help.makewonder.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d8:6e:a4:0b:02:cb:ab:1f:76:b8:36:f5:19:24:b6:16:49 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=help.makewonder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d8:6e:a4:0b:02:cb:ab:1f:76:b8:36:f5:19:24:b6:16:49
Serial Number (int): 422097201821512829449424152318665058293321
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:9a:f7:c3:b3:62:e9:62:99:0a:5a:79:69:7c:98:93:03:fb:20:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:7c:b0:96:36:6c:30:81:c6:ad:bc:0e:f6:e8:21:7b:79:f7:56:48
Fingerprint (sha256): 13:84:db:04:65:da:1f:f6:0c:98:6e:8e:32:59:89:d6:77:d6:af:3e:1f:38:3f:df:60:96:52:61:2d:81:a6:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate help.makewonder.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.makewonder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help.makewonder.com

Other certificates including the domain name makewonder.com

(limited to 100 certificates)
store.makewonder.com
store.makewonder.com
*.makewonder.com
developer.makewonder.com
play.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
j.ssl.shopify.com
prod.20.slot.cdn.salesforce-communities.com
store.makewonder.com
k.ssl.shopify.com
*.zulu.makewonder.com
www.starpass.io
alpha-store.makewonder.com
store.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
summer.makewonder.com
store.makewonder.com
j.ssl.shopify.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
content.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
j.ssl.shopify.com
prod.20.slot.cdn.salesforce-communities.com
*.makewonder.com
play.makewonder.com
www.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
help.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
k.ssl.shopify.com
store.makewonder.com
alpha-store.makewonder.com
*.makewonder.com
blog.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
*.makewonder.com
store.makewonder.com
store.makewonder.com
store.makewonder.com
kr.makewonder.com
*.makewonder.com
store.makewonder.com
*.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
store.makewonder.com
j.ssl.shopify.com
prod.20.slot.cdn.salesforce-communities.com
alpha-store.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
blog.makewonder.com
play.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
blog.makewonder.com
k.ssl.shopify.com
uk.makewonder.com
www.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
uk.makewonder.com
www.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
store.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
summer.makewonder.com
*.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
uk.makewonder.com
k.ssl.shopify.com
*.makewonder.com
kr.makewonder.com
store.makewonder.com
play.makewonder.com
uk.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
makewonder.com
uk.makewonder.com
*.makewonder.com
www.makewonder.com
k.ssl.shopify.com
play.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
store.makewonder.com
alpha-www.makewonder.com
www.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
*.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
k.ssl.shopify.com
j.ssl.shopify.com
developer.makewonder.com
*.zulu.makewonder.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
prod.20.slot.cdn.salesforce-communities.com
j.ssl.shopify.com

Certificate

The complete raw certificate details for help.makewonder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz06M8/b6wLeUeKj5KNl/
AeqhVqJepOtDXw2HCTqQA67B6iV3ISv9xf19ckMBzg8UsBpo/o0OrqqdVDwR1jVH
xGoG1vXyfzVYrFWdnEUBEGRLSS1EB8c8pzDObEApN1WbYkHDiU3KmLYC7xMdUMsE
BP1A5dmzIKGI6b3v3DO8y8REtkj6P4cQavOgHb0Too9D9aR5BiiMbhtRnokWK94h
qA0SubkMQFHzi+8fivXALwcWlqzYfzSnYQgUvc2MzGbgJoBU9IIflTBxRvJmV8Ll
e6ZIbfY6KnoYTD7iOZka/UuTADpP1eaifvMVopFzVSDbyzcL214B4/z2tWVjBZRd
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422097201821512829449424152318665058293321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 03:44:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 03:44:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.makewonder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26170063871317736075749881772409097133366857807886428655673870658838606413924460236506705655078978398056701271586588356060971902942604539046213771283743992164268660890924199290870550965520342803049998981420066033712030124277449479283421740046463555116695647304942578302179978269698223946801460526300344144955915950925702137783608120437437163501185852936939418719254292419551811367390821925279701465264585920930086217955970405543338318332335787347138373557490761579379470683213915397617346300730972254763179331906923181696687001404263803429372791629964591077285556045622667726819870247324554161783509302732642319621533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d69af7c3b362e962990a5a79697c989303fb20fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.makewonder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eb6dfa0f5000004030047304502203a3df72c2ab8c5e2c154d91147dda26d9c99106b927b77fa7ae84310d3d2f257022100977a5811fdc3de74c0003703dd47d0415db56296068a11979581d863bf782e550075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eb6dfa0fe0000040300463044022016797376d34c755ecc13da5ace90f31c622f5997d309055b9d16ad6e37ba3e07022052fc20c11880873f21022013c8a555d4dd892dbf4e678707f63ac65849fbec31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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