wealthversed.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:59:dc:f5:08:8c:8b:5d:11:ec:de:8b:bb:f8:e5:4c was issued on by Amazon.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wealthversed.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:59:dc:f5:08:8c:8b:5d:11:ec:de:8b:bb:f8:e5:4c
Serial Number (int): 17746559909271913188041463025309902156
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1f:b4:f8:82:26:b1:9c:31:76:8f:b3:55:f3:11:af:58:79:be:70:25
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c1:75:56:14:cb:d3:72:5d:2c:7e:4a:df:88:ca:fd:71:a9:bb:f6:a4
Fingerprint (sha256): d7:f0:13:9f:2d:ab:92:10:00:d4:a2:80:56:d4:62:11:e9:2a:51:8e:be:ef:36:bf:c7:47:2e:72:4a:a1:e4:96

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate wealthversed.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wealthversed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wealthversed.com
*.smartstuff.howstuffworks.com
sportsbreak.com
www.healthnwell.com
m.sportsbreak.com
stage.www.activebeat.com
www.roadwarrior.app
m.walletgenius.com
*.content.carsgenius.com
m.activebeat.com
nation.com
*.keepasking.com
*.nation.com
stage.m.activebeat.com
startpage-cms.com
www.activebeat.com
m.goliath.com
www.walletgenius.com
blog.roadwarrior.app
www.check.in
intelligentintent.net
trivia.sportsbreak.com
*.system1.com
travelversed.com
goliath.com
*.stuffanswered.com
www.travelversed.com
*.check.in
www.sportsbreak.com
*.healthversed.com

Other certificates including the domain name wealthversed.com

(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
*.reviews.howstuffworks.com
cdn.wealthversed.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
*.reviews.howstuffworks.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
wealthversed.com
assets.wealthversed.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com

Certificate

The complete raw certificate details for wealthversed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ46DTycaLZOE2Nac2xT
1f74cgqItZMe5nnqvQ9veL0feS4OEK6wmkq+YS0OyslR2nxPgV3cYwuabSZfwzf/
FuTQSH0Rs0dfYuq60YAMwzexLR9IdE8/NFw1pgbMIOluQtcYQ6XtXCwOfQXR1RwC
J70J9ltAqa0UcpeGCROZHAZvC/Bi9O4yUCGKviCZ7Uhcmd2YQgz8XTkd9RQPY8nK
D8RXBf5HlAKWCzQsfqgmuI+Bk9Bh518G+f4+92AJsJ7DvDLCIxRURDIjdNaDuVo9
TOqCCdLIR7Il+jfj79IDRP2jxLja8nxJGKFMO57/0vsfOpKTPEjVqR2WETMboRJz
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17746559909271913188041463025309902156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wealthversed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21917251284705619635302658061145020981866199257796018189637225648261056227731927830580337384121326537450529356322177676239782312785362724328908167195222379377423609165746558304933666071098140367853273117325071628874678809942443513990860232955933033398526302437971601246386718913715835683857805966321422375567160487623403735397270594524964190259768668339073432119513641082518227003409169019533846801531706799951575937753483987410716272884289402758564098642594003286866955741260619312313865895763643736869457148119488311059468320283081867298835592616696350080784654312217177169533846051174827546079708267743213088043777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fb4f88226b19c31768fb355f311af5879be7025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartstuff.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthnwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadwarrior.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.carsgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepasking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.m.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpage-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activebeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.goliath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.roadwarrior.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivia.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.system1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffanswered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthversed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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