waterofchampions.org

Issued by R3

About this certificate

This digital certificate with serial number 04:ca:4d:6c:77:10:01:b8:83:5f:c7:b6:f3:bc:c5:dc:09:37 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=waterofchampions.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ca:4d:6c:77:10:01:b8:83:5f:c7:b6:f3:bc:c5:dc:09:37
Serial Number (int): 417289095583681642472229224337226784835895
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:6f:a0:eb:b3:f3:8a:5a:1c:19:48:d1:6e:29:74:fb:de:7c:9c:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:4e:f3:42:70:61:ad:e5:70:b6:64:fa:77:8d:1a:fa:40:71:06:72
Fingerprint (sha256): 1a:67:73:84:90:a4:13:b4:18:16:37:12:e4:57:17:ce:ca:96:ab:ee:c4:21:3f:77:9a:7b:9f:c1:22:02:d4:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate waterofchampions.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waterofchampions.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aichatbot247.com
anesthesiaprovider.com
energyhealth.xyz
hikingathens.com
howtogetyourloveback.com
juicecleanseinfrisco.com
meet.cmcsmen.net
plampton.com
southtexasfitnessandhealth.com
waterofchampions.org

Other certificates including the domain name waterofchampions.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for waterofchampions.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISBMpNbHcQAbiDX8e287zF3Ak3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjExMjQ4NDdaFw0yNDA4MTkxMjQ4NDZaMB8xHTAbBgNVBAMT
FHdhdGVyb2ZjaGFtcGlvbnMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyOZFSeY8T3614r8pEjq12srXhDHrsyDtr+0LphmyYEE+4cI/3JlF9OQv
6NFbJXl/Y+Wnc+x0lbolmBjFJXsjP5z+7z8LwB4nN4iPIeoRdU6TtFJdV9yR933E
T5pLNMAvrgWCaCx2djUaJE4yjwn9jgsKEzCQ7Rp/TZp9oEEt6ZZlg7/ZihN/MuZc
p2SJK78SApqet2K80DZPdA/W4zuKdN4j5yMsAYi4AWxM9mRuNv5nsIG69It/Sog3
pWFbu7oVouVj7x/MXEFk8/QZ0Knx9MpNXKzLrv2q2cfVz5FOt+fRPF8xtHe7X7hG
udSSaElEgua4Og0hUOjcY8+MXVG8NQIDAQABo4IC2TCCAtUwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQbb6Drs/OKWhwZSNFuKXT73nycKzAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCB4wYDVR0RBIHbMIHYghBhaWNoYXRib3QyNDcuY29tghZhbmVzdGhl
c2lhcHJvdmlkZXIuY29tghBlbmVyZ3loZWFsdGgueHl6ghBoaWtpbmdhdGhlbnMu
Y29tghhob3d0b2dldHlvdXJsb3ZlYmFjay5jb22CGGp1aWNlY2xlYW5zZWluZnJp
c2NvLmNvbYIQbWVldC5jbWNzbWVuLm5ldIIMcGxhbXB0b24uY29tgh5zb3V0aHRl
eGFzZml0bmVzc2FuZGhlYWx0aC5jb22CFHdhdGVyb2ZjaGFtcGlvbnMub3JnMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAGZgQ
cQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGPm2lniAAABAMARjBEAiBd
bS6HFqemlsyJlOMNI9saa2qBMBU3BzLG5AOpLkxF2QIgAPwPTZNYWsUHHDOURdKx
pWXFeSV6Li2MGUawk0dVlmsAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+Zn
TFo6dAAAAY+baWdkAAAEAwBGMEQCIByZB3VOQyAMvmZ2kGaQKKtTOe83YfW3oVCi
waU4poMdAiB6jww0NUgCJnN77zTo4en9IlIlc8XqhZxE/z9eWMIEmDANBgkqhkiG
9w0BAQsFAAOCAQEAXrsA7qrdwsmQlykrhUdOWW82Cp4+7Wu+P/J1wqaSDgfvIq6M
idkyrqHvKp/N8Zf4awjXaRaZEJxLYh+hwoBMd4ZyiHGMnyGEkDDHPJbnvcj8JPhx
Vx7F1c45Hcm52GolxsRN8jBLMOzvSiewrl7Ly4kmLrp/glIyadlhbrTjy0qBRQf8
3VotQS3ni3joDc1V3Yf1HUz1BQF3FYMan7naVseh+jjHLplnSj2r8eEDeU0QkFm2
cxlZEFSiqg4neLqJOWRq/FeVkBYM+mG8JrTKPr3PjteI9linkcnPzurbaxHrRCb7
1eUu5cozkTgO1zlD3SC3grVDZC9uS69Ep+EROg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOZFSeY8T3614r8pEjq1
2srXhDHrsyDtr+0LphmyYEE+4cI/3JlF9OQv6NFbJXl/Y+Wnc+x0lbolmBjFJXsj
P5z+7z8LwB4nN4iPIeoRdU6TtFJdV9yR933ET5pLNMAvrgWCaCx2djUaJE4yjwn9
jgsKEzCQ7Rp/TZp9oEEt6ZZlg7/ZihN/MuZcp2SJK78SApqet2K80DZPdA/W4zuK
dN4j5yMsAYi4AWxM9mRuNv5nsIG69It/Sog3pWFbu7oVouVj7x/MXEFk8/QZ0Knx
9MpNXKzLrv2q2cfVz5FOt+fRPF8xtHe7X7hGudSSaElEgua4Og0hUOjcY8+MXVG8
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417289095583681642472229224337226784835895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 12:48:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 12:48:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waterofchampions.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25361211687190235249554964249812425432304877081932129309120624980478119663485905198955053984154211088957963353286448587431902806619073683773313520219386162863006128665193150866336811884456380619816137993592808071574955096223849302563318032460352246627788136285376939990016747313685888996295942270056365704577876607626088535183174297727649156754379849615067957477498080967686363855045388865655598248798358445105995137051310524173777261421068395936136781649767765846688681722246302145839947040184064097177512750534307625988318244075924632168524814505378375296144354252125117873098488583351085031733310969714271310691381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b6fa0ebb3f38a5a1c1948d16e2974fbde7c9c2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aichatbot247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthesiaprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyhealth.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hikingathens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtogetyourloveback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicecleanseinfrisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.cmcsmen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plampton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southtexasfitnessandhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterofchampions.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f9b696788000004030046304402205d6d2e8716a7a696cc8994e30d23db1a6b6a813015370732c6e403a92e4c45d9022000fc0f4d93585ac5071c339445d2b1a565c579257a2e2d8c1946b0934755966b00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f9b696764000004030046304402201c9907754e43200cbe667690669028ab5339ef3761f5b7a150a2c1a538a6831d02207a8f0c3435480226737bef34e8e1e9fd22522573c5ea859c44ff3f5e58c20498
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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