sanantonioworship.com.goodwater.vc

Issued by R3

About this certificate

This digital certificate with serial number 03:f2:d7:b0:69:04:29:b5:35:32:a3:ca:0f:d1:9f:f5:6c:6c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanantonioworship.com.goodwater.vc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:d7:b0:69:04:29:b5:35:32:a3:ca:0f:d1:9f:f5:6c:6c
Serial Number (int): 343971890583471536126023333710877167021164
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:86:20:65:35:3e:e1:2c:fb:f3:dc:c9:35:6e:f1:db:fa:99:0d:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:45:e7:41:44:3d:9c:13:d7:c6:54:b5:5c:57:4b:58:95:3e:8d:6a
Fingerprint (sha256): 15:d3:47:41:25:40:61:97:f2:b1:98:f2:77:ed:ff:f9:6a:bb:3a:e2:46:18:e7:4b:51:b0:10:9c:34:9f:79:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sanantonioworship.com.goodwater.vc

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanantonioworship.com.goodwater.vc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

americas4x4trails.com
sanantonioworship.com.goodwater.vc
touravista.com.sendmyresume.com.buyingsellingmarketplace.com

Other certificates including the domain name goodwater.vc

(limited to 100 certificates)
goodwater.vc
mygrinder.ca
sanantonioworship.com.goodwater.vc
goodwater.vc
goodwater.vc
goodwater.vc
goodwater.vc
goodwater.vc
internet.clinic.metalbuildingfoundation.com.goodwater.vc
goodwater.vc
bake.cool.weirdo.vc
goodwater.vc
goodwater.vc

Certificate

The complete raw certificate details for sanantonioworship.com.goodwater.vc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YnEwUlzbaRue6WI8QDm
QDvdJbsKVIrikYHQdU4qwk6iHss3aCozpQ3FzVH1fWdOyLxlZ5jda2uaAM1QFQIo
ylTY5cBcH2h3Cs/aT9pYl0QUIpH4lYPIxHnQdPO8UsoaNAjGMFSyfj1uePfiKbqO
Cr+28FN3dqkR9bQ8jNylFcB/6VV8jCLA38CYykuJBMkOlRy4rsdWvo3jSbLB1vOc
BgwW3nP+MgtSJYkIrT49OTHo+/JdyAHsJJaTFQKHhDaj/7+xKVOW63ABv57pmZG+
ydDavI/VJY77O4BXKq5XA/rejYDyxtmOG5QTO3SzV3On9GNnwwDaPXtoEY/YPVMc
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343971890583471536126023333710877167021164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 14:36:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 14:36:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanantonioworship.com.goodwater.vc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29481461273108418844194398087726939322505463773357407688784824532203352976775407106489734812110805478770714108709919594810494101302101781336199046145180948536583028792762201591373560194710329803494835946002943845351268628061958761347800973100126131714484000170179021105746251405601520606580899977994344088464133737379845708803894141969246384360619578006551881544062720887997123720168477934008304829828329086046730274409931508451224014301488162870719196539767457130665551341773616735757756304872752434054350631778118829330751257915606522907157533866002639627093581290393736566951659551493826931653400655214790912973903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07862065353ee12cfbf3dcc9356ef1dbfa990d6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americas4x4trails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioworship.com.goodwater.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touravista.com.sendmyresume.com.buyingsellingmarketplace.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b05a260290000040300473045022100b08caf4d356b5c9bd7831ef12bf4c9ead674990b4bb2ad7d23d831f3822389fc02204b0c1343c1a0c8f66bfb1c2896f2a1efce084194983beec2e9570d284dc547c10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b05a260170000040300473045022100ab7f416b03b64d2eca50511c37d8ef1926235c09fae72173a980d28cf7aba8c90220674029119e0a47cc7f9f03ce95b6aba42c2f6a5b45d0dad3b0c37f695baf5823
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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