www.wedothesearch.com
Issued by R3
About this certificate
This digital certificate with serial number 04:ba:77:d5:2c:69:1f:3f:88:0f:2e:e9:83:f7:06:eb:ac:cc was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.wedothesearch.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:ba:77:d5:2c:69:1f:3f:88:0f:2e:e9:83:f7:06:eb:ac:ccSerial Number (int): 411900948965819464162667979757570373692620
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ea:6c:30:b5:2f:8f:8f:74:d8:00:39:ab:1f:69:48:ee:7a:4a:64:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fe:9e:b0:31:45:de:65:7f:7a:b3:de:67:7d:16:c7:87:89:9e:9d:34
Fingerprint (sha256): 05:e9:6f:37:cf:59:a3:27:97:01:2a:26:fd:77:c0:31:78:0c:92:ca:e5:98:c9:48:85:22:06:d0:0e:43:c5:fc
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.wedothesearch.com
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.wedothesearch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
comfort-store.com
dentistbismarck.com
handymanforaweek.com
maincasting.com
onlyimproving.com
theparaclete.org
wedothesearch.com
www.comfort-store.com
www.dentistbismarck.com
www.handymanforaweek.com
www.maincasting.com
www.onlyimproving.com
www.theparaclete.org
www.wedothesearch.com
www.xn--9dbekd9d.com
xn--9dbekd9d.com
dentistbismarck.com
handymanforaweek.com
maincasting.com
onlyimproving.com
theparaclete.org
wedothesearch.com
www.comfort-store.com
www.dentistbismarck.com
www.handymanforaweek.com
www.maincasting.com
www.onlyimproving.com
www.theparaclete.org
www.wedothesearch.com
www.xn--9dbekd9d.com
xn--9dbekd9d.com
Other certificates including the domain name wedothesearch.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.wedothesearch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgISBLp31SxpHz+IDy7pg/cG66zMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTYyMDUxNThaFw0yNDA4MTQyMDUxNTdaMCAxHjAcBgNVBAMT FXd3dy53ZWRvdGhlc2VhcmNoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANyqJyyOnGosnnPvS2fn3G9cAJO8N2ddKMc7TF8GGeIfEfaCtun9zCyA MM0s71qCV43aMjFWLHKgsZnNoc8FEw4Tu3GseTwbcSFylipL4pdVEiLLLpR/V7Ip nBxsIGlFxzN482rBF4oZtbqUbzNT2fPwP6idxpr9Nq8rlg6z5l01vZjIu3+C10CO c3lsVMeLiATgGjqxTHcO/zBzTV1qvA66iDfTodeK0VoEt435bYBoHYyEgpFnQtJ0 DREza7bDVuMz3/HTOWNSczPnEc9kH50zk2iyP3tG3AfJywPmcnMpXRAmQv6A6xgU 58SFvapZazPe4s0PXZrVasoT4BlAKN0CAwEAAaOCA1gwggNUMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQU6mwwtS+Pj3TYADmrH2lI7npKZKowHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggFfBgNVHREEggFWMIIBUoIRY29tZm9ydC1zdG9yZS5jb22CE2Rl bnRpc3RiaXNtYXJjay5jb22CFGhhbmR5bWFuZm9yYXdlZWsuY29tgg9tYWluY2Fz dGluZy5jb22CEW9ubHlpbXByb3ZpbmcuY29tghB0aGVwYXJhY2xldGUub3JnghF3 ZWRvdGhlc2VhcmNoLmNvbYIVd3d3LmNvbWZvcnQtc3RvcmUuY29tghd3d3cuZGVu dGlzdGJpc21hcmNrLmNvbYIYd3d3LmhhbmR5bWFuZm9yYXdlZWsuY29tghN3d3cu bWFpbmNhc3RpbmcuY29tghV3d3cub25seWltcHJvdmluZy5jb22CFHd3dy50aGVw YXJhY2xldGUub3JnghV3d3cud2Vkb3RoZXNlYXJjaC5jb22CFHd3dy54bi0tOWRi ZWtkOWQuY29tghB4bi0tOWRiZWtkOWQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdLT9ciR1iUHWUchL4NEu2QN38f hWrrwb8ohez4ZG4AAAGPg2P5CAAABAMARzBFAiBeLH7A8dZa6boopJnzkog3DSIV GsvAlf7nsIzB8LgbrgIhAM4QQIiNBjkzjJB1CvHPqEFh9+W6VGujqnwWUhg8wQrY AHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGPg2P5NgAABAMA RzBFAiBdaaEXcqspg6enmsrgPSjNsvCdC7abxkzP/yLd5lomXQIhANkClHG73djy AdimqzKWdhTHsQF0jhl+SAeyJmW1fsXmMA0GCSqGSIb3DQEBCwUAA4IBAQAH1Tpr A/xj9ARiWiqRDHsDnBJnC5YNvNzPVA+gEboeiLIQJcsxotjAk1cTPIOAr4RO1Ez0 +fiUUCEhwARCIdM0VOqrvn7jao7X2vBs5tQxfXmEKa8pQwuZf/lmn8cPfBqYR1DG trPQOhUIQ2NSg20oxFXdBEflyAWYnrHrzhApXhx0eIuzOB3XDRbu0wgFuybibqjl ksMKgsmjMRxGidpYtVv/XAQEePjaMwwq9w5kteEdKwg6rRF4VGzhYI9wNQAkE774 7dpd6+vLnUG1mudRbP2JYaSygGoXxBTJI0TK7J2AuOfXMCdsnbnaH+ULO2gTymKQ ABBpDddrQu5rAUJt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KonLI6caiyec+9LZ+fc b1wAk7w3Z10oxztMXwYZ4h8R9oK26f3MLIAwzSzvWoJXjdoyMVYscqCxmc2hzwUT DhO7cax5PBtxIXKWKkvil1USIssulH9XsimcHGwgaUXHM3jzasEXihm1upRvM1PZ 8/A/qJ3Gmv02ryuWDrPmXTW9mMi7f4LXQI5zeWxUx4uIBOAaOrFMdw7/MHNNXWq8 DrqIN9Oh14rRWgS3jfltgGgdjISCkWdC0nQNETNrtsNW4zPf8dM5Y1JzM+cRz2Qf nTOTaLI/e0bcB8nLA+ZycyldECZC/oDrGBTnxIW9qllrM97izQ9dmtVqyhPgGUAo 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411900948965819464162667979757570373692620 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 20:51:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 20:51:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wedothesearch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27856332675692209944090567640634291809392437642142950336827209786077781464773294930762652544571644671521066884081552342463345574217942961887702110156403673033286185340928240963694492291077520390530122210301147721765475396687050044406585973085161090107172225778922655415028316600755704220330056545992159205485242726939587522703545501795468564287280824261721121111527038054754349294673872689073066053968030317550241239893374273256803184028471711749665411900074217987330714396241287109375377285508210628478387957285409598696886172338304245958821567297542550349155260248608660180114241165611252928372693713904171317471453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea6c30b52f8f8f74d80039ab1f6948ee7a4a64aa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfort-store.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistbismarck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymanforaweek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maincasting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyimproving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theparaclete.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedothesearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfort-store.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistbismarck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handymanforaweek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maincasting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlyimproving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparaclete.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wedothesearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbekd9d.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbekd9d.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f8363f908000004030047304502205e2c7ec0f1d65ae9ba28a499f39288370d22151acbc095fee7b08cc1f0b81bae022100ce1040888d0639338c90750af1cfa84161f7e5ba546ba3aa7c1652183cc10ad800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f8363f936000004030047304502205d69a11772ab2983a7a79acae03d28cdb2f09d0bb69bc64ccfff22dde65a265d022100d9029471bbddd8f201d8a6ab32967614c7b101748e197e4807b22665b57ec5e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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