livingwatersd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:ba:c6:d6:5c:19:30:01:d1:fa:a6:52:d0:a2:4b:46:75 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livingwatersd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:ba:c6:d6:5c:19:30:01:d1:fa:a6:52:d0:a2:4b:46:75
Serial Number (int): 295613363317101011829490178523183048246901
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:2f:3b:cf:83:8b:a6:14:73:ec:27:e2:4a:c5:54:da:47:96:13:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:0b:1e:6c:d4:56:b9:a0:0f:e4:9e:ac:5b:88:3f:08:95:20:ec:b6
Fingerprint (sha256): f1:ae:46:cb:fb:eb:f9:8c:94:34:82:fa:94:e4:e0:15:5b:ea:a8:e3:46:43:79:d2:77:62:0e:1c:4e:36:41:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate livingwatersd.org

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingwatersd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acupunctureoceanbeach.bluejenk.com
acupunctureoceanbeach.com
felishiajenkins.bluejenk.com
livingwatersd.bluejenk.com
livingwatersd.org
mail.acupunctureoceanbeach.com
mail.livingwatersd.org
mail.obacupunctureclinic.com
mail.oceanbeachtherapeuticmassage.com
medfordcomiccon.bluejenk.com
obacupunctureclinic.bluejenk.com
obacupunctureclinic.com
oceanbeachtherapeuticmassage.bluejenk.com
oceanbeachtherapeuticmassage.com
www.acupunctureoceanbeach.bluejenk.com
www.acupunctureoceanbeach.com
www.livingwatersd.bluejenk.com
www.livingwatersd.org
www.medfordcomiccon.bluejenk.com
www.obacupunctureclinic.bluejenk.com
www.obacupunctureclinic.com
www.oceanbeachtherapeuticmassage.bluejenk.com
www.oceanbeachtherapeuticmassage.com

Other certificates including the domain name livingwatersd.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for livingwatersd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXA9YtxgMYrVm9LuKlzw
7SIGYVIPqYR82WW8WrdVGbtwxxfgXA7hjo9HhUhYoEWVtMFdoop4eeCe+TPvtLTN
X/3aCa3pornSov8YECfxm3NMbFcKUH7mdJ2IqfEUSqNqLKbO1TmnWeUDX7PImbuE
V+48fenlHi+/XOcT2dGRp3zUxudLg61Dw5xQ88TxajdvO0FGipZCgYBotK4Iw/hT
WcQrd38kj2TfpfvlP69Lfm08SxybMSRq7HSe3Eph4LTCiAZViXx5Gb+/S/feZO11
RIkiYfUa7girS12zyxOkUifZy+UhSrisnKylmpeeD2DHI6H4F4/199KJgNR+1zGt
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295613363317101011829490178523183048246901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 03:59:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 03:59:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingwatersd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22904480702010423596005317406155845229630228831628947944146844842594165028579907995576757668910899300958229786957689055424032182492526740096285001843114373032768319309276978088866676508761784186201037826271418016632954870157287438301714306150526633610177252266255099568303447316723671843333063014480006637106191679865509303878749572809926911358673255417641177154422007070755128937736561011810637621454748306869303224062248759645218410832197784959065627507650977994986831227609630241117944406043032274076725614871232100158862008335218821127816804180235303492532333932711192191934325043427177558370275181919413669572001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a62f3bcf838ba61473ec27e24ac554da47961311
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (747 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acupunctureoceanbeach.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acupunctureoceanbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felishiajenkins.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.acupunctureoceanbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medfordcomiccon.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachtherapeuticmassage.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureoceanbeach.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureoceanbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medfordcomiccon.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obacupunctureclinic.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obacupunctureclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachtherapeuticmassage.bluejenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanbeachtherapeuticmassage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169756b3664000004030047304502207ea539d6a1f9196fdd428c960f849292b34995100876eadf0108683fe0d88f71022100c6166a1544e8e622fb60108cfbf906c1d7f5d6f73024abc74c3a78e578b56d92007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169756b34ba000004030047304502201c00a4eca4d6e772aecde84408dde7ddc08d23ee1f07326fde71d60df4ee786502210091b15105616c207d063dc506215a7fffb60f83b518632c4198fbbe2c060ecc49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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