healthwellnessplans.com.bancaidee.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:fa:4f:2c:07:78:78:f7:58:85:75:81:5f:0f:ff:20:4b was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=healthwellnessplans.com.bancaidee.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:fa:4f:2c:07:78:78:f7:58:85:75:81:5f:0f:ff:20:4b
Serial Number (int): 346059602875089436237004922487651818217547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:b5:38:ba:25:ac:40:ce:cd:20:63:df:c2:ec:1e:bc:11:02:3f:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:c8:bb:06:30:3f:fa:e3:b9:8b:bb:d5:27:b7:68:ea:6f:17:e8:75
Fingerprint (sha256): 45:67:a0:3f:b4:9c:8b:3b:fc:6c:1e:0c:b7:f5:b6:47:34:47:a6:47:fe:cc:a7:51:6d:6a:9c:cd:c6:79:f2:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthwellnessplans.com.bancaidee.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthwellnessplans.com.bancaidee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artistsforchildren.com
burrow.pro.hemphealth.net
healthwellnessplans.com.bancaidee.com
lifeinsuranceriders.com
sammamish-living.com
stocktobuy.co
umiglobal.com

Other certificates including the domain name bancaidee.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for healthwellnessplans.com.bancaidee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JXmnrcdBEPKqOysjBpV
6FtfZJQbH5DWNaOdnmrPOsZ3hdImhpsd8HdYbYTb3J3AgSe773ni2qChlljD82dh
BmOfT7ey9ScUStTlHQk36qpz7PL4/atIDz8Ll4SKvRSBBGVWZDPP7OPahctzK8wb
UGku3Sro20ULd9psv45CjLdlKhkUiVddF3EYRO6JD89ieOapjFJLwDyhKnMdcaJ0
q7yMQK+/ZyHp1axSLjZ0IkLGmcPROJDmnEWNpPPfbKVafrrBYBA8Tw09kgzxeSlQ
l9tLhFzbe7hAfkYlDfpdueTxcqsffqhqsx5/xAk/oTJY0/zt1qE0iId1Nw+4UA46
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346059602875089436237004922487651818217547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 10:30:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 10:30:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthwellnessplans.com.bancaidee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26836439521520741146140770606984414531793910304212564788757339091612232031273775924263117656090282007414855136614964527903126522399546049677580676159384921273833575105714255624745937401775008062893899411558959679048173155961995979588491196668965811865435363657989553132074722527669411317267135754789386314732159363995197225917938660287234468187963513783706521609850093677224740742407557529418479830869284349623398977477307763319783543929097670018700223384098644781676035934069125296565224430950552840372900642512147091814132974526987109013462902869007180049201239512676498813009566817367128527645135102806755032054491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50b538ba25ac40cecd2063dfc2ec1ebc11023fd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artistsforchildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burrow.pro.hemphealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthwellnessplans.com.bancaidee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinsuranceriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammamish-living.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocktobuy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a222949280000040300473045022012f4a7fce3118e8ecef6d996b4a1b35c7d0d95535467e094931d61d02ce63283022100c7f18fb3e60933cab42bbd0099fd23ba54d5bd8a13bf2a8924147f82bbb1abf10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a22294934000004030047304502205bb4bbc8ddd82c94f290c7dc4160631c82ea11f3e925016938c7dbe2ffd82459022100d24e82770d898f9ea38c66cd5c6332b886530a49b237f0486aaed9946b819f39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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