wealthversed.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:b5:aa:0a:03:a9:32:8f:14:42:ba:d5:71:06:c3:c1 was issued on by Amazon.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wealthversed.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:b5:aa:0a:03:a9:32:8f:14:42:ba:d5:71:06:c3:c1
Serial Number (int): 7589394513366631342545890319683470273
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 59:4a:0f:8d:5f:17:17:37:55:4f:0b:e5:3f:f0:5c:1d:48:52:8d:89
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): cf:57:14:10:17:c7:40:e7:fd:3e:98:35:10:59:0c:c3:a8:86:52:72
Fingerprint (sha256): 4d:14:27:5c:34:44:4f:a7:7e:06:55:1f:5c:e1:8f:26:a2:c2:69:11:53:9d:65:e6:eb:ee:f6:b8:74:7f:9f:67

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate wealthversed.com

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wealthversed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wealthversed.com
*.smartstuff.howstuffworks.com
www.healthnwell.com
sportsbreak.com
stage.www.activebeat.com
m.sportsbreak.com
www.stuff.com
www.roadwarrior.app
m.walletgenius.com
*.content.carsgenius.com
m.activebeat.com
nation.com
*.keepasking.com
*.nation.com
stage.m.activebeat.com
www.activebeat.com
startpage-cms.com
www.walletgenius.com
m.goliath.com
blog.roadwarrior.app
www.check.in
intelligentintent.net
trivia.sportsbreak.com
*.system1.com
goliath.com
travelversed.com
carsgenius.com
buy.carsgenius.com
*.stuffanswered.com
www.travelversed.com
*.check.in
www.sportsbreak.com

Other certificates including the domain name wealthversed.com

(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
*.reviews.howstuffworks.com
cdn.wealthversed.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
*.reviews.howstuffworks.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
wealthversed.com
assets.wealthversed.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com

Certificate

The complete raw certificate details for wealthversed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVr+drPz9pEfCYYJiw8n
H9dPzD7SbCyopZ3Xt8FOHiamieWEzQsXeSwXEzNp+OkUlF5BKGzabxaXzcDH15z2
2SnDyTu+diz5WV1ImY0BKAsQtKPafkGqT/F3ZuMca81VOFySGj75Qr6r/jd2WNv9
6QSMT9qOphpPcnzmiHbJrlum7HPIdzT+kFGN0GMOUaswjJow2pU1faDxZmVjm2mc
FcSlbEDLzyb5AuFVvpXfxSjkERMRdcPPb4k37w6FpKRdpzWd7r2i+Ujt2AHU+A6/
dRR7yEpQBYmUrK0b34ZL+jyCDrpbkxL9sCZr1i1dzJufu1hgEdgXqpLqDFxTJJ7x
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7589394513366631342545890319683470273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wealthversed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23398957231869059154439084784270133908913508784594364203569692800465307149395327452742785010897352173943860046485962732900305528536160315204508209160321613544538669601973552349583681336278481938936456394402504688023539079839312773344181838417370361262178860110556287521773647463069624477759299782128673279322255027727134944464573105012641862717423022354057680483878826910289327350773872984805068854633804592624815034277634430589653065322922201211020510897492640997084995927827592316527112634408903508888061025298070610379374175617582267670605661405257122993437292513421191908906468732145567771898297130765704027369841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							594a0f8d5f171737554f0be53ff05c1d48528d89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartstuff.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthnwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadwarrior.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.carsgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepasking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.m.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpage-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.goliath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.roadwarrior.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivia.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.system1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.carsgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffanswered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbreak.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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