wealthversed.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:2c:ce:9d:95:61:e7:50:dd:15:05:bf:3d:b1:f9:a4 was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wealthversed.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:2c:ce:9d:95:61:e7:50:dd:15:05:bf:3d:b1:f9:a4
Serial Number (int): 12195703685271266881608689331746240932
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0b:19:77:79:39:96:92:0f:33:e4:98:d7:00:1f:63:fb:bf:0b:a9:e1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 32:2a:09:e8:cf:87:41:36:e3:91:4f:42:ed:8e:28:6c:11:0f:48:c0
Fingerprint (sha256): de:c1:ad:25:ea:70:79:e2:88:d1:d7:19:5c:43:27:d3:5d:44:a4:8f:a3:4b:f9:8f:cc:42:10:3e:73:a4:4b:ec

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate wealthversed.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wealthversed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wealthversed.com
*.nation.com
*.smartstuff.howstuffworks.com
startpage-cms.com
sportsbreak.com
www.healthnwell.com
www.walletgenius.com
m.sportsbreak.com
www.check.in
intelligentintent.net
trivia.sportsbreak.com
m.walletgenius.com
*.content.carsgenius.com
travelversed.com
nation.com
www.travelversed.com
*.stuffanswered.com
*.keepasking.com
www.sportsbreak.com
*.check.in
*.healthversed.com

Other certificates including the domain name wealthversed.com

(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
*.reviews.howstuffworks.com
cdn.wealthversed.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
*.reviews.howstuffworks.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
wealthversed.com
assets.wealthversed.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com

Certificate

The complete raw certificate details for wealthversed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk23wra1QELuMST+UFVt
5f1s/XKjgkas3mIWbKEVv5Tf4Jed7LdeRyHq+wFyZTsZlWizeX4cqeNkXNpZjVMt
0DjJ4vimEOnu29BegHDorkg+xl+6UD3pfAAX3I7SJ0i5k7jaV3AhZ0MnBvmb7XH1
qQ7Ly2cQW88q2SpDV0eL/zj/TZBk3n0csIKOhqTkHa/uLgwdq8zXjukR1mUtNLKg
sEld2ZZvZlsVTa0SYpI2FL7K6H9M6bfbIk469jOrQxOgX2eNByGFUiTMwN8xhYuq
I2FClQe+UylRpHZDqHBiCyshNPtyKomVSbnp6HY8Q7mwnVziqT4g5DLKSV/+l0R6
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12195703685271266881608689331746240932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wealthversed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23518648806545262034166511172270140085745896909523108442768527784010078366348849853129302484717426387817652100548968236130645607796986735700907091943841194979607121534528854675312930583585152899826192731137782537728514575401226484630139622083373068542714279017994394069826216437737822674961359137405684158197578313059333139312149630384980457196210929935042474366354920050983204129356259922031210619651487941734857595184308242806795362271309514313321229572690525744226007478527260860778362166203368904377188581061540050387426738511247715570399170673414903916046683430797463583720714785900137275527425560264642356607523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b1977793996920f33e498d7001f63fbbf0ba9e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartstuff.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpage-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthnwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivia.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.walletgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.carsgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffanswered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepasking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.check.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthversed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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