shop.renault.co.uk

- Renault UK Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:83:d1:40:89:5f:ac:0f:b2:0d:44:31:92:b4:76:68 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Renault UK Ltd

Organization: Renault UK Ltd
State / Province: Hertfordshire
Locality: Rickmansworth
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:83:d1:40:89:5f:ac:0f:b2:0d:44:31:92:b4:76:68
Serial Number (int): 7330575004117312730846606047527073384
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5a:ce:65:55:34:6f:b5:44:ad:09:8e:5b:15:bf:e4:df:56:af:88:f1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e2:b2:07:e5:4e:0b:db:a0:41:1b:8e:ea:63:72:fd:38:50:46:b7:d2
Fingerprint (sha256): 1c:a1:b7:89:be:7f:5e:82:f4:8d:93:ab:4e:97:fc:ac:3a:0c:19:37:e1:9b:b3:2f:17:81:f1:b3:e7:7d:3c:e0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate shop.renault.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.renault.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.renault.co.uk

Other certificates including the domain name renault.co.uk

(limited to 100 certificates)
admin.renault.co.uk
admin.renault.co.uk
shop.renault.co.uk
san-15-s51.tlsprovisioning.exacttarget.com
pmaf.renault.co.uk
kadjar.renault.fr
RENAULT s.a.s
*.wrd-aws.com
multi-sense.renault.ch
odc-ctrl.alpinecars.at
fileupload.renault.co.uk
shop.renault.co.uk
RENAULT s.a.s
shop.renault.co.uk
easyconnect.renault.ch
easyconnect.renault.com
press.renault.co.uk
easyconnect-staging.renault.ch
RENAULT s.a.s
admin.renault.co.uk
*.usedcars.renault.co.uk
easyconnect-staging.renault.ch
*.wrd-aws.com
gdl.renault.fr
renault-connect.renault.fr
gdl-ctrl.renault.fr
r-link2.renault.com
clio-rs.renault.com
shop.renault.co.uk
gigya-prod-eu1.renew.auto
conf.renault.fr
gdl-ctrl.renault.fr
gdl.renault.fr
admin.renault.co.uk
services.renault.co.uk
r-link2.renault.co.uk
odc-ctrl.alpinecars.at
odc.renault.fr
*.wrd-aws.com
www.renault.fr
conf.renault.fr
admin.renault.co.uk
shop.renault.co.uk
gdl.renault.fr
*.renault.co.uk
gdl.renault.fr
easyconnect.renault.ch
r.renault.co.uk
admin.renault.co.uk
gdl-ctrl.renault.fr
stats.renault.co.uk
lcl.renault.fr
*.wrd-aws.com
*.usedcars.renault.co.uk
configurator.renault.fr
multi-sense.renault.ch
multi-sense.renault.ch
welcome.renault.co.uk
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
admin.renault.co.uk
gdl.renault.fr
at.cbre.eu
r-link2.renault.co.uk
*.usedcars.renault.co.uk
conf.renault.fr
easyconnect-staging.renault.ch
renault-connect.renault.fr
*.renault.co.uk
admin.renault.co.uk
*.usedcars.renault.co.uk
kadjar.renault.fr
press.renault.co.uk
easyconnect.renault.ch
RENAULT s.a.s
odc-ctrl.alpinecars.at
services.renault.co.uk
www.renault.co.in
shop.renault.co.uk
*.renault.co.uk
*.renault.co.uk
*.renault.co.uk
www.renault.fr
*.renault.co.uk
lcl.renault.fr
r.renault.co.uk
r-link2.renault.co.uk
admin.renault.co.uk
www.renault.fr
lcl.renault.fr
r.renault.co.uk
welcome.renault.co.uk
lcl-ctrl.renault.fr
lcl-ctrl.renault.fr
odc-ctrl.alpinecars.at
press.renault.co.uk
easyconnect-staging.renault.ch
odc.renault.fr
www.renault.co.uk

Certificate

The complete raw certificate details for shop.renault.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurafxe9w/sT1xS0Kp9qc
a83s+KBW7wuVVHm4NHbqvXAK4bbsCTEsnppWU7gZvGa3v4i951failA+uHA2KXfx
9IL/INdVSBmZDwjDE+pTu1tFHVoVjNs6e1HvBVmdMQB44+tMRIfebvKFaY8AdL7o
AO36Ap17/Hb+IqnvMY/0F+H/jXxepTs38+yu8wIJA7o2JqMHkfOJWEEiSqG/4Oje
3YDG7NAmNrNoHBNMzRWlF9z4H1yWLhYJzURb/YD02tULOLrELQkZoH8+7L3E3ziu
swuMlq1Qy5lewqaNt/gBfvRFV2LNTsejJ/WyErHh4FjbBWQKsQyc1CBArXk6eZmt
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7330575004117312730846606047527073384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hertfordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rickmansworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Renault UK Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.renault.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23570380030709170607742408150252383950604374361684364036734785521968346798415279419191749595628026590633175070286752591614316195551279125986725617154629947379034537448409740740797092417311811225715862585290817465274754871196910711736300283891843492339215074429033140492630116966502622807150737785091656857627742828787886100106896759002520366950572433099664363599324223336225723902397009133795694663245785960980663084792088601725022069751393372792770591916994387713399428225318569908474665539045440301518034011068967278061753679112659593639796925076180509402722795980043322453280472098805390816370009763291709216238959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ace6555346fb544ad098e5b15bfe4df56af88f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.renault.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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