eatingwell.com

Issued by R11

About this certificate

This digital certificate with serial number 04:df:9b:e8:28:4a:e9:9d:e2:a4:00:17:df:b9:6a:bb:fd:6d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eatingwell.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:df:9b:e8:28:4a:e9:9d:e2:a4:00:17:df:b9:6a:bb:fd:6d
Serial Number (int): 424539347319859675030182573351052500532589
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:51:5a:2b:84:bb:07:41:d9:2c:c4:d2:3a:d4:87:10:66:82:e9:3f
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): bf:80:2f:b7:9b:ae:1c:ef:17:ad:cc:f4:c2:76:97:2c:cc:28:f9:ad
Fingerprint (sha256): 05:01:16:ec:ff:b6:ac:87:73:8c:24:c4:a7:80:91:e9:1b:c2:13:1f:12:86:ab:88:e1:ce:69:e5:8d:c4:d7:52

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate eatingwell.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eatingwell.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eatingwell.com
eatingwell.com

Other certificates including the domain name eatingwell.com

(limited to 100 certificates)
sli.eatingwell.com
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
eatingwell.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
eatingwell.com
a-ue1.mydomaine.com
eatingwell.com
payments.meredith.com
promo.eatingwell.com
www.meredith.com
*.eatingwell.com
kale.eatingwell.com
specialoffers.meredith.com
test.aarp.eatingwell.com
ivm.eatingwell.com
promo.eatingwell.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
sli.dailypaws.com
lipitor.eatingwell.com
sli.dailypaws.com
secure.meredith.com
eatingwell.com
www.timeinclistrental.com
eatingwell.com
mywedding.com
secure.meredith.com
mywedding.com
www.meredith.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure.meredith.com
*.eatingwell.com
a-ue1.mydomaine.com
secure.eatingwell.com
promo.eatingwell.com
eatingwell.com
secure.meredith.com
frozenfresh.eatingwell.com
deliveries.eatingwell.com
test.payments.meredith.com
secure.meredith.com
promo.eatingwell.com
www.eatingwell.com
sli.dailypaws.com
a-ue1.mydomaine.com
sli.dailypaws.com
test.secure.meredith.com
links.allrecipes.com
eatingwell.com
sli.dailypaws.com
*.eatingwell.com
cr-iframe.magazine.store
secure.meredith.com
payments.meredith.com
eatingwell.com
*.secure.meredith.com
secure.meredith.com
www.meredith.com
eatingwell.com
frozenfresh.eatingwell.com
cr-iframe.magazine.store
api.meredith.com
payments.meredith.com
ivk.eatingwell.com
*.secure.meredith.com
secure.meredith.com
sli.eatingwell.com
my.meredith.com
test.payments.meredith.com
sli.dailypaws.com
*.eatingwell.com
my.woodmagazine.com
secure.meredith.com
sli.dailypaws.com
sli.dailypaws.com
kale.eatingwell.com
promo.eatingwell.com
www.meredith.com
frozenfresh.eatingwell.com
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
*.agriculture.com
sli.dailypaws.com
www.meredith.com
*.secure.meredith.com
kale.eatingwell.com
www.meredith.com
my.woodmagazine.com
sli.dailypaws.com
www.meredith.com
www.timeinclistrental.com
www.meredith.com
kale.eatingwell.com

Certificate

The complete raw certificate details for eatingwell.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISBN+b6ChK6Z3ipAAX37lqu/1tMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjI0MTExMzQzWhcNMjQwOTIyMTExMzQyWjAZMRcwFQYDVQQD
Ew5lYXRpbmd3ZWxsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANO5GGSFdEfvgxAjylx+SMyRiQgr0aZHeHpfA8mY8g5pVdwWwGnvNZnY3j+lYmcs
XwN4vU9DJWB3+/m64qU4JUIPLb3TAER+2HEPuM5ueg3OuUoOdo+k8hNFxHiQ17UE
xEhcRmxGDZVVzQsdvyG2ZmMSNS2xx7dqp3b5zBGAHFgIID4kcyT/eVVqGirDuZ4c
DguE6R08tMXXWmskaHCmrjKw8Qi5bc2XPqsv25YP/ILaiAPUZAWiBFbfI/9UUQ/t
BKkwxSASHj0DdHhkfEsHwmLSoeRoFHPgpjtag+OZ0qTmzBDB8xWO1csLxs6hlWqo
tPhZlQhn/9eWLsi07qFR62ECAwEAAaOCAiQwggIgMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUrVFaK4S7B0HZLMTSOtSHEGaC6T8wHwYDVR0jBBgwFoAUxc9GpOr0w8B6
bJXELbBeki8m47kwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRwOi8v
cjExLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjExLmkubGVuY3Iu
b3JnLzArBgNVHREEJDAighAqLmVhdGluZ3dlbGwuY29tgg5lYXRpbmd3ZWxsLmNv
bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABkEoqlsoAAAQDAEcw
RQIgG0RLCIzTooCR+AS8CmNCnoyEm9//6KyCSU5gLHF4jN4CIQCkAf1slpFMvswR
kLiX7kws6o5dLYK5kDFhQ9xXPadVHQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABkEoql84AAAQDAEcwRQIhAN32iVAyHeLFqDK14up1zJPD91n4
6AGDEpF+VQzBtQiHAiAtGMMY7SmLrdQGsf9nGS0a/1wYheFofX3oEHaQFXFlzjAN
BgkqhkiG9w0BAQsFAAOCAQEAFVX0hXI9tBUnhQ4pj67XCNOkuHZAH99exqMUI96d
bpIVlbn8x6mN9RF1InBzxCCt53HnjvSZKNs4v5Yw2FnVo101JFblAW345Y3Sd4iX
UNEAchb7bXlPZ/C66wq2CarEECt3z7A0FTFry6eNjPHCAgHmiWHILYIcc0lAZDus
Zopr6la+U/biqhvtbogP+2VusC51PFPYpFQKbHLSn9oXWW3dHbQhLFCSCn5Qcxn2
ZcyYjOuJGZ0AMCPgbGeSuPqbiPYUSkbcpi6cmocfvr9gIsUts5OsnOWpoZbfPto7
7sGcIEwGhjZF+hSXH2T6p9r5xblQ2wLSz1xxGJAbZbUcaQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07kYZIV0R++DECPKXH5I
zJGJCCvRpkd4el8DyZjyDmlV3BbAae81mdjeP6ViZyxfA3i9T0MlYHf7+bripTgl
Qg8tvdMARH7YcQ+4zm56Dc65Sg52j6TyE0XEeJDXtQTESFxGbEYNlVXNCx2/IbZm
YxI1LbHHt2qndvnMEYAcWAggPiRzJP95VWoaKsO5nhwOC4TpHTy0xddaayRocKau
MrDxCLltzZc+qy/blg/8gtqIA9RkBaIEVt8j/1RRD+0EqTDFIBIePQN0eGR8SwfC
YtKh5GgUc+CmO1qD45nSpObMEMHzFY7VywvGzqGVaqi0+FmVCGf/15YuyLTuoVHr
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424539347319859675030182573351052500532589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 11:13:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 11:13:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eatingwell.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26727556234120946055679177335782427410970604159566865309008356435527128009499616152177297473564114717458935926516828350499628926276417876981625498949818712901764803431819265980075886817867397985265032596921976633204721911195288543691771299898667323438995729318873487729750396943666806120423192189975181399551247503085003664388181580089577835004628614159937640478976709696289975851263530222960034899618511982453638863436681383691722221842510627908340343385169827559973018494061558472751588254441955659842598913359124085576127371488419797244551416383045107319496767972372981972210285028758134643845471888861724767546209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad515a2b84bb0741d92cc4d23ad487106682e93f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatingwell.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001904a2a96ca000004030047304502201b444b088cd3a28091f804bc0a63429e8c849bdfffe8ac82494e602c71788cde022100a401fd6c96914cbecc1190b897ee4c2cea8e5d2d82b990316143dc573da7551d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001904a2a97ce0000040300473045022100ddf68950321de2c5a832b5e2ea75cc93c3f759f8e8018312917e550cc1b5088702202d18c318ed298badd406b1ff67192d1aff5c1885e1687d7de8107690157165ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001555f485723db41527850e298faed708d3a4b876401fdf5ec6a31423de9d6e921595b9fcc7a98df51175227073c420ade771e78ef49928db38bf9630d859d5a35d352456e5016df8e58dd277889750d1007216fb6d794f67f0baeb0ab609aac4102b77cfb03415316bcba78d8cf1c20201e68961c82d821c734940643bac668a6bea56be53f6e2aa1bed6e880ffb656eb02e753c53d8a4540a6c72d29fda17596ddd1db4212c50920a7e507319f665cc988ceb89199d003023e06c6792b8fa9b88f6144a46dca62e9c9a871fbebf6022c52db393ac9ce5a9a196df3eda3beec19c204c06863645fa14971f64faa7daf9c5b950db02d2cf5c7118901b65b51c69