+igxjebkRMZJgeWov1BMPhV0CxaCoTtmOg15d61ToV
Vubf9c17dfvQ2DHDHrpDdOZBLQpZ6eqeucU0AyE/S+M33ezayq+A97PLztpMv3mN
aGrRAsJW25I9AjIyXL48uudptgnAu2mBPqcIyNr1G35v+VAYTlEdAAF0ZLxdLPbZ
nAIeMIFX8o1S6769UZo0ZhIyn+qb42tUzCPJg8Pd9CfWDPXxK9u3cJzpU6oWm61T
AwPsO7qQ5ESuh2tlfDPMy68CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342022485527257409076999311430160647880429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-24 07:07:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 07:07:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mani.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771785207642704453609800641690906320945944548964734454499851921374068900546225389285558376394580160141940645905183663896271923225944930518023743442312890149406292738447573514603662114151932402866172279444740137052248557745871651365552144706271903903839878791507892295927886460244550699984250759612753896496218491642638422788904165123441883691981399160002922449459232640841321624825850418083788334036824325491846712140053207837564530182150336140433516509719369235685101871451399932664330417691001013875281477518036746561324887462153741245010644424874599126907892952275093510649317305439178625511897728620241220300503450185239082993408481759946874266666185105031226212644650192276255982038974929413096950098526317648821277123805805216819197244479676349961823256885659375644629979492185724291519047748186382630618064082368364783641157402857706953661752111859215244907202085582737086406204790704546750755926799687702130833384054444567597576700446846402912680329862756628533633267644515283095252764275250921872586445504562209854446622924836717249089533278384234735662673992536089832301895013223675310171012042585996646487865412762152771235920593106021298851024661587766035347836614973221979075662065225284223809511624647573165096005585839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							603c129afe0bab30259a570cf311a661b2268200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mani.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mani.eu-1.evennode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.mani.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mani.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167df41721300000403004630440220671e1398935698c2f8267548faf79d03dbbd72bca348fd5c3d3c9aa4189ff7ea02203185647f2e7a7c4239494e3b1748d6e7ebc3f54031c2ac2512e8096270058666007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167df4172130000040300473045022041690ce49c76893d27dd8067b693325f3f9abd176fe1fd472831b7bfc1e3c676022100faeafd07a0ec8ba1f4c239f41237c1ba0ff754baafca11dd190a7eda23044893
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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