wakeforestnc.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a5:02:b6:cf:ab:52:37:d9:d6:67:22:97:6d:cd:af:f1:ef was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=wakeforestnc.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:a5:02:b6:cf:ab:52:37:d9:d6:67:22:97:6d:cd:af:f1:efSerial Number (int): 317487056003287658617971679167429120881135
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4d:f5:d4:22:92:96:59:e6:56:c7:b4:3e:8b:f1:97:f5:a0:8c:0a:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 47:aa:8e:a5:b8:db:00:3d:64:88:0d:e8:c1:ac:70:5c:08:a9:08:7a
Fingerprint (sha256): 09:21:ed:64:5a:a8:7a:d8:57:23:c0:42:4f:1d:f2:7d:54:70:b5:e0:f7:c2:7e:40:28:60:f1:3f:28:c3:ae:a3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate wakeforestnc.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wakeforestnc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
affiliate.info
afterservice.co
duilaw.co
elaproperties.com
eroticlit.com
fundszone.com
liceodigitale.com
llanocounty.com
movie-poster.com
retireintennesse.com
spontaneoushealing.com
wakeforestnc.com
afterservice.co
duilaw.co
elaproperties.com
eroticlit.com
fundszone.com
liceodigitale.com
llanocounty.com
movie-poster.com
retireintennesse.com
spontaneoushealing.com
wakeforestnc.com
Other certificates including the domain name wakeforestnc.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for wakeforestnc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISA6UCts+rUjfZ1mcil23Nr/HvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MjExMDQ3MzBaFw0yNDA4MTkxMDQ3MjlaMBsxGTAXBgNVBAMT EHdha2Vmb3Jlc3RuYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaGy0O1da+Ike7i0bUxFlkcWV3FKcSdEAqmL593jAEFGsLjKJMW7/8KxsYQmG7 Y0NAyEY4oa9OnrghrIX66RXrTiiQQoDOT92Q/e/AEWJrSnLqcUh3c/2lpn7uBpR4 2aqiZ3M0QrZnclikpR/TxZw81CgAvR/BEdupizYe8eTch2NYZNcogU44mbYQ6uT9 r9Wy8wEoLz/MGAf1oAOTMY5kQBnlLxvn4OJZ7NNYxHEIsH5bxbB4kOl6AB51zuur eSQE/OTMVIDx21pfSZuVI3H8yA4/5veKGtkcRqftsOs86Q7Mw8tES/l335/QKVS6 V5o8IWVgvDwimKkYACZpkgYLAgMBAAGjggLWMIIC0jAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFE311CKSllnmVse0Povxl/WgjAp1MB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIHeBgNVHREEgdYwgdOCDmFmZmlsaWF0ZS5pbmZvgg9hZnRlcnNlcnZpY2Uu Y2+CCWR1aWxhdy5jb4IRZWxhcHJvcGVydGllcy5jb22CDWVyb3RpY2xpdC5jb22C DWZ1bmRzem9uZS5jb22CEWxpY2VvZGlnaXRhbGUuY29tgg9sbGFub2NvdW50eS5j b22CEG1vdmllLXBvc3Rlci5jb22CFHJldGlyZWludGVubmVzc2UuY29tghZzcG9u dGFuZW91c2hlYWxpbmcuY29tghB3YWtlZm9yZXN0bmMuY29tMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAGZgQcQnw1lIuMIDS nj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGPmvpgDgAABAMARzBFAiAputa447eAy5m8 fNkTuDrkx6MwH8HZAM6zq16hwitI0QIhAL50P70PYDAh3isgM6a+xbp2KaqmrfgI 9EGbGZNouv8VAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGP mvpoGwAABAMARzBFAiEAjyteQ21VfMUJKL/bLuk/MH5zUpblh3HGJJEOs/It/VsC IGS982Ng+KfdoeNFLcyL+DOTu4iegSy9VCrWmi0OxamBMA0GCSqGSIb3DQEBCwUA A4IBAQB5f7UdMWPTWDT/4N5iI9F+TFFM+bf99IJYMe1QSG5ujIH19sqBozb0njT2 cpaEornwh17aJXLmNT9f0z4WazQ6PHYTtE0V0jp3uo7WhnWaOUcHlhfd4LEkPb8m lwQHWkJ/mXZySeIIGZKg9EuOlMQnBRCZblSq0jcWMVphK+YTASDJFiK/oWHDSYPB KoRL/42xvnShUbHchlQ/29Z1D2pPgyk8ddjyzxDNZQjJBfu1dqRSUidInMAbN/6y BbBxa1gabIwXWhISyDR/GkOAt0aRq9tUL0OY+ib8j+f1fd0rXXIu38RYEo+zHO0P BNRZ0Xge3B6Gy1U8NGPG0nowfB7r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhstDtXWviJHu4tG1MRZ ZHFldxSnEnRAKpi+fd4wBBRrC4yiTFu//CsbGEJhu2NDQMhGOKGvTp64IayF+ukV 604okEKAzk/dkP3vwBFia0py6nFId3P9paZ+7gaUeNmqomdzNEK2Z3JYpKUf08Wc PNQoAL0fwRHbqYs2HvHk3IdjWGTXKIFOOJm2EOrk/a/VsvMBKC8/zBgH9aADkzGO ZEAZ5S8b5+DiWezTWMRxCLB+W8WweJDpegAedc7rq3kkBPzkzFSA8dtaX0mblSNx /MgOP+b3ihrZHEan7bDrPOkOzMPLREv5d9+f0ClUuleaPCFlYLw8IpipGAAmaZIG CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317487056003287658617971679167429120881135 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 10:47:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 10:47:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wakeforestnc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19454099953591568501859035809235672708711898823689391171130214505639798546507072883085578504146836358958609716151361524411148308366584175686714609957440209628694501190363826007221357070773563025980673576638840879540665374276901240669266732910547842994317277910691083718444139043179883297072087028268740833342547949964426758894838924582804729399709350587515136463161692403084992655201317747393049110516609127448234364096702837544983533303541544415679388157739743599429313462411251375135617289489693559863512269003791578057920637660319514490076255701753106380541560085808927710483863142140502458239537965932962848572939 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4df5d422929659e656c7b43e8bf197f5a08c0a75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterservice.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duilaw.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elaproperties.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticlit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundszone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liceodigitale.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llanocounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie-poster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retireintennesse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spontaneoushealing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakeforestnc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f9afa600e0000040300473045022029bad6b8e3b780cb99bc7cd913b83ae4c7a3301fc1d900ceb3ab5ea1c22b48d1022100be743fbd0f603021de2b2033a6bec5ba7629aaa6adf808f4419b199368baff1500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f9afa681b00000403004730450221008f2b5e436d557cc50928bfdb2ee93f307e735296e58771c624910eb3f22dfd5b022064bdf36360f8a7dda1e3452dcc8bf83393bb889e812cbd542ad69a2d0ec5a981 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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