renewableads.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d6:96:6a:20:13:f4:0e:fc:4a:98:8c:db:80:21:fe:48:c2 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=renewableads.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d6:96:6a:20:13:f4:0e:fc:4a:98:8c:db:80:21:fe:48:c2
Serial Number (int): 421469505481574534703716723221087641290946
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:79:ac:f1:ea:f5:b4:87:dd:d7:d1:3c:02:07:e1:29:13:c7:e0:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:af:3f:0a:78:ed:e4:fa:c9:ca:00:8b:fe:9d:7a:36:0e:3c:60:9d
Fingerprint (sha256): 11:51:ec:68:44:e9:d5:02:f1:dd:2b:12:00:8e:c8:c6:7e:60:81:65:f5:93:cb:fa:8f:09:9b:73:fc:a6:8f:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate renewableads.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renewableads.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boltonfairtrade.org.uk
digitalstory.ca
landstander.org
leagueofamericanworkers.org
renewableads.com
stackermarket.click
thewhitevote.com
www.boltonfairtrade.org.uk
www.digitalstory.ca
www.landstander.org
www.leagueofamericanworkers.org
www.renewableads.com
www.stackermarket.click
www.thewhitevote.com
www.yarahshir.com
yarahshir.com

Other certificates including the domain name renewableads.com

(limited to 100 certificates)
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
renewableads.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sueing.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com
sni223088.cloudflaressl.com

Certificate

The complete raw certificate details for renewableads.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9OPKtt0kvIVl90VMO9bkQTjT3Ydn
D8vLkoVOjSLzk83UMmoX3lKtAamyWhEqQOFIdYSll3AC+LC6pRYL0nRV0g==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421469505481574534703716723221087641290946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 17:05:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 17:05:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renewableads.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f4e3cab6dd24bc8565f7454c3bd6e44138d3dd87670fcbcb92854e8d22f393cdd4326a17de52ad01a9b25a112a40e1487584a5977002f8b0baa5160bd27455d2
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e479acf1eaf5b487ddd7d13c0207e12913c7e0e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltonfairtrade.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landstander.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leagueofamericanworkers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewableads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stackermarket.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewhitevote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boltonfairtrade.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landstander.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leagueofamericanworkers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewableads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stackermarket.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewhitevote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yarahshir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarahshir.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f8ce11d9b0000040300483046022100a39dab9010bad496e78460ad6c5eaa6c4aff8d64c9552cd300679f6413653b9f022100fd183e81450768e00bb32a6cede969af44e183073c1a1acb76b7762a0c29060400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f8ce11d6f00000403004630440220614af3efa01bccb0e2beeab5369cd7e455995e5d505230a38b53753c2633bd7002203dea00340e4bd0308452a6d1b4ac34cafeb3b7f2054f8d0cf0cbbfd08de0f307
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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