wealthversed.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:04:a9:45:43:e2:be:fa:cf:fa:53:21:b2:c9:79:ca was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wealthversed.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:a9:45:43:e2:be:fa:cf:fa:53:21:b2:c9:79:ca
Serial Number (int): 4011886389764732315333655778407578058
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8c:59:b0:71:e6:78:70:ab:93:71:52:88:3e:68:0f:cf:f6:d7:89:ef
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 14:99:00:ae:94:a5:67:3c:43:ae:22:f0:29:c8:bc:6b:24:2b:34:6f
Fingerprint (sha256): d3:a3:eb:6a:72:76:d1:b2:1c:a7:a0:27:4a:ec:69:8e:1f:94:8c:e3:96:85:69:7d:8f:7c:57:ce:01:91:04:bb

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate wealthversed.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wealthversed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wealthversed.com
*.nation.com
*.smartstuff.howstuffworks.com
startpage-cms.com
www.healthnwell.com
sportsbreak.com
www.walletgenius.com
m.sportsbreak.com
blog.roadwarrior.app
www.roadwarrior.app
www.check.in
intelligentintent.net
trivia.sportsbreak.com
m.walletgenius.com
*.content.carsgenius.com
travelversed.com
nation.com
*.stuffanswered.com
*.keepasking.com
www.travelversed.com
*.check.in
www.sportsbreak.com
*.healthversed.com

Other certificates including the domain name wealthversed.com

(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
*.reviews.howstuffworks.com
cdn.wealthversed.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
*.reviews.howstuffworks.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
wealthversed.com
assets.wealthversed.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com

Certificate

The complete raw certificate details for wealthversed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/YGDaK/bqQXhxNSSMJ3
+zzBKuLSyWMgmme4BfWD0vIlsjVSz2fU4Gek5kTVj/LTm+Jc3x1a7G5GM3w8vYo0
BolnpP+hKQWsshpjes512nDJ+d349Kge+mdjOgMXV9e3Y5X1uwK2pKXJb7rNzaVX
1bNTl7+w711JA0GysnB40LwfVADEqzVXzsI5jlL/OVULuUY8852xQZ3KDWEepJIn
81enhUZYMMpn+zPrA2O+dsNXanoV1bURDiN4RH0crx4aDKE85451KYeHv3Z6XnnY
CbhwTT6Vms3y8QTeDi7QpN00sCd2cX5b9lyvAvhR5lVG4xRoOPWZBNwLD36SKrya
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4011886389764732315333655778407578058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wealthversed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27262554348943496008931787429914821860839691027592017543220267830062218719817890150748808855968920932675634747249315309420978561915530108468957582607576950874889908110917855836138068072881919671869243157758016259950724014135138976729912414325729006051265245308122386708766262555503047424534232264155811659008699380102459076289340102112868237100533336079851361089710794539591865894496391041367801852232984297697031253447635670056780924706506034390469242850896253849539503701194441582971055830876030825100236359406712876092652723659009633877944600465684105697244889811138032378819939757940962821655083321701933082516133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c59b071e67870ab937152883e680fcff6d789ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (460 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartstuff.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpage-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthnwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.roadwarrior.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadwarrior.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivia.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.carsgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffanswered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepasking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthversed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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