ambientenews.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:34:bc:4f:58:9b:da:e9:af:f8:fe:ee:b5:89:a9:fd:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ambientenews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:34:bc:4f:58:9b:da:e9:af:f8:fe:ee:b5:89:a9:fd:56
Serial Number (int): 296115756838137355201766792602915424566614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:54:bc:2b:ca:67:8a:3d:69:16:3b:a0:c9:0e:eb:46:3a:ad:24:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:b4:d5:87:ac:df:58:8d:cc:b9:45:8a:9d:71:20:c0:50:17:3d:a2
Fingerprint (sha256): 4a:c6:1e:7a:31:1e:52:ec:ae:7c:82:ab:28:77:98:13:76:58:60:1d:7e:e4:3c:ab:61:11:ca:fc:1b:4c:9c:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ambientenews.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ambientenews.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ambientenews.com

Other certificates including the domain name ambientenews.com

(limited to 100 certificates)
www.ambientenews.com
ambientenews.com
ambientenews.com
ambientenews.com
www.ambientenews.com
www.ambientenews.com
fivestar.travel
ambientenews.com
www.ambientenews.com
ambientenews.com
ambientenews.com
www.ambientenews.com
ambientenews.com
ambientenews.com
www.ambientenews.com
www.ambientenews.com

Certificate

The complete raw certificate details for ambientenews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISA2Y0vE9Ym9rpr/j+7rWJqf1WMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjgxMzIzNTRaFw0x
OTExMjYxMzIzNTRaMBsxGTAXBgNVBAMTEGFtYmllbnRlbmV3cy5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDqTzaGa2HE2ipxsyCnUQfAaOeu2QFT
m5flkL6X4EPgF8kq1G8PkM8ASNfhcyA36zQUP8H4K8ZTPPJz8FOMSS8OFzYQX5sk
yZnn2OE2J/o07+zi/IIVUS2p3bV3PFiX+5gG+vrt1H8T73q0JRHoMrIkWmjpV0jC
b4K6Qhuapr/xt1IDpNd0F9X/WqTmjB2xk02lhOz02MJ632NLt62fbFdbrXQgu0gf
nfjSewOnM6DDq9lxERQ9lHM6XNewN6igj5mviQh8uoOKRc7Uy3sOHvBrkmFHdKSC
N5nRWmTGLpFgeegnYfu8/TeTlaQ2fA2CEqLz5IiB4UsbdEWz8nEnl2nSW9hvJiLj
qqpCwKM0iE6jslpnD9ySzBkCCWZAhJ2VXH5J/HzJEeHgMoHuNkAaz3pa654SQhpW
fJep3jwJ8IO9xpBV+pqgRkwpd0J4wInDH2dNzLZcxftgyb/azkgX7taJgSW8qvoq
Rspg7SapiUjnnheaq5ISIwGjFRXTeVhX+YUpxyex4EDEXEjtvsqL7klAQrJ9IF4n
etyEx4FMfghT5OG3q3W1TgmhJ96LL7jWvphNlw1Kcm6mA33DEU7zbR9hwXl9W4bU
HVFprl6PuH6BMRpA5r/vFURh3a8sdiGU2xCdr66XLxrhTR3xZpN3t20GLax1gZAM
f0VJY2U+drEFdQIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTA
VLwrymeKPWkWO6DJDutGOq0k7DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGFtYmllbnRlbmV3cy5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC
BIH3BIH0APIAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWzY
nI7pAAAEAwBIMEYCIQDNqeF2JJJWWY5YbUJQewFnrEzJ3/lNHZWgHLoc2emp2wIh
AMv6oJKkMEmvEdrewcx0jE5x2Nrxt3ZT0lHtwPTGQKM9AHcAY/Lbzeg7zCzPC3KE
J1drM6SNYXePvXWmOLHHaFRL2I0AAAFs2JyO1QAABAMASDBGAiEAoekxITAMj/Rf
w7sfcli3bHn+ogSnbW0oP+r3qLMrK7MCIQCBPPr3/YhLIZuSJGwtEREwfEc6McLk
OXe8PO2489m9fTANBgkqhkiG9w0BAQsFAAOCAQEAP05syE6RR5XVZlSrGOoM8vL1
L7SUWkMTPFhxkmGFNzx7RRskaslz9UZZ8qxIj82Xyl4v5nu82v6CAz6FqY7nvsAj
nZckKANft5d/4frOfetc83FLfcdPJ0J3MC85FwlWOCfIWyNU18UMb5y8f/4E7gGc
JxHPxx+jNtAYLq6N5ozFG0q9byoVebcVvkfsR6YO3HN5Yx5EJBar/IA4YBHnvcua
G4LOcnRTG9Wee3YhvDJ4ewO8HYdnYYs8CnzvH8aK/v/7aDHumLAts9CpMITVkqVi
AFggFDrUlI7kHfUnkaObQ6IpgMkjLsxs80XKd/Py0WVB+DDnpmHOPIeYlbPGhQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6k82hmthxNoqcbMgp1EH
wGjnrtkBU5uX5ZC+l+BD4BfJKtRvD5DPAEjX4XMgN+s0FD/B+CvGUzzyc/BTjEkv
Dhc2EF+bJMmZ59jhNif6NO/s4vyCFVEtqd21dzxYl/uYBvr67dR/E+96tCUR6DKy
JFpo6VdIwm+CukIbmqa/8bdSA6TXdBfV/1qk5owdsZNNpYTs9NjCet9jS7etn2xX
W610ILtIH5340nsDpzOgw6vZcREUPZRzOlzXsDeooI+Zr4kIfLqDikXO1Mt7Dh7w
a5JhR3SkgjeZ0Vpkxi6RYHnoJ2H7vP03k5WkNnwNghKi8+SIgeFLG3RFs/JxJ5dp
0lvYbyYi46qqQsCjNIhOo7JaZw/ckswZAglmQISdlVx+Sfx8yRHh4DKB7jZAGs96
WuueEkIaVnyXqd48CfCDvcaQVfqaoEZMKXdCeMCJwx9nTcy2XMX7YMm/2s5IF+7W
iYElvKr6KkbKYO0mqYlI554XmquSEiMBoxUV03lYV/mFKccnseBAxFxI7b7Ki+5J
QEKyfSBeJ3rchMeBTH4IU+Tht6t1tU4JoSfeiy+41r6YTZcNSnJupgN9wxFO820f
YcF5fVuG1B1Raa5ej7h+gTEaQOa/7xVEYd2vLHYhlNsQna+uly8a4U0d8WaTd7dt
Bi2sdYGQDH9FSWNlPnaxBXUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296115756838137355201766792602915424566614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 13:23:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 13:23:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ambientenews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 955899058787659631897203500698539318935717099551927514295371228858291912366323783994410537428255456632977314632180805757598236419712244173698304707495974148926777229292781915184551296577300908754139463296009417295779797154324954743659778241042643602896634760152621829407891057545319925726135242003860587469870420135645332511610095433179134135099765647063734693571432395830987932866348266185247891737525949165768951940641649652952425550249103921443949491450685317043354249178521470835881514032662553954562741563236527808869565735978369638249608402782586287249362644919015331349128991554351427633773752234853028758661044063144263589516099825430834219249269636536490548864688994296077006306928479886364955333570754362272470641872173321420752949478361860987058892198547780098321477775872965905923315355858472699449149800967827317358599944716105808050105622080401417153761378199035280976160306831170449534603034194370614048457546682877378777571603018033008437181782574496801110247609594962533444415840368526600450550224720246518339359447292704503299800584315233079039140579090342246428525389677251152789746795015470937323218134011171967477740800462786512884811522955718292579856486550570499432163864491810126407661316577013441591185048949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c054bc2bca678a3d69163ba0c90eeb463aad24ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambientenews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cd89c8ee90000040300483046022100cda9e176249256598e586d42507b0167ac4cc9dff94d1d95a01cba1cd9e9a9db022100cbfaa092a43049af11dadec1cc748c4e71d8daf1b77653d251edc0f4c640a33d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd89c8ed50000040300483046022100a1e93121300c8ff45fc3bb1f7258b76c79fea204a76d6d283feaf7a8b32b2bb3022100813cfaf7fd884b219b92246c2d1111307c473a31c2e43977bc3cedb8f3d9bd7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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