goodwater.vc

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:25:65:49:a8:40:c0:6f:c2:3a:ce:d2:7a:46:11:70:31 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goodwater.vc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:25:65:49:a8:40:c0:6f:c2:3a:ce:d2:7a:46:11:70:31
Serial Number (int): 420978995232973905260202179096073835999281
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:cd:8c:23:6d:8c:7c:8c:c7:5b:78:c0:dd:92:f6:bb:f7:c4:ad:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:ae:44:78:fb:e0:79:c1:15:05:f3:ea:11:9a:1b:cf:36:8a:41:cb
Fingerprint (sha256): 7e:30:2e:7c:4a:a8:ab:47:ad:ad:fb:52:bf:7f:46:9b:cf:52:be:41:be:c6:58:84:8b:82:b3:f2:36:bf:10:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goodwater.vc

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goodwater.vc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alarm-monitoring.com
bigdaddy.reviews
goodwater.vc
justpoornovel.com
lgbtq2s.com
losangeleschillerparts.com.diagnosticteststripscom.com
thesalvagemasters.com
thisisno.com.cloud4vip.com
www.theartofprivateinvesting.com

Other certificates including the domain name goodwater.vc

(limited to 100 certificates)
goodwater.vc
mygrinder.ca
sanantonioworship.com.goodwater.vc
goodwater.vc
goodwater.vc
goodwater.vc
goodwater.vc
goodwater.vc
internet.clinic.metalbuildingfoundation.com.goodwater.vc
goodwater.vc
bake.cool.weirdo.vc
goodwater.vc
goodwater.vc

Certificate

The complete raw certificate details for goodwater.vc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISBNUlZUmoQMBvwjrO0npGEXAxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDYxNDQ1MDFaFw0yMzEyMDUxNDQ1MDBaMBcxFTATBgNVBAMT
DGdvb2R3YXRlci52YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJl
0UYERn4plf9MisSbQ4tKJfeNOvMmHjqlh7fnAcz03EPVgosXGaZ66WuqRYZl+m6z
LJ7eIPgP7BzTQ04s7jp8HT1NyzLtxXDZsGgz0HEmI3mOwjcatewBItOypLcw29Ex
qzczgRm0m6m6uCQgXSyskuD7vdIfURn7Ew3OAHfiinIJO/giSZpWGw19Rv0vbWSd
cHtkd2OZq7sDlWoXQDQDCSIeZhoJFiVfv1wOtStnQZpd6WvL9UUuY7LGQSpq2AJ/
V7XaB0WOTgzEli7VH4OPoc/GNYa3B/YlAs4yfreebnU8kXqA7I5wCluLyh9Q0d+S
76sibsfQbiRLlHP9jqECAwEAAaOCAucwggLjMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUYs2MI22MfIzHW3jA3ZL2u/fErYMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ge4GA1UdEQSB5jCB44IUYWxhcm0tbW9uaXRvcmluZy5jb22CEGJpZ2RhZGR5LnJl
dmlld3OCDGdvb2R3YXRlci52Y4IRanVzdHBvb3Jub3ZlbC5jb22CC2xnYnRxMnMu
Y29tgjZsb3NhbmdlbGVzY2hpbGxlcnBhcnRzLmNvbS5kaWFnbm9zdGljdGVzdHN0
cmlwc2NvbS5jb22CFXRoZXNhbHZhZ2VtYXN0ZXJzLmNvbYIadGhpc2lzbm8uY29t
LmNsb3VkNHZpcC5jb22CIHd3dy50aGVhcnRvZnByaXZhdGVpbnZlc3RpbmcuY29t
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA
ejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKaysb3gAABAMASDBG
AiEA+SI7mWFRt+Pn4TG8aLY+Gyltc+3FosU0vPzq3o28aroCIQCn1GVAMQvlySFy
2rr8MvsCUTj+Y6v+V9PPN5+jP3k4dAB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs
62nhd31tBr1uAAABimsrG80AAAQDAEcwRQIgJYUPhDmrlPQOfqls0C2P+IXDinX8
UAtIJX25gqM7T8ICIQDHSnNt/Wdywm9zJjt91E0NjcbRJZ3toBBhL9Nfo4CfsDAN
BgkqhkiG9w0BAQsFAAOCAQEAg8wMRduwkCap4oSsOYpKfc20MOsz3kEfWi1+DsJr
RMq1q80qm4HZJI9RX6uUSy4CvZvYKNW2jZlQS5uz/LIDPVPCvEsDg3EeLZpzaC26
6WlXz/GjtQjwUjMTrpGj3b8SrSzLNQdwNe3XPqMRoNQbPeYFlP6tqnxjCL3RMXtw
66/V+t5pLUppOaE9+BJgCf84de2gyW3jYbaK7NjuMK0QQgvd8XKColTK6kKZaluO
CIj4S3G0+to0YHpfPqAbqGpCBLWga7Z/en0o0a0K2V3fMWRVjo1K+BpHRtay/5IA
vtWWewCnELkFo7oHMtSpq3nXuY06U9v6fgUE5LJHU00qFQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmXRRgRGfimV/0yKxJtD
i0ol94068yYeOqWHt+cBzPTcQ9WCixcZpnrpa6pFhmX6brMsnt4g+A/sHNNDTizu
OnwdPU3LMu3FcNmwaDPQcSYjeY7CNxq17AEi07KktzDb0TGrNzOBGbSbqbq4JCBd
LKyS4Pu90h9RGfsTDc4Ad+KKcgk7+CJJmlYbDX1G/S9tZJ1we2R3Y5mruwOVahdA
NAMJIh5mGgkWJV+/XA61K2dBml3pa8v1RS5jssZBKmrYAn9XtdoHRY5ODMSWLtUf
g4+hz8Y1hrcH9iUCzjJ+t55udTyReoDsjnAKW4vKH1DR35LvqyJux9BuJEuUc/2O
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420978995232973905260202179096073835999281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 14:45:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 14:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goodwater.vc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22520626351973910567185850603079119377318932166543625686834825406409520227739514943179003279099689826173436738755546760122675306939577155254216628849709476474376413478272323916293281892217333237874249606200997188310126597216968212082456793737748969013444021940989836038669338223373003837445110177319555871032404591483511517030618913238679552147887318597543230592261614088968949493845478180603500713693292603616722764370457214245752321837152345563025524754055523069018684088796058164697553931805130910708792122364851766542468300691155268590267278338309633001827955419299877109937726042746222569126345070290634870197921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62cd8c236d8c7c8cc75b78c0dd92f6bbf7c4ad83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alarm-monitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdaddy.reviews'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodwater.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justpoornovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtq2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeleschillerparts.com.diagnosticteststripscom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalvagemasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisno.com.cloud4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartofprivateinvesting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6b2b1bde0000040300483046022100f9223b996151b7e3e7e131bc68b63e1b296d73edc5a2c534bcfceade8dbc6aba022100a7d46540310be5c92172dabafc32fb025138fe63abfe57d3cf379fa33f793874007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a6b2b1bcd0000040300473045022025850f8439ab94f40e7ea96cd02d8ff885c38a75fc500b48257db982a33b4fc2022100c74a736dfd6772c26f73263b7dd44d0d8dc6d1259deda010612fd35fa3809fb0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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