weekdeals.com
Issued by R3
About this certificate
This digital certificate with serial number 04:b6:2f:0b:b9:7d:2c:99:43:53:88:15:b8:4a:ff:cf:86:89 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=weekdeals.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b6:2f:0b:b9:7d:2c:99:43:53:88:15:b8:4a:ff:cf:86:89Serial Number (int): 410443069099882221479824220237507412854409
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: aa:77:ec:97:47:25:14:4f:bf:7c:70:a1:5f:fc:1c:d3:27:5d:08:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9e:47:18:6f:64:df:d1:93:1a:bd:c0:f4:3f:2a:6c:06:e4:27:06:61
Fingerprint (sha256): 55:df:22:97:98:54:04:67:df:73:ab:50:ce:44:11:88:3e:92:94:14:ca:a9:4f:ae:76:09:56:38:93:ed:31:2a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate weekdeals.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for weekdeals.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
weekdeals.com
www.weekdeals.com
www.weekdeals.com
Other certificates including the domain name weekdeals.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for weekdeals.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISBLYvC7l9LJlDU4gVuEr/z4aJMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjMxNzE3MDBaFw0yNDA2MjExNzE2NTlaMBgxFjAUBgNVBAMT DXdlZWtkZWFscy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDW B4w08fypVbGhuSyKt9I0alBLoPiSdWA3R5QXwTGAi8/V8VCMwwNODFzjqzdKg7Iv GPtc8djlZ/byJLUHnfYoTN6HNCMkcXUjEQaaLqIG6L38VLaCZNpTVr6OpresgCy+ rwPpOOxcPr/JXy1rZyC2Gw/OYRttuPxV3RsuFSQ+jl2mZE9U15SyAMYDRPY52ykb Ux/dgWX7xd2dnJZS3PzJOBh+wJ2Ki6AhwRDuvuzEYCqf2MgpMNzgZv21hOPpN/2y OGQvs6gULga2ifTqlsixUtTlglDRpqzpJcujs/R8m1ZpclOTfh4hTm+QMgps7mAr 3iTsPux4AwThfj4tu5uxUPW7qNTM9dS1+RFwoHRK5QelNB6rWA58X+zFK+I91T+y 7SRbuVobpWMcc/n5xp8PRoMJoLkOHJuDJIak2BrrU3oC/Md4h2CX2pubHomzX9vo krtgUveCRW8A/mDT9g/J9qzuQ9lXB0EbfVz3lILNNg2ajiDdMP4IRSvIp8G11u8b OeDCXaF8ltqBf/cResWiISuE8moy2GeKY12PRQws7hYNZajLmf0vABh8yVdsFILq rCgiQTnyJMRGP7cZwljkIE9OjJQmbLC1JUplsEF5jxGUnINR0CbbcPJGNoeYlTyV yJJTkjWJGkdYkXsSMpFooEoZrNS3rLUu1G0Oi0PdlQIDAQABo4ICIjCCAh4wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBSqd+yXRyUUT798cKFf/BzTJ10IWjAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigg13ZWVrZGVhbHMuY29tghF3d3cu d2Vla2RlYWxzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAAB jmyHxWYAAAQDAEcwRQIhAKlBoAvUxAh8wFUK0C0pNzF1UiGoI8ySU2AwxKxzJfWM AiAC2oWiYca6e3E1NJfoTeaFsnPXwnryI++Z35sFYrnnuQB2AKLiv9Ye3i8vB6DW Tm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjmyHxbkAAAQDAEcwRQIgMEDWYu+Xi/8J lS6SV7uT4kWIDgj+V9YgUxgKsRgVsm8CIQDfNPNA/GmKi5rv0MsDxtJq80D+3p2u 7WYMKwYbPj8zczANBgkqhkiG9w0BAQsFAAOCAQEAOoxyhJ2FOB0bIuZHJ9qj27kb DL47t50K1IxuTO8nvd1qv/5C66HH7MGtdvSCqRMMXdbkB1vT0sWn398ahyB4qUi9 IczufEPx7I4W77GP3pC/6Uqa1JM3vkGjB/2RVndE+KHeTzzW2scd1/ppFZiFU9dr BC0WAo3EhP261Fg9LnL2/OwRjjzbIeFnDeZXeJ12cluCIyKQvF8mZE45tPmSs7w0 LDsQlvEvRCWDoDJpOwylLm0TwFctgWDNEBMPZLgDn7b7VXcqNCMFPwEc00Oi0ftO e2711QHbbzzcPU0XjVApJAXKxmyK1l2gI+W8cJJnl8tmTBN0U4wq49pk0FUjvg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1geMNPH8qVWxobksirfS NGpQS6D4knVgN0eUF8ExgIvP1fFQjMMDTgxc46s3SoOyLxj7XPHY5Wf28iS1B532 KEzehzQjJHF1IxEGmi6iBui9/FS2gmTaU1a+jqa3rIAsvq8D6TjsXD6/yV8ta2cg thsPzmEbbbj8Vd0bLhUkPo5dpmRPVNeUsgDGA0T2OdspG1Mf3YFl+8XdnZyWUtz8 yTgYfsCdiougIcEQ7r7sxGAqn9jIKTDc4Gb9tYTj6Tf9sjhkL7OoFC4Gton06pbI sVLU5YJQ0aas6SXLo7P0fJtWaXJTk34eIU5vkDIKbO5gK94k7D7seAME4X4+Lbub sVD1u6jUzPXUtfkRcKB0SuUHpTQeq1gOfF/sxSviPdU/su0kW7laG6VjHHP5+caf D0aDCaC5DhybgySGpNga61N6AvzHeIdgl9qbmx6Js1/b6JK7YFL3gkVvAP5g0/YP yfas7kPZVwdBG31c95SCzTYNmo4g3TD+CEUryKfBtdbvGzngwl2hfJbagX/3EXrF oiErhPJqMthnimNdj0UMLO4WDWWoy5n9LwAYfMlXbBSC6qwoIkE58iTERj+3GcJY 5CBPToyUJmywtSVKZbBBeY8RlJyDUdAm23DyRjaHmJU8lciSU5I1iRpHWJF7EjKR aKBKGazUt6y1LtRtDotD3ZUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 410443069099882221479824220237507412854409 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 17:17:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 17:16:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weekdeals.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873164111258225325861187579573025287859858012739694615792389934065979285792053371902328662290976233676940189122299524593225712551109566756429933950697114749868755989807306096500191750236336599448905705100207641443096075280663044601665434144163252348437533827922160824845932208547681657047867557775126882963445710424354736819400267232179741467343762588069369781801537365836094045220888338465990430684612650524795778856743618824066566576764980437036000872439607307751367682107394708797599385945026479684710512680425431664720745798415606375192604639341745493620350412479497537113766542272691249160908220854279548473180215505731774427143620522559557305849372450387318627348951173327892283040253746375856921008742351453598039306307555023745802566828241708687005261949894796137129066378819878923405691575467846626699103275174471059833587079600716295170457444977810958828384238816691674161249828663958032747939692284949643800088685841999536850786836401195788958255442714648565569849846361800000321630222469848561176209825066817538232492238211828120682723784982412273463196347717059403827132689646228181484647859477844508764335966044718530783833429334438651862463756602532032616421550756463988496310719719326437800591692501914079692855696789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aa77ec974725144fbf7c70a15ffc1cd3275d085a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekdeals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekdeals.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6c87c5660000040300473045022100a941a00bd4c4087cc0550ad02d293731755221a823cc92536030c4ac7325f58c022002da85a261c6ba7b71353497e84de685b273d7c27af223ef99df9b0562b9e7b9007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6c87c5b9000004030047304502203040d662ef978bff09952e9257bb93e245880e08fe57d62053180ab11815b26f022100df34f340fc698a8b9aefd0cb03c6d26af340fede9daeed660c2b061b3e3f3373 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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