livingwatersd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:35:f1:68:2c:32:49:1b:fb:f2:35:08:43:f8:d4:f5:36 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livingwatersd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:35:f1:68:2c:32:49:1b:fb:f2:35:08:43:f8:d4:f5:36
Serial Number (int): 324360798215846063679947113237281858975030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:3c:1d:5d:bf:20:cb:4a:0a:ad:8f:3e:78:ac:b5:94:5d:22:aa:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:08:6d:79:ce:b3:1c:07:a9:f5:40:b1:ac:09:47:2a:7b:40:63:ae
Fingerprint (sha256): e3:ad:c1:78:f8:cf:7b:2c:8b:75:11:0b:8c:ea:cc:15:c7:03:4a:55:4e:87:cd:55:86:82:d3:c1:27:44:ed:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate livingwatersd.org

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingwatersd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livingwatersd.bluejenk.com
livingwatersd.org
mail.livingwatersd.org
mail.obacupunctureclinic.com
mail.obcommunityacupuncture.com
obacupunctureclinic.bluejenk.com
obacupunctureclinic.com
obcommunityacupuncture.bluejenk.com
obcommunityacupuncture.com
www.livingwatersd.bluejenk.com
www.livingwatersd.org
www.obacupunctureclinic.bluejenk.com
www.obacupunctureclinic.com
www.obcommunityacupuncture.bluejenk.com
www.obcommunityacupuncture.com

Other certificates including the domain name livingwatersd.org

(limited to 100 certificates)
livingwatersd.org
fasteyes.com
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
acupunctureoceanbeach.com

Certificate

The complete raw certificate details for livingwatersd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolIo0FPlY77jEh4OcbWK
FicyhRwwg0wKdVih/Rs7qLbrj5saXxFOcuNjf8toTrwrffvzkpsNfJsyFNCXRHJj
XSsrztg3hzdPtuS0NPLkve2LCkbbq7rv6iRqQzxYtX6tSlvCnj+qpW81u655Vs0S
IvqpHtW2VupfgiLyufuqN1+LKhLJYjVLk3NG6HP8JRtTGpqO7Zq3OO7RNoNHdJqf
CSyhf2iB5E+saNuD5uoHLCENvT8wNNPkPKDwQGCZ1vRePVAfJO7dTwXsBFLJKUMY
Q85BJsnjCJDT8vedimiXWyUjWu+UZYfmoafAsWdGhkPxr01ONdXL2q6B1H1mCzeS
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324360798215846063679947113237281858975030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 04:25:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 04:25:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingwatersd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20491119728846485380608059021734317199860341986351987495065916158475501741388105444151889726218292828373235299006831276402949497212943907084070212314439287484947662229595366632186348058984992308874717365100031744590867747825878890162832027506863070963095365851844508527473705826641170269337126026661805840867597535319973616724357423190870990294428334288694319252060421520035391116779750227502892982333661917293481727240990647962487973707351602899042048919712639698323137844612084288020680588248166877141600574989561005437108951902799799209170256209197113395936124211101014718037582025156575571153673028428340158501597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad3c1d5dbf20cb4a0aad8f3e78acb5945d22aa48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.obcommunityacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obcommunityacupuncture.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obcommunityacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obcommunityacupuncture.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obcommunityacupuncture.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aafa6d73000000403004830460221008d076e0539a24d061057630d2671ce6fe640c89afd9143d2c7c9cdd8c8a6d798022100e261d75692f218f59068395dbb3a13ab88588e715b6f4e08d75fb629435d8cb1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aafa6d9b50000040300473045022026755328f31548e5d417e23899a35847332eeaba67e97416aaec9df1ce561733022100863a58af05414efc7aaed80062986fd38ff2e8c6545cf7146d73f13f5d558fa5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0098ee642d7332d1bc8ff469d5ba646bf6bd681ace4d464f41cede0381b972e321e209cbe58f1597e5df57cf90d9697bb701f28fcef1e79a52fb1a110cb66a9962700d64878d215f2ec3c9b7be414dae287112a8df6c144bb120dee84a48c03ece41cd38b0366a48c4a4643acd9ca99e8dd348e0925a1abefcd76ad6a638c8e34e398c59a503547cdfa9d33d592fc32c0b28dd9cc8c3355026188b473a14ba11faa8c52710f0d66f09456b6092750954245e7521c52fbf7f4b366650e817452f744fdeca341851ef7762ee0c565e0cb9e1646a927b0cee137ba3954e70f1b65f3646881c84fcabbd78873f6f4d539a358e4385eba28a444985f9b4122372133e49