www.gener8ads.com

- Gener8 Ads Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:54:9e:e1:92:60:e2:06:01:6e:5c:a5:e8:5f:ee:5d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gener8 Ads Ltd

Organization: Gener8 Ads Ltd
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:54:9e:e1:92:60:e2:06:01:6e:5c:a5:e8:5f:ee:5d
Serial Number (int): 13731655386321962601445673633329442397
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:37:ea:f7:13:04:f6:91:de:cb:23:fa:8a:d0:a3:b5:24:fc:09:c1
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 16:f7:dc:73:65:3b:07:ab:aa:76:59:30:da:02:5e:99:c0:05:12:1d
Fingerprint (sha256): 3b:43:0c:e8:ee:74:7c:a3:c8:81:64:dd:6a:97:d2:28:d9:02:ca:be:fd:e2:de:67:78:b9:f6:d4:c1:d7:97:0a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.gener8ads.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gener8ads.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gener8ads.com
gener8ads.com

Other certificates including the domain name gener8ads.com

(limited to 100 certificates)
loperserafael.com.br
apps.jomrenovate.com.my
email-assets.gener8ads.com
join.gener8ads.com
jpeggedclub.com
prometheus.gener8ads.com
www.weconvert.app
links.jialonso.com
*.gener8ads.com
mijn.busjehuren.nl
www.hypeful.dev
www.illude.co
alertmanager.gener8ads.com
www.arra-associates.com
email-assets.gener8ads.com
app.assemblrworld.com
www.gamasoft.co.uk
*.apollo.gener8ads.com
www.seestadt.city
goodboi.perpetua.io
*.gener8ads.com
app.waseda-onodalab.jp
baobao.dating
sni.cloudflaressl.com
swabireferrals.com
prometheus.gener8ads.com
www.davecollison.dev
consigsys.com
link.rapo.app
www.linfieldfarm.net
*.gener8ads.com
karlduncanphotography.com
mdsjc.conecta4edu.com
itbgh.com
authcode.app
echo.gener8ads.com
www.gener8ads.com
www.cutleafstudios.com
sni.cloudflaressl.com
*.gener8ads.com
grafana.gener8ads.com
mediacom-navigator.com
*.apollo.gener8ads.com
*.gener8ads.com
arbot2.cryptovation.co
*.gener8ads.com
jefftressler.com
alertmanager.gener8ads.com
*.gener8ads.com
prometheus.gener8ads.com
links.baff.io
tipcoin.think-bit.org
tabs.gener8ads.com
zecocostudio.com
*.gener8ads.com
dev.feedback-collector.com
hitalama.com
shenanigifs.com
www.davecollison.dev
*.apollo.gener8ads.com
mapandtime.com
www.tmakerala.com
web-ui.gener8ads.com
www.mifon.mx
stage.talent-alpha.com
homeindia.buzz
apollo.gener8ads.com
sni.cloudflaressl.com
join.gener8ads.com
www.gener8ads.com
vegan-beacon.com
www.sirimanna.me
*.gener8ads.com
apollo.gener8ads.com
app.bizcre.cloud
apollo.gener8ads.com
www.gener8ads.com
stage.kite.ap-com.app
*.apollo.gener8ads.com
enishi-tech.com
disforduck.com
*.apollo.gener8ads.com
sni.cloudflaressl.com
prometheus.gener8ads.com
www.gener8ads.com
apollo.gener8ads.com
*.apollo.gener8ads.com
pioneer.gener8ads.com
*.gener8ads.com
alertmanager.gener8ads.com
maildo.app
arbot2.cryptovation.co
*.gener8ads.com
pioneer.gener8ads.com
*.gener8ads.com
pyloncity.com
englishhub.live
join.gener8ads.com
dev.api.kohepets.com.sg
sni.cloudflaressl.com

Certificate

The complete raw certificate details for www.gener8ads.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZGLwrrhwOfIHjcUo55+
L3r/CUMsz8CWlGnL6soLdwYOuEBhBLLtDPVmaY/vJi2EMasUmJuL7YzFc4kXN9vX
RBnI0TkipIvFjj4YHrY1v5oiLFhYgphrttDcmY9ecGmMrJycSUt4UcBPPxHZXitA
NWs46IcdjXh/acFYBLO7NJCvSRKKGSmPYZ39OxzforLokagkCNgaPnWWwNQ0I82A
jlgUdb6KyT3ITx1yc99LeWkt25OTKYg/82Y6tEJ9DLerkIzkTEo2KntfKMhsiYm/
kOLCGzlMpiorekR6XUVHIc/6UldZZSqQQcGErb3ZoD6GwV/vJ818QYyQHKfZ2OU3
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13731655386321962601445673633329442397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gener8 Ads Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gener8ads.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18376325598094794172367304404787521765795652039893961943833588051665738349723422984807184374622892923397545353262364306662990624195236352017453010070067477788827629937559230893104515907256223605077240066069458047080986725635025484013167745572716701957385854369053832328276596798536226414558212838097409670420924601257921071554193948019628674160256422723665297351062364509811376144070881186409644365128828406980958132360501355425978868489548484425701522689302101310138262732522277214782517201977868121066666892778576047001237757867116251648306095466338528717553363343695607929746281736309254701321581567281838097250219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e937eaf71304f691decb23fa8ad0a3b524fc09c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gener8ads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gener8ads.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006fd7a1ef54fa106ba80ba02ed825a910e4693583ad2ba727b0a337484701eb1b6c14ff9b585af7039992da46fa505b93c93b0077896ce76d2149f1e49b28d0cb0842632f6d6451b3938f17ed16566cbf2150bc1d0e781bcdf44f76c6d131a60e111d686433c39d5facaffa3bbc1e05fca5a1e06e08ae6d232fa1985b66cad0e6d2a8c976e8886f921ef9beb2989ff609d57b4e94c4797e99154c9a7e5f012326ace6aa20f68b336941bc08e7ec9a042de00d3786c18d6e08d1daa517bf4b15522a23da53788fe2ef951ca68529a522e094f9ded0cca9677f7468af6ae47925c2168c022bfef2c1ec0590fc6312e9344a4c68533c3f17f86dd6f996947af275a4