livingwatersd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:21:8a:6c:34:4b:46:31:c2:88:c5:c2:77:d4:ed:17:36 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livingwatersd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:21:8a:6c:34:4b:46:31:c2:88:c5:c2:77:d4:ed:17:36
Serial Number (int): 275673300461430933316002601614670715230006
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:05:6f:5f:a4:b5:b2:13:d0:77:71:e2:bc:8a:9c:15:48:f0:59:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:c7:ba:04:3f:2e:94:35:b5:e3:98:67:82:44:25:67:39:16:f0:13
Fingerprint (sha256): 12:87:39:d8:d6:49:6a:58:a2:f6:dd:27:ad:af:50:ad:59:76:8c:de:86:3c:33:b2:f2:75:87:c6:da:d6:cf:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate livingwatersd.org

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingwatersd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livingwatersd.bluejenk.com
livingwatersd.org
mail.livingwatersd.org
mail.obacupunctureclinic.com
mail.oceanbeachacupunctureclinic.com
mail.oceanbeachtherapeuticmassage.com
obacupunctureclinic.bluejenk.com
obacupunctureclinic.com
oceanbeachacupunctureclinic.bluejenk.com
oceanbeachacupunctureclinic.com
oceanbeachtherapeuticmassage.bluejenk.com
oceanbeachtherapeuticmassage.com
www.livingwatersd.bluejenk.com
www.livingwatersd.org
www.obacupunctureclinic.bluejenk.com
www.obacupunctureclinic.com
www.oceanbeachacupunctureclinic.bluejenk.com
www.oceanbeachacupunctureclinic.com
www.oceanbeachtherapeuticmassage.bluejenk.com
www.oceanbeachtherapeuticmassage.com

Other certificates including the domain name livingwatersd.org

(limited to 100 certificates)
livingwatersd.org
fasteyes.com
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
acupunctureoceanbeach.com

Certificate

The complete raw certificate details for livingwatersd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuwuy5fzQz17+i6vlH16
gSGSChK3qW/W1J1cubMGMQ+dwEgDd/IRfClgYZ6vZQ8qzzVeykKKSiMIVHZo9nOV
AfWX+Ibk7zf++0L51nPUbUf0Hh++ZX0dI+lEyNrvo3zM4EYMmQtKaI1hggRw4c/P
a5Lb/CAgO+fdCmZpMUwJj842g/fEiZXGEY3hSn4blQ5M2zNVJ7Odxlu4CD+TxcXO
uZLHiPRb0jH3ndRbFZYNe337/B90b0SrWlbUtDK5Eu7kyPcqqxiT/cJiR8+c3KgA
JuSPEQRuj7M9aTEK1KYq22iAwEfw1l4rkHmHUwqAkRIqqwGZHewVRuLN4EV1CdKO
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275673300461430933316002601614670715230006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 20:55:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 20:55:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingwatersd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25616603679660289515336187610679463205622019087849265546179776933619184933173080365303461274407778470408394205677902427662766500709145622455445219146978616385936520020578426825338403950801587255011306650960802443499961577379849303929923469356128974947388892803061393391772775055530750218474965667514738479481354716096735445175915585887297715619927216868538587542756006023710552957416037177594959647739019995105467434022966388828741940691661927765080440793215069246434778622954542206604830399160263222056931248507831166411152314697012422021106069214035385255101705479536611323819758229217583520423568070117098446294603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf056f5fa4b5b213d07771e2bc8a9c1548f059ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (683 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oceanbeachacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachtherapeuticmassage.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachtherapeuticmassage.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001648630f88500000403004730450221009ebfe449288e91046d5d0275d39d60011aa37caa6a8c85fc6abcde615f9b27e10220343141071a172062667cc51b26255b77674b11043d495997a91a47e81eb0ec1a0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001648630fba600000403004630440220370a36fcf139828ad38a1b378ae518515cb41df548718fa8c923dd5c81b14d19022014e7ff2509bffc388cadebfc062bf8a155962c158341aec227b5f36146bd5daf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ffe0c90f6d09c7fc23f1462ef5df88bbbe3dba196071fb2fd40450e427534360e8c4f078b0b24db4d8669cdbee4264217e91368b0e42f6d5d147f6de54b1b98cd954a68554d94a860648b88cf806af30da2eae0e70796fd34cd3d305ee37b71d88d3058505cabcb483efffe1f9e6fec1a850b819f25259b2461f0d52217dfc5d92861984dcbeaf665a064e1556d13231169bf9ef3517ad2ffabf21b4e1825ead12e37f630379f7f34b57fdb0f5f7f52ab41780243cfb1765cd40b5c638c55a40b5b4912a8867a6f437221912caecfa2abbba6583f6dba0d0bf3fc799353937c6cabdc6735197fd06a733f4b1f85c44b991f40895e18e6286e81125ac43a92fb