livingwatersd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c3:c5:36:d8:62:d3:39:bc:d7:8a:42:8e:e5:ae:15:df:0b was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livingwatersd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:c5:36:d8:62:d3:39:bc:d7:8a:42:8e:e5:ae:15:df:0b
Serial Number (int): 415066347964654181722291287034923597553419
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:fe:c6:90:6a:29:c5:fc:16:65:9c:58:7a:cd:54:a4:4a:bd:b4:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:5e:4f:8f:14:bf:ad:a9:fb:de:e1:88:32:5b:33:7e:f1:4e:6c:f4
Fingerprint (sha256): 4b:25:4c:aa:24:da:62:c4:89:8f:d3:37:1f:9a:3e:4f:ee:ec:f3:ef:3d:4d:cf:c4:74:87:7b:6c:27:2d:8c:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate livingwatersd.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingwatersd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fasteyes.bluejenk.com
fasteyes.com
felishiajenkins.bluejenk.com
livingwatersd.bluejenk.com
livingwatersd.org
mail.fasteyes.com
mail.livingwatersd.org
mail.oceanbeachtherapeuticmassage.com
oceanbeachtherapeuticmassage.bluejenk.com
oceanbeachtherapeuticmassage.com
www.fasteyes.bluejenk.com
www.fasteyes.com
www.livingwatersd.bluejenk.com
www.livingwatersd.org
www.oceanbeachtherapeuticmassage.bluejenk.com
www.oceanbeachtherapeuticmassage.com

Other certificates including the domain name livingwatersd.org

(limited to 100 certificates)
livingwatersd.org
fasteyes.com
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
acupunctureoceanbeach.com

Certificate

The complete raw certificate details for livingwatersd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEyo0BxWG7JnbykLEwFr
whIIqotz2QVqsSUVbl/e48SEKuO+wAZuprZGP98KsN6+i7N3rPz9usb5/xXTtk6d
Jkrs1qG9+By9/tnDnVIeF4rsN8eo280Eg5H9oJJOG+vfapDBAMBeiP0c8uqwdGgt
C77rDNxXiZVDvTjwhKEDTEA345KRDmj7kX9zfmAB0IPEgmgolB4N50I7Zf75Bt5B
Xzty4mXkhoB0S6/ktRYf3HWNLmjPn5tlLJ78vPDMX3iwcZQsmi/FT9eXQqdMEkIy
HhUQqkE/QR+rVA1YoRnWaz/1ttbAMEQ+0+wnulu6Zqh7s2xOgVTeott7cEk5Ue3W
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415066347964654181722291287034923597553419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 04:45:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 04:45:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingwatersd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24275556725111970282014414476546905134101695143936554024440589246056997673462931278552254818727205474054251527202527375710917822624427436624053612849773470782681446889586706749700577733861211239069129943200842246938909526605145396666256672258936889437849970077563367566873805793159530118689464997631857105636897031027535993040363445997158736398976146797190423938653996966469173884919186246817435183776707361210241505656890155453540517957944355027100608903733187551622505717443500200767381981590078848153484502937876573480550885810424610543221616378817989908000143426372787925836180573165327263907287427086853128181267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ffec6906a29c5fc16659c587acd54a44abdb420
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasteyes.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasteyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felishiajenkins.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fasteyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachtherapeuticmassage.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasteyes.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasteyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachtherapeuticmassage.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e5e255ddc0000040300483046022100e87dedb781666da56612ab2e11f7e623451d04f4955ed8c7abc8fd5483a5676d022100dd1ed5f5ae8e85e07b7356e0314c5ebc9bc32a2a685040d99be798ea1c4dfda60075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e5e255eda00000403004630440220135c54884a1ea8a949a480e7623b783b1cd3f5ba9a6ea8bf4ba77d30823995250220727109bad4056b2c2b0fc0cdbf395dbc4f31308d9aa372a233a7ddba04d5dd79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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