waydigital.com
Issued by R3
About this certificate
This digital certificate with serial number 03:b0:31:c3:63:75:47:52:7a:74:99:58:75:4c:47:f1:ed:80 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=waydigital.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:31:c3:63:75:47:52:7a:74:99:58:75:4c:47:f1:ed:80Serial Number (int): 321292701060297103600163885710324693855616
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 15:6d:4b:4b:0a:b1:20:91:64:e2:aa:89:0d:c0:28:23:fb:3b:95:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ea:9f:ab:c0:37:e4:c1:31:8a:d6:75:9e:c5:d8:93:41:0d:c7:a3:5a
Fingerprint (sha256): 98:1f:df:ee:99:42:18:af:23:94:67:cd:ce:43:06:87:cc:71:b9:e4:6e:05:4f:af:98:e7:9f:93:1c:11:04:f4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate waydigital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for waydigital.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
waydigital.com
Other certificates including the domain name waydigital.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for waydigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISA7Axw2N1R1J6dJlYdUxH8e2AMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTEwOTI0MDBaFw0yNDAzMTAwOTIzNTlaMBkxFzAVBgNVBAMT DndheWRpZ2l0YWwuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA uSnKYHaY8gqplWG3eNep4hbVlKMhF4d1YFaIbw3TdOu9n27x20msG4S6SHLZA+L1 lODV6Qk9mTbWkBn5sh4Ndqo4cr4MkavNMXp6rGJj/aCCV1kcKJ8Ftg1nzneqyYJF WXO8dVkwd1yNsDaniXaqUZSCQz92sqVsq+R4M+0OfLE/9kLWIQVYSEo9Cb4uMqXr 0bAcTNzS9DwiyHHchSsgW54MAOqY4Ejk/AHNb3SeDUJ2VhjJAXRFZwJlCQCnRDxZ EEXgWwdbGGtTRa3qkDUT1/lcgEhc4mZpQuOTvXmf4qIgwBZ2w3BxNGiT0MkFMQW3 2McOr1GpgSv4IlQugJrS7vtqcj8wk0ReQ5ZzDz8HtNheSaDY3XrLa3ywQQLaS0Np USagJ6VdKyXRspF1yovmvuBQZ+V2ZrjHYn6XH3Bes/OmmtwJ9A8nO7fj6lblyVIU TzMtDvgSgL1EjcRg1EzXBfNP34T6wj+Jkps76EIpvwpbhkeZ4/6h2z0cP+y+ED3j 2X7uSUmncwbhr8KXBScaCp1uHYAhzHokO7HP/MDQtthaNfEb+DrkaXrFTx+SMzYO fqb0yRQWfPqXSV94/Y5lOOgWHqIHEyZ96LENjw2CSw+hcv1ErZZetQyn73JxuDWm TxaSpIQFx8mTjbdRCKWxa8pwg45VA0oZ+JafCoNCyzMCAwEAAaOCAhEwggINMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUFW1LSwqxIJFk4qqJDcAoI/s7lTcwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wGQYDVR0RBBIwEIIOd2F5ZGlnaXRhbC5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwCi4r/W Ht4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxYZ7QfAAAEAwBIMEYCIQC5 SbshzO0Hj5KCQB5tiXyyaH7szozalg+3XKtWK81y3gIhAIyxLV7JA4RLz+us47jt ta064e4qT9votMcZyYdIMgHQAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ RnEftZsAAAGMWGe0AwAABAMARzBFAiAE04eLHKZ4IeTSq0B63cx7qdDE/UHamv0o MwcDCtHa3QIhAK/M0Y9wS1/dHSdIsBEoAjxzOPCenCPeSrFG6TrMBlMRMA0GCSqG SIb3DQEBCwUAA4IBAQBKHkn6ZI57Q2k9Vs0KayxzK5NcQJDEt6xGplAw60y/+B8R UXcwKcm14qDLwcSsP640DqTgRtm3ZU8wY0Jlq4gzSllbqkQIP0l2f8x4Tj03KmNT vrfeT+vmBE7UPaLHz1L2AsCTWdu4FjRyms61sI0ZupFP2+pwQYwfpWPqziCGuVNa wnbMMRrn/BLaAfQJhfWSJII+oYw0EL++jtt/dtwPggshkIA2TqOZ/FPxA4ZQszOA anuSLaajPVE6uXlWIqTG+ZzsWgfmc+1o87djM61WuCFbaG4uQ9mfxt0fw1x/GN9n HVnziI4zIZgoLS60qyCQVefghZm7fAuf0Dw3RrvI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuSnKYHaY8gqplWG3eNep 4hbVlKMhF4d1YFaIbw3TdOu9n27x20msG4S6SHLZA+L1lODV6Qk9mTbWkBn5sh4N dqo4cr4MkavNMXp6rGJj/aCCV1kcKJ8Ftg1nzneqyYJFWXO8dVkwd1yNsDaniXaq UZSCQz92sqVsq+R4M+0OfLE/9kLWIQVYSEo9Cb4uMqXr0bAcTNzS9DwiyHHchSsg W54MAOqY4Ejk/AHNb3SeDUJ2VhjJAXRFZwJlCQCnRDxZEEXgWwdbGGtTRa3qkDUT 1/lcgEhc4mZpQuOTvXmf4qIgwBZ2w3BxNGiT0MkFMQW32McOr1GpgSv4IlQugJrS 7vtqcj8wk0ReQ5ZzDz8HtNheSaDY3XrLa3ywQQLaS0NpUSagJ6VdKyXRspF1yovm vuBQZ+V2ZrjHYn6XH3Bes/OmmtwJ9A8nO7fj6lblyVIUTzMtDvgSgL1EjcRg1EzX BfNP34T6wj+Jkps76EIpvwpbhkeZ4/6h2z0cP+y+ED3j2X7uSUmncwbhr8KXBSca Cp1uHYAhzHokO7HP/MDQtthaNfEb+DrkaXrFTx+SMzYOfqb0yRQWfPqXSV94/Y5l OOgWHqIHEyZ96LENjw2CSw+hcv1ErZZetQyn73JxuDWmTxaSpIQFx8mTjbdRCKWx a8pwg45VA0oZ+JafCoNCyzMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321292701060297103600163885710324693855616 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 09:24:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 09:23:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waydigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755400131122068011159821029144323197496654477892906777874961157678981843955863151036405639235397882090394514281400115894857273023509372606880408652963607848354915661161306992030470080996595869460337348807063446083623248277236537101140618514846625682151258455364759561058810977062133364297586447860179475174772804012799185288051781458745137486965597213664269028716345061445115871882088644634349790250788531567013161001134994046133712265083130993351085551011788206870983891061599211261015549979098128212174196965354381090860206625122604228529693088830954942318506500126371248818876871128831427341584816200689584286847144508289679371093153833744816644110125271445762801967743561771552266752454445668071427655906936844712562079783106261513473327939975612958010684334252900988454412271717105941013352341833607641146629820395496211579552094317181562857142781691281926695122323958229673829899179773794196228428206070374723134772993328789106987586262735140385698645080969914266669813654581690948325267403640899179707837100445476373305234348721346530771892776890077167182465935614648429284253947489028464023300250442146914777301690622188790752887134017091364634014020998453257409675946032386174134232198329464762844572621062995659283442617139 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 156d4b4b0ab1209164e2aa890dc02823fb3b9537 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waydigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c5867b41f0000040300483046022100b949bb21cced078f9282401e6d897cb2687eecce8cda960fb75cab562bcd72de0221008cb12d5ec903844bcfebace3b8edb5ad3ae1ee2a4fdbe8b4c719c987483201d0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5867b4030000040300473045022004d3878b1ca67821e4d2ab407addcc7ba9d0c4fd41da9afd283307030ad1dadd022100afccd18f704b5fdd1d2748b01128023c7338f09e9c23de4ab146e93acc065311 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004a1e49fa648e7b43693d56cd0a6b2c732b935c4090c4b7ac46a65030eb4cbff81f1151773029c9b5e2a0cbc1c4ac3fae340ea4e046d9b7654f30634265ab88334a595baa44083f49767fcc784e3d372a6353beb7de4febe6044ed43da2c7cf52f602c09359dbb81634729aceb5b08d19ba914fdbea70418c1fa563eace2086b9535ac276cc311ae7fc12da01f40985f59224823ea18c3410bfbe8edb7f76dc0f820b219080364ea399fc53f1038650b333806a7b922da6a33d513ab9795622a4c6f99cec5a07e673ed68f3b76333ad56b8215b686e2e43d99fc6dd1fc35c7f18df671d59f3888e332198282d2eb4ab209055e7e08599bb7c0b9fd03c3746bbc8