livingwater.bible

Issued by R3

About this certificate

This digital certificate with serial number 04:63:bd:5f:69:98:d9:f1:14:d4:7b:5e:fc:02:02:7b:62:ea was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=livingwater.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:63:bd:5f:69:98:d9:f1:14:d4:7b:5e:fc:02:02:7b:62:ea
Serial Number (int): 382388817553381943160187476132463776588522
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:ad:d8:ae:bf:d9:53:a4:b0:e9:a1:4b:93:b1:5d:87:26:49:74:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:29:0f:bf:d6:a2:10:e5:bc:5d:e2:dd:84:73:93:f3:3c:5f:ec:c6
Fingerprint (sha256): e4:55:4e:48:8c:d8:de:55:7d:01:66:21:ac:98:e8:85:78:e7:7d:75:3a:10:c6:91:2d:fb:a9:b2:66:33:71:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate livingwater.bible

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingwater.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2020dollars.com
chieftruthofficer.com
dangering.com
donate.cmcsmen.net
england4vip.com
evangelicalteachertrainingassociation.org
greenscreenstage.com
interviewquestionstoask.com
lierotic.com
livingwater.bible
nicehealth.org
restoration-news.com
sammamish-living.com
sculpit.info
smileessence.in
suncollectives.com
thegreenafricaproject.org
worldlifemusic.net
www.russianbrides4u.com

Other certificates including the domain name livingwater.bible

(limited to 100 certificates)
sanh.co.za
livingwater.bible
suricate.ca
livingwater.bible
livingwater.bible
xbone.co.za
livingwater.bible
xza.co.za
livingwater.bible
livingwater.bible
samuelharrison.com.livingwater.bible
livingwater.bible
impossible.ca

Certificate

The complete raw certificate details for livingwater.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPshok2oJXOafHdy4Ooi
s3l033GhcZcpghVwQvBMigcmoq2WFWuShJkBKmkBE5g5gcvDHMrXrtuu+fuSr25Q
F5TIfJmosROs3GqKpY3fY37GbKcbmeJTXLwmf9c28ohEst2YKGqXNL2kEhw7wusJ
6MB5x7lOE9GsK5qsmK+hQlmYl2jzkCYuu3IV8jaL5KEj6p9YqXq0zyDiiUayJ8gH
QmceUil+Xfs+zblF4INOrByzAjs5wO0iFqwfOLkzmrAD7rxvkh1M4Jd+AatB0XWK
dhBy/1ajly8I+QrpTV+O9stjJUyWbjDfPWNBFuHHeTs5hX21j69yljGmCFqtuJNJ
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382388817553381943160187476132463776588522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 06:03:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 06:03:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingwater.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20321966294916154841499199864743526007957245253552319833518215315636341285067320836354489467793375679863821206943512480343044936396930860302702196054433777553209255932586573306766805371477876944460757994848130714494497537009193078660696000102579070095818716281349029677795658173488863067554949462531249509360843696741675279871069528361018730101825821076011044721370108755483951510305491259752009210639028140290780521691426200581828580059770334543478620916811338127038289596471553317166816239932847446839741532236039899335609013830356808508174303033033541736466857156212284927737217264479877463976601748714016063310099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4add8aebfd953a4b0e9a14b93b15d8726497438
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020dollars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chieftruthofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cmcsmen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'england4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evangelicalteachertrainingassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenscreenstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewquestionstoask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lierotic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwater.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restoration-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammamish-living.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileessence.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncollectives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreenafricaproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldlifemusic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russianbrides4u.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ead121c7200000403004730450220419531a05ce3cfbf178330b54aa6e8c1ae81413b5f74fb86b30e643a04256b9e022100915215c2ecaf8309516546f10ec49c46e1fa246989e9a42bcc913d1a792baeb60076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ead121c7b0000040300473045022100fd6374058ec02873729c84f57cc511bf3e176eaa2e76ac669ff954676a9a7af30220670ba17961062976d03c9e97e7cd22703d66a4c9f7ccc81b188d07cfe33ef59b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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