exchanged.media
Issued by R3
About this certificate
This digital certificate with serial number 04:31:c8:ce:36:fb:de:69:ea:8b:00:50:5a:cd:fe:ac:75:50 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=exchanged.media
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:31:c8:ce:36:fb:de:69:ea:8b:00:50:5a:cd:fe:ac:75:50Serial Number (int): 365389896033682033750533019274620057711952
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 31:5a:a9:3b:d6:19:37:1f:39:f2:3c:d7:6b:e2:97:7a:b9:06:5c:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1f:d5:51:b7:32:cc:da:98:68:6d:a7:89:5c:07:2b:5c:bc:78:6c:a6
Fingerprint (sha256): f4:2d:5a:f9:9d:39:3b:aa:bb:4d:ab:23:87:9a:e9:df:05:b1:57:23:d0:b4:12:03:8e:c5:45:7c:18:3e:9d:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate exchanged.media
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for exchanged.media
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
circlesoftrust.com
czechvip.com
dentalcover.in
discover-ecuador.com
exchanged.media
ipv4auctions.co
life4vip.com
macforwv.com
natyur.com
ofa.realbrilliance.net
ooolocaladv.com
personaltire.com
pestwrap.com
poloforvip.com
pureindulgence.org
rubbishmasters.com
swordssmith.com
tww.co.in
yankeelake.com
czechvip.com
dentalcover.in
discover-ecuador.com
exchanged.media
ipv4auctions.co
life4vip.com
macforwv.com
natyur.com
ofa.realbrilliance.net
ooolocaladv.com
personaltire.com
pestwrap.com
poloforvip.com
pureindulgence.org
rubbishmasters.com
swordssmith.com
tww.co.in
yankeelake.com
Other certificates including the domain name exchanged.media
(limited to 100 certificates)
Certificate
The complete raw certificate details for exchanged.media in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgISBDHIzjb73mnqiwBQWs3+rHVQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTgyMDA1NTNaFw0yNDA1MTgyMDA1NTJaMBoxGDAWBgNVBAMT D2V4Y2hhbmdlZC5tZWRpYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMsOiTygz/nOWaDk0LN0XoyuwEPeRzvl+L5VRE0D5kSiroqnCF19uaIHRZ/IoyvA TFFowRbeL0jPKnBJa/OhGofJwXvDqQAFIPR/ueHBqDuoE/rLn16iyHEzsKiAc4b2 8nmJ7RaANqAN+noAx2+Nb1MQBSM5eAm78I8Q1OFNmGzedpH2Zmq3C0Ysd7cNLgm6 A4Xgvjp+EI9t5ueAE3FeJgfvcNhLVlEd7WWWsHrxEpaGPfLLgVBRscRgp7lx4PC7 RoIdYdRptUHVffrAxqSVVSjgrV2mh/R1a+g3ozgY5nkP3J810i1pYIXtxmDskxCl KFo4PeMIbExrwzRXWnAqMEkCAwEAAaOCA0UwggNBMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUMVqpO9YZNx858jzXa+KXerkGXJkwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggFMBgNVHREEggFDMIIBP4ISY2lyY2xlc29mdHJ1c3QuY29tggxjemVjaHZp cC5jb22CDmRlbnRhbGNvdmVyLmlughRkaXNjb3Zlci1lY3VhZG9yLmNvbYIPZXhj aGFuZ2VkLm1lZGlhgg9pcHY0YXVjdGlvbnMuY2+CDGxpZmU0dmlwLmNvbYIMbWFj Zm9yd3YuY29tggpuYXR5dXIuY29tghZvZmEucmVhbGJyaWxsaWFuY2UubmV0gg9v b29sb2NhbGFkdi5jb22CEHBlcnNvbmFsdGlyZS5jb22CDHBlc3R3cmFwLmNvbYIO cG9sb2ZvcnZpcC5jb22CEnB1cmVpbmR1bGdlbmNlLm9yZ4IScnViYmlzaG1hc3Rl cnMuY29tgg9zd29yZHNzbWl0aC5jb22CCXR3dy5jby5pboIOeWFua2VlbGFrZS5j b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY2+CioJAAAEAwBI MEYCIQDW5E7ZZXFrE51aJMfd2wGCNgaRbFO8zJhRIPoPotY20AIhAKs7LDmIRTUB B/7VgZr5RhTHJmyEKXo/2MrBAaOWnrUyAHUASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGNvgoqTwAABAMARjBEAiAvsm2zqD1wJqtdf3Ivx0h8xPAH 1JcFRLtIJWLmQjOWAQIgMHImJdO5MCunuP7vNV0IT4jJYrOfL0A9yrfA0TeUqDMw DQYJKoZIhvcNAQELBQADggEBADnlBVhZJqSpSc8BFreCIBoz9k3adilIdu48po99 r/PwSb2oehGYWfpl4wnS7RpDdgENjSQGXMi84f7ii6yPFwZQmoaHH47AGGJxul6p UkZm55C7oe0lEQKnykTnQ4IcjqMRZxw4KkbWoZgEFaNahUyL5tEi/w1E3aLu9Fty Df2X3MEi2tgE/BOIEY3FofoqPlti04vMRn+A6KcTwEechoNOoHQQICe4oWzt9ZhV bb3X6lUsZzVtJONWbu4mW5dNu0tpD/Y3LsrN+pRs0Z0q8UMynkNGVcuq3bDpLJQ6 LIlGTFdSvYjBVf5v8MPFhi70IdH4CuqoG8xl9Su1ahVlvlU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw6JPKDP+c5ZoOTQs3Re jK7AQ95HO+X4vlVETQPmRKKuiqcIXX25ogdFn8ijK8BMUWjBFt4vSM8qcElr86Ea h8nBe8OpAAUg9H+54cGoO6gT+sufXqLIcTOwqIBzhvbyeYntFoA2oA36egDHb41v UxAFIzl4CbvwjxDU4U2YbN52kfZmarcLRix3tw0uCboDheC+On4Qj23m54ATcV4m B+9w2EtWUR3tZZawevESloY98suBUFGxxGCnuXHg8LtGgh1h1Gm1QdV9+sDGpJVV KOCtXaaH9HVr6DejOBjmeQ/cnzXSLWlghe3GYOyTEKUoWjg94whsTGvDNFdacCow SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 365389896033682033750533019274620057711952 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 20:05:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 20:05:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchanged.media' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25633543916985103387706268208445722886489972337165859261456317213781112749393203730044690456464794959787068714669656952446292902174577101323235695297293137759984564146026291282274097680262119852580279762931198801622819449462591376086983905638121990703986588969392311956487100314139111168246929920779497163017809774258732809652815074491507839841124819553931131721193172355258825652764508670312081463367068201871320881543363883074667326098751915287991764726555050512420650387597208381534015997640456065373582925530676501578556827438770114506494615588832262802204293167695333085300619545881488914156392960447643959046217 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 315aa93bd619371f39f23cd76be2977ab9065c99 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (323 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesoftrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalcover.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover-ecuador.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchanged.media' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv4auctions.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macforwv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natyur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofa.realbrilliance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ooolocaladv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personaltire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestwrap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poloforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureindulgence.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishmasters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swordssmith.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tww.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yankeelake.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dbe0a2a090000040300483046022100d6e44ed965716b139d5a24c7dddb01823606916c53bccc985120fa0fa2d636d0022100ab3b2c398845350107fed5819af94614c7266c84297a3fd8cac101a3969eb53200750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbe0a2a4f000004030046304402202fb26db3a83d7026ab5d7f722fc7487cc4f007d4970544bb482562e642339601022030722625d3b9302ba7b8feef355d084f88c962b39f2f403dcab7c0d13794a833 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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