www.theformationscompany.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:58:99:ab:33:50:46:a3:68:a7:66:f3:d1:31:7b:9c:3a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.theformationscompany.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3d:58:99:ab:33:50:46:a3:68:a7:66:f3:d1:31:7b:9c:3a
Serial Number (int): 282211852134863937346512714778119537138746
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:72:48:84:fe:46:a7:59:3b:71:52:7d:7c:70:7b:1c:66:c0:63:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:55:cb:c9:11:ad:e8:9e:4b:0e:b4:af:75:62:71:d7:d3:b3:6f:0b
Fingerprint (sha256): dd:11:12:3e:ff:3c:34:f1:aa:6b:b4:af:df:bc:34:3d:5f:ea:6a:85:1d:73:d2:8e:94:09:74:a8:22:e5:d8:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.theformationscompany.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theformationscompany.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theformationscompany.com
www.theformationscompany.com

Other certificates including the domain name theformationscompany.com

(limited to 100 certificates)
landing.theformationscompany.com
www.theformationscompany.com
wpstage.theformationscompany.com
tfc-stage-aws.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
landing.theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
stage.api.nbis.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
new.theformationscompany.com
landing.theformationscompany.com
wpdev.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
beta.theformationscompany.com
v3.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
cms.theformationscompany.com
www.theformationscompany.com
beta.theformationscompany.com
wpstage.theformationscompany.com
tfc-stage-aws.theformationscompany.com
wpdev.theformationscompany.com
tfc-stage-aws.theformationscompany.com
landing.theformationscompany.com
landing.theformationscompany.com
tfc-stage-aws.theformationscompany.com
*.theformationscompany.com
beta.theformationscompany.com
cms.theformationscompany.com
new.theformationscompany.com
tfc-stage-aws.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
tfc-prod-aws.theformationscompany.com
lzf-stage-aws.legalzoom.co.uk
new.theformationscompany.com
tfc-stage-aws.theformationscompany.com
wpdev.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
stage.api.nbis.theformationscompany.com
prod-test.theformationscompany.com
theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
wpdev.theformationscompany.com
www.theformationscompany.com
new.theformationscompany.com
tfc-stage-aws.theformationscompany.com
stage.api.nbis.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
cms.theformationscompany.com
theformationscompany.com
cms.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
new.theformationscompany.com
wpdev.theformationscompany.com
cms.theformationscompany.com
landing.theformationscompany.com
wpdev.theformationscompany.com
cms.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
landing.theformationscompany.com
www.theformationscompany.com
wpdev.theformationscompany.com
landing.theformationscompany.com
tfc-stage-aws.theformationscompany.com
www.theformationscompany.com
wpdev.theformationscompany.com
wpdev.theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
wpstage.theformationscompany.com
stage.api.nbis.theformationscompany.com
theformationscompany.com
beta.theformationscompany.com
theformationscompany.com
wpstage.theformationscompany.com
www.theformationscompany.com
cms.theformationscompany.com
theformationscompany.com
www.theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
email.theformationscompany.com
landing.theformationscompany.com
new.theformationscompany.com
www.theformationscompany.com

Certificate

The complete raw certificate details for www.theformationscompany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAz1YmaszUEajaKdm89Exe5w6MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDQwNDI1MDdaFw0yNDA3MDMwNDI1MDZaMCcxJTAjBgNVBAMT
HHd3dy50aGVmb3JtYXRpb25zY29tcGFueS5jb20wggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDq0f25u8zwEhkCb+xgWgUSH1u/B39U3/8jg2fBg2kPYfOj
rPgxVNNoiIAMAu5HWJgv4+ZjEXj8+sZ6M8bDeBqcsllJ5YNPTujmZeW1JVoJWvjc
FGr0D1KGyqwpIiIK3mAObcyQ9bB3fdpE8qHMMa8Yp4VsxaWytrbI23tZTPVyxxK9
g0xgmJ/WXVfLb45KKHzdc+s6L+8C3K0D8GDV4GYcNpUaRV3dlO5D06ANEg4kUrLS
rlsiaDBddMIZD8xlnQZcSZuWv4hEM6/aGKZZtpxQHPsr4p4u6KeWjV/f03EmbP1b
Jl814YKAXdrIYeosa8AaFvHOvsYNcvLNgeELoKJChSN1Dxc6AS/speLyATY8EySp
2S4Iexr/O6jiIHT4ap0tiHh88kTu3I7uIMgO1Y485bUYYHj12F8U7bH56qTuuyWw
q/ryT1g+skofNUt1PRNUf0p3sji/EsSAuR9V0nttlKce/Fj9Ce4vIUh/hMJg7oXU
QUuacTo8fgnlr7RC2Q/F4bNFsDhvyRzO5tFV1Zf7kCPcpdY39X1p3NyBcNwPnicf
G0GTDNAIcUxBrejk7Pwb5YBSy2Yv4X/QdbZ+UTEX0CW/qXvqZUZAFuOZwb3rR3YQ
QfqDW9lSC/3SHUTCGltJYOnNNd42U2nNdR1TU6gmLCjuvK5ItEIMXe17B32sbwID
AQABo4IBRTCCAUEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTFckiE/kanWTtxUn18
cHscZsBjFjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEF
BQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggr
BgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzBBBgNVHREEOjA4ghh0aGVm
b3JtYXRpb25zY29tcGFueS5jb22CHHd3dy50aGVmb3JtYXRpb25zY29tcGFueS5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAGHeccqvFX7YTsvzW4gAcNaf7z7c9x/lqRPc9dmfB//j
DqY2UlXnJDVg7lPzMtzzz83cK4dnFNVGMECU1ltObmcUzSeQv1iQbKPsdg3aCsDc
6/XxIXJdUOP/hqV2Px7TEyYgNfU+Eh7+Es+k3bzgQhLTLmRCnYB6p52z30r6KGbt
BfBYgUTkFewG/3GvoLFhhdSimzbtktP0ewAvOAm8Rhp+Su+2MLesWMsvSAiwW/bo
fmMIXB4B8plpWNAQKub52rxOD4kyI90f3ckPTF/PSgdo1VNrdEq6fUeL7Mg6fvXh
KWeUMmaj3QUXUKw5qNeCerpvZk4ZgQiZKvhEgwFgwG0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282211852134863937346512714778119537138746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 04:25:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 04:25:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theformationscompany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 957983153354019061145484470104974902283379863084166500794014680287790479186585126928148106203441902231855930123997866541477052255185633913507927559391199554618228665987133371847515639435830918978047272213087403282911289921869418576971217778442265967143359641527507017399644805189578466309096460976264070159173018217285590211784119742753374132385614415850545002064002400848613090524798913683997335042966936506053928477336626874730946033355138809156928715202235059452381990955986901907320844059149760689553366274723911743946232316769106439751841152878417865872054766875172224402635044571329487255777408208754830911764419290335868503385645601648348801749438909514918849836957616731790536125913145513581906525192538695348861698937651934919622159281268224214101058879367804199315640993705595341476956333795494245868969866683138684065712255827377862811610922316326865274855160394389620254801575631342065593436029617193809189188116055543976150897674000711591269765096900599192525112274105990336222648429022095307801034687531453740439495120434900389602521841174987130977809463028701286298433761445690481635608293676749940372083235793434569508805582402899743654181647228451519465777812206509745146871054835047795823484921993374294871398788207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5724884fe46a7593b71527d7c707b1c66c06316
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theformationscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theformationscompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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