jerusalembiking.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:52:35:be:5a:8c:5c:e0:87:86:a9:b1:84:dc:e0:86:e1 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jerusalembiking.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:52:35:be:5a:8c:5c:e0:87:86:a9:b1:84:dc:e0:86:e1
Serial Number (int): 379524114865066051712066781465379898164961
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:dd:17:cf:c3:f9:f7:45:3c:32:f4:dd:1a:ef:fc:72:40:86:11:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:56:39:db:b9:f6:3d:96:14:c2:22:61:fd:b5:dc:07:83:a6:9d:fc
Fingerprint (sha256): e4:d5:d1:81:f9:7f:a7:de:9b:c3:b0:47:ac:19:b0:e8:e2:a0:a6:81:41:29:3a:df:c0:19:db:a5:ac:f3:16:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jerusalembiking.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jerusalembiking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jerusalembiking.com
jerusalembiking.com
jerusalembiking.zuzu.tempurl.co.il
www.jerusalembiking.zuzu.tempurl.co.il

Other certificates including the domain name jerusalembiking.com

(limited to 100 certificates)
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com
jerusalembiking.com

Certificate

The complete raw certificate details for jerusalembiking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISBFtSNb5ajFzgh4apsYTc4IbhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTEwNDUzNTRaFw0yNDAxMDkwNDUzNTNaMB4xHDAaBgNVBAMT
E2plcnVzYWxlbWJpa2luZy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLyO+foFgmOexNrC8qXM93t75/AaTKx7O30SeaM2MwduQylI1cICHllXul
8pdbdSK72MoqBLNMcDkUz87BmQdH+LyuqIHbLXgWNyKtudpgIvaqWkaIPG3DS05v
SPwvgUJ6+WFIW//dwSMS7w5P3o+iKvY93PLj+hhMQ894JrXw5a2lME/JzcUfHp7a
FimLpK4WWeA/0JntPScWliT7M9fWz96BjvoEklgCvsRi85bOjgwZf5gIL5eyFoOI
a43dkKDJTgWcJq+BfYUbTp3NP+JDESFUN1/GgkbK04+jF4zGavHdlktO3dK3GAbh
E/7xJnRFnFMvNkNgtIYFBToJTNpXAgMBAAGjggJ5MIICdTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFLXdF8/D+fdFPDL03Rrv/HJAhhFFMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIGBBgNVHREEejB4ghUqLmplcnVzYWxlbWJpa2luZy5jb22CE2plcnVz
YWxlbWJpa2luZy5jb22CImplcnVzYWxlbWJpa2luZy56dXp1LnRlbXB1cmwuY28u
aWyCJnd3dy5qZXJ1c2FsZW1iaWtpbmcuenV6dS50ZW1wdXJsLmNvLmlsMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3dT4t
uYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLHUyAcgAABAMARzBFAiEAh7DH
LXYnaEAhYdggrEPpsIz8MIR7W5s5XnAqZEuWM3sCIF0bHULO4A1TlywFRQlqyEdV
iNFvqKMFCTGBXbtY7yIHAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa
OnQAAAGLHUyAqgAABAMARzBFAiBdWldkV6qh2jky36cDPopqNB8E6AGK3wIjkK0B
zWMoywIhAKF6a4VVGWqsmrKLV+4kSJlEDOxk5Z6ctHVanhFQvya3MA0GCSqGSIb3
DQEBCwUAA4IBAQBsoRihhCx0rkM15ywdWuikmjR3JWGKRzGeFTjsxB+HWu4tZeFM
n7RxA8jFQU/en337283B8TWujrj0DJ7U97bDltZ2FSE78XWVNqaT0TERXZElk88D
eC2154H9uHFpkzc6eQAjCYh/xIQiqBCP4Sf0LJ1hKsYNtA2hsskdyt4Wn5WW2EE4
zzYShKMs1hkNkok/V1WOHcWw/RUdMkF1dcBNuW0mpkVfrCU7KEjS+pZFMP4Q6EzJ
QWec5mDwq6iKUUoYcrjF/HnOkZVItrpJvzmIQqW4qKDmOUAU7+lWcRwEOfwZbu6h
/l225mBK8gBnAZYHcRFrcN3y0cqfJG/zdur5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8jvn6BYJjnsTawvKlzP
d7e+fwGkysezt9EnmjNjMHbkMpSNXCAh5ZV7pfKXW3Uiu9jKKgSzTHA5FM/OwZkH
R/i8rqiB2y14FjcirbnaYCL2qlpGiDxtw0tOb0j8L4FCevlhSFv/3cEjEu8OT96P
oir2Pdzy4/oYTEPPeCa18OWtpTBPyc3FHx6e2hYpi6SuFlngP9CZ7T0nFpYk+zPX
1s/egY76BJJYAr7EYvOWzo4MGX+YCC+XshaDiGuN3ZCgyU4FnCavgX2FG06dzT/i
QxEhVDdfxoJGytOPoxeMxmrx3ZZLTt3StxgG4RP+8SZ0RZxTLzZDYLSGBQU6CUza
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379524114865066051712066781465379898164961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 04:53:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 04:53:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jerusalembiking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25725461157191833472188642341055952014798051985300225341624461688562928683094831667217966513546344293264604218203263695871626854360221377688031684183107653186216210484769629557096316082881635431703529343614020853253476948184420248234442567729661509647841701914627599496243744319862394639330445403446367529917740118922859990652118924151284338171366480301353091129604283665682022099047579344522308858505715386064952876296815517334002439819513330572617496549349757724180779398511742478439886795618351956758736680582607886729050240222204272541513097106717055069909450021746721591498232508985550903680249618932890549934679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5dd17cfc3f9f7453c32f4dd1aeffc7240861145
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerusalembiking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerusalembiking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerusalembiking.zuzu.tempurl.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerusalembiking.zuzu.tempurl.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b1d4c8072000004030047304502210087b0c72d762768402161d820ac43e9b08cfc30847b5b9b395e702a644b96337b02205d1b1d42cee00d53972c0545096ac8475588d16fa8a3050931815dbb58ef220700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b1d4c80aa000004030047304502205d5a576457aaa1da3932dfa7033e8a6a341f04e8018adf022390ad01cd6328cb022100a17a6b8555196aac9ab28b57ee244899440cec64e59e9cb4755a9e1150bf26b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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