webdisk.goodforyoufitness.com

Issued by R3

About this certificate

This digital certificate with serial number 03:75:b0:d4:1e:b1:68:f6:23:60:74:ef:ca:62:c4:7b:98:8e was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webdisk.goodforyoufitness.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:75:b0:d4:1e:b1:68:f6:23:60:74:ef:ca:62:c4:7b:98:8e
Serial Number (int): 301384940241750851620584932150812260145294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:b9:4f:ab:d2:52:69:4f:89:40:c8:4d:90:3e:8a:2d:77:19:90:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:02:17:6a:22:1f:7e:c2:58:2c:f3:07:d0:8b:a7:9b:52:7a:25:5f
Fingerprint (sha256): 89:79:28:7d:3f:16:8b:34:9f:37:90:3d:6a:51:81:af:3d:7f:9b:59:19:d6:ac:f1:92:3c:5d:d4:0d:c3:2f:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webdisk.goodforyoufitness.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webdisk.goodforyoufitness.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.invitationtomeditation.com
*.santabarbarahypnosis.com
*.sbreiki.com
autodiscover.goodforyoufitness.com
autodiscover.liberationfromdepression.com
cpanel.liberationfromdepression.com
cpcalendars.liberationfromdepression.com
cpcontacts.goodforyoufitness.com
cpcontacts.liberationfromdepression.com
invitationtomeditation.com
mail.goodforyoufitness.com
mail.liberationfromdepression.com
santabarbarahypnosis.com
webdisk.goodforyoufitness.com
webmail.goodforyoufitness.com
webmail.liberationfromdepression.com
www.goodforyoufitness.com
www.goodforyoufitness.sbreiki.com
www.invitationtomeditation.sbreiki.com
www.liberationfromdepression.sbreiki.com
www.santabarbarahypnosis.sbreiki.com

Other certificates including the domain name goodforyoufitness.com

(limited to 100 certificates)
knowyourownway.com
webdisk.goodforyoufitness.com
autodiscover.interpersonalcommunicationtraining.com
www.hungrybobo.sbreiki.com

Certificate

The complete raw certificate details for webdisk.goodforyoufitness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE5qnFGPYdkxjTwZNlQW
aViKt3CE8Aa6/G9Iap9hnP9mhiomUuE3eSwMGculEpRBiDkYz4vyZ3zriUKCe6O7
V+93h+hHCq4sU0sgKWk88rbLu9JurN5vAgSTD+voioFoGBpJAtu47PYOCODXSdpt
k6vKvxEk0R29F5B6g9MrJElxtJU8EkmzbAvC9SauonU0jTHSp0QQd/CnDFgsTb41
bPYBdEsZ6XwhGRNO7ITDDsIQzxWmATKjWz/rxNlXxlaVJkBviYkETbnIygqULT/y
ljgzpxMqL7pOeR2uVI6IDWHFqoeuBLXsOazBuz6DkI7ES3AIcHdNK39jqOZm4sZe
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301384940241750851620584932150812260145294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 06:22:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 06:22:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webdisk.goodforyoufitness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20741750606008631602030494290829775626601910339109929394173847097048724878795611679433865433026108667318418133612238649082220403755020505505209395069106487678652967255062809066507895137415319253641374560872124040162936470527521959848959376890428645743670270819600082123153719667407576727190753644779788592082959867458423813263624329500775271228792957488262700685772243884347728162826123659606348409457637178346787748340505934706607332324109304704426809230051678876184413003183929903340087396776001868781810988847361989572876581335190241637137064187205269151193052152783994396888411123992953028180944392710222327996113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56b94fabd252694f8940c84d903e8a2d771990a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (709 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invitationtomeditation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santabarbarahypnosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.goodforyoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.liberationfromdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.liberationfromdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.liberationfromdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.goodforyoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.liberationfromdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitationtomeditation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.goodforyoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.liberationfromdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santabarbarahypnosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.goodforyoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.goodforyoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.liberationfromdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodforyoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodforyoufitness.sbreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invitationtomeditation.sbreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberationfromdepression.sbreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santabarbarahypnosis.sbreiki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fb3c7fd540000040300463044022025482b33abbdc2b0703d84a46b0ddef73ba45260f5a7083b023510846782ee0a02200d216fd2a4034427e3807798af1552fe2d6a7b85039a77b0a99f3b5e990dbedc007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fb3c7fd5a0000040300473045022100cab1d5abdb2f11343e8cecf53e84f157f245dfde17b11180c9ecfdb762c6b97402203f30ca2779958ffab63c0d39977a12f954b65595f9ab3ed9df46d292c4a93309
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00599c3ef8d1eb3cfb735260beaeebf78cdfcbf0b03f73fdbc0d411ac24426c4ed59588f8088cbfd53b53a302f12a49543aadc46cb889a543d3a67fc07c7715e34dac46c9fb0a3fdd56342c8148fe53002d360880f5e9ddc76b36d40a95a0b66583fa480e72e1a8c045bd3f9494ef8d6061b86f17471167240fc4015998f10303e9accd56e52b9656837e212d527e0586a7373d3eaa896be9efef0bab1007b6ac4385040415b93933ff517c8d3e3c81432fbd92692c42b127e1b143615670af1981467155ed53f6ceeb6078bc9f725dd5a5e2678089cc9cf497bcf273198158439bc8d79247515ff35ea16b0e2184724f0098c2af6926e68f1d830abda1b69bf1c