exchanged.media

Issued by R3

About this certificate

This digital certificate with serial number 04:4e:ae:72:a8:9d:56:3a:6c:b7:8a:ce:5c:fa:a4:71:46:88 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=exchanged.media

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:4e:ae:72:a8:9d:56:3a:6c:b7:8a:ce:5c:fa:a4:71:46:88
Serial Number (int): 375223049359892956339037374194070498395784
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:c2:a8:87:69:c6:25:de:65:ec:25:90:7c:9c:0f:1f:29:12:66:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:ab:70:d8:0f:ad:fc:de:57:9a:d7:ce:c2:7e:a4:70:ee:b0:39:b0
Fingerprint (sha256): 7f:ce:96:04:17:c3:32:13:b4:38:82:8a:d4:21:c1:56:d9:06:d6:1d:72:80:20:73:21:e0:17:0b:61:8c:93:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate exchanged.media

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchanged.media

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alternativedigitalinvestments.com
arbitrageurs.at
banneradmgr.com
caminorealdetejas.org
denverchillerparts.com
exchanged.media
honest.co.in
jax.bet
lgbtsaopaulo.com
newsabouthemp.com
pharmacyresearch.com
realcounty.com
torrancecounty.com
unifiedsearch.com
weightsforsale.com
www.mostamazingbook.org

Other certificates including the domain name exchanged.media

(limited to 100 certificates)

Certificate

The complete raw certificate details for exchanged.media in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb9bleoZBC3sJ5ltUzk9
ghl+FUdBVtGOhhWNlMTOgDaIqooNaFfzuR7/h6QwdiziNAkBDZNrEAS29HCzneEn
9xjzYfJqmKjWElAubDLDAcT1mtsZJge4hP990l+G0ETj/NNST+17sUow1IlVj0sr
8SeisnVYsRdDap8JErUYPx+f0hJH1YWvpuoUIaWOm6Gohg5fA99hqJQtf0bgTnQg
VQooXq/20hWOqr4ZxsRPt3YJBcHAzuvcWJo8MsR02uiyg/fgY3RPM4zsUTOD6Hsy
QaMmCPHw7sDKvcXn8UzmnRvTP2JdJjJ7TwT2nGokn5JhKdLcXGkWunTHJbuHgA6b
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375223049359892956339037374194070498395784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:27:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:27:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchanged.media'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25468261324711901753890341415536149517082977884753750120126940963394632380025143105954482691290850276291653375855937586827655560356389430926347998064569592397481601172714364168332618086064188244212607735806169731964845094777496550675691653754860706123928021692893065909854487739369450589423413087299328418771352398831880277264490087265031864178688484623140980107897599218447383425570799295670618883229325369162448235629222468190704271518878886990151873759133851814742102545268746176998717633138273414266407468720787634086361718881069553650456349916315549626116567140230031941029999018736090786042707269371328545594359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2c2a88769c625de65ec25907c9c0f1f291266df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (319 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativedigitalinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banneradmgr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminorealdetejas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverchillerparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchanged.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honest.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jax.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtsaopaulo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsabouthemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacyresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrancecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifiedsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weightsforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostamazingbook.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1cf2df1d000004030047304502204f90b5da62c8d70703f2dcff2fe7681599ee07e66c1830d9c60f577c15bbbc7f0221009e08e18fe4111ed75ee2fe63ea951bbf79a514d53827dd10848c90c383ae21de0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f1cf2df5c0000040300463044022051dcaaf3d7d5dc0c2f5a02c1245c707afb39506531ab88773692dd46a91eca4602205f88eeadd45f70b29a2b6e831f4cebfb793fb224fcfc3fb8de3eaa3c1100c256
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000cb9e3a5d65796a7051365d914f362a2037042eb3a487498ee9727bb2267a91bb4d6db84d2fe5639d288ee5c5958b4df450020a7e3dfee5ffa2e06afcc35d0145c03640e71b36ca0688d3d29378d85541d03318937e08bba7fed0c06551a0d9b6ca4799f3fb99dd7b6793a04f5ec40c0d5612c2f20f629b6c674e8d322c3eb6cfec55e6395bf7774b35124a8471763485160323d850e5bc56fee0998d16359be3d9a0185f3b258e5096b66827b4c415980ce3e94a9ed97905463f4007de5b8695b24bde26e3204be6566069abff9668eb41f8561298c33a071906de96c0c6567b517a49e13182fdb5754a50bcf28f30fc288614a8fef5acf3e4eb7feafe9c3b8