*.renault.dk

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:fc:38:90:18:ab:6c:69:2d:1e:73:be:4b:01:51:aa was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.renault.dk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fc:38:90:18:ab:6c:69:2d:1e:73:be:4b:01:51:aa
Serial Number (int): 2638834035563777489507670793247609258
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b6:08:74:ea:80:6e:45:12:63:11:34:dd:b3:e2:e3:dd:ce:15:b3:d0
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 8e:14:70:bf:44:c8:e6:c7:ea:e7:85:9f:39:1b:7e:b9:5e:72:fa:d2
Fingerprint (sha256): b7:0b:2e:4a:21:8e:93:96:26:b4:34:db:dd:7a:a9:77:37:c7:85:b4:b7:7b:5c:b8:11:ee:7a:93:4a:9c:b1:e1

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.renault.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.renault.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.renault.dk
renault.dk

Other certificates including the domain name renault.dk

(limited to 100 certificates)
club.renault.dk
www.renault.dk
club.renault.dk
odc-ctrl.alpinecars.at
accessoires.renault.fr
tjanster.renault.se
*.wrd-aws.com
easyconnect.renault.ch
accessoires.renault.fr
club.renault.dk
easyconnect.renault.com
easyconnect-staging.renault.ch
club.renault.dk
*.wrd-aws.com
easyconnect-staging.renault.ch
privatleasing.renault.dk
test.protjenester.renault.dk
gdl.renault.fr
renault-connect.renault.fr
gdl-ctrl.renault.fr
r-link2.renault.com
clio-rs.renault.com
gigya-prod-eu1.renew.auto
conf.renault.fr
gdl-ctrl.renault.fr
gdl.renault.fr
booking.renault.dk
*.wrd-aws.com
*.wrd-aws.com
r-link2.renault.co.uk
*.renault.dk
odc-ctrl.alpinecars.at
test.protjenester.renault.dk
privatleasing.renault.dk
*.wrd-aws.com
*.wrd-aws.com
conf.renault.fr
clio-rs.renault.com
test.protjenester.renault.dk
gdl.renault.fr
*.wrd-aws.com
gdl.renault.fr
easyconnect.renault.ch
evrental.renault.dk
gdl-ctrl.renault.fr
test.protjenester.renault.dk
lcl.renault.fr
configurator.renault.fr
club.renault.dk
club.renault.dk
gdl.renault.fr
accessoires.renault.fr
club.renault.dk
*.wrd-aws.com
r-link2.renault.co.uk
conf.renault.fr
privatleasing.renault.dk
easyconnect-staging.renault.ch
renault-connect.renault.fr
test.protjenester.renault.dk
booking.renault.dk
easyconnect.renault.ch
odc-ctrl.alpinecars.at
tjanster.renault.se
www.renault.fr
*.wrd-aws.com
preferences.renault.dk
job.renault.dk
*.wrd-aws.com
kadjar.renault.com
test.protjenester.renault.dk
*.wrd-aws.com
*.wrd-aws.com
clio-rs.renault.com
lcl.renault.fr
preferences.renault.dk
club.renault.dk
*.renault.dk
www.renault.dk
r-link2.renault.co.uk
lcl.renault.fr
club.renault.dk
lcl-ctrl.renault.fr
lcl-ctrl.renault.fr
club.renault.dk
club.renault.dk
odc-ctrl.alpinecars.at
tilbud.renault.dk
accessoires.renault.fr
easyconnect-staging.renault.ch
odc.renault.fr
odc.renault.fr
r-link2.renault.co.uk
gigya-prod-eu1.renew.auto
privatleasing.renault.dk
www.renault.dk
odc.renault.fr
lcl-ctrl.renault.fr
test.protjenester.renault.dk
privatleasing.renault.dk

Certificate

The complete raw certificate details for *.renault.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVMApFN4Wgo0eP9IrAn
6Vb9+7so4IGDeKbkGrpiWM1HXfr/+nb/+jX/Ag1WkSuTc2wRpR56NcGZRttnK4qG
XFRCfifFjW/QdH/YIHV/JFPnFSKq0vEeakl9eoSTsj1txX7CHJgaPuLwGHx2Cvvr
uR5rnOsGStJoB+6y5O0JgZ1bLEN+f3r2LB885vJG6Oxrc+6w2czKf7QmjrIEMvZI
1lBW+L+p7VXiAXCFMvHgHTzM+DcZEGCV52rG0PP2XJWQLeCMLQJTXvgkiXvBxuEn
YWHgEnoqgEV36rh1QbgMInIrbRu7OAje9slkhUbfxQiq2FiL/1iF6+0gF+UMwPL7
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2638834035563777489507670793247609258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.renault.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19561659381410856041131857739065518375998278405169261202799761651009357429545613729079749488344252499768047529810044351519583511677090618430670898935685884126269192986772043372500280868881479942132384600429405215337733947212179724359172062008135051165446345269918330199825053324608045640516644804804962801278239243967319289276551256213670967154946535649810751717218680716585097326537207052176853858421970344104435200539457790947387581500209819714807124378037907185851920837165357737637070596057119049625406150109017002397672302322800819340168941519405797207944790093716066655206499635773078897000878405517908244626241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b60874ea806e4512631134ddb3e2e3ddce15b3d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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