foodhelp-stg.nyc.gov

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:14:7e:bc:0b:e9:42:8e:6f:5f:c3:e3:c6:50:8a:07 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foodhelp-stg.nyc.gov

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:14:7e:bc:0b:e9:42:8e:6f:5f:c3:e3:c6:50:8a:07
Serial Number (int): 12069468381425881328529639070101441031
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0f:16:bb:24:1f:a2:e7:69:6b:9c:d0:10:32:59:86:e6:b5:fd:36:e8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 7f:92:f1:4f:39:c8:76:ba:b0:bd:09:d5:a9:ee:96:eb:e0:01:3f:46
Fingerprint (sha256): 01:88:f1:d5:00:ff:88:bc:19:e7:c2:72:5c:26:33:ad:db:3d:98:8f:07:c1:e3:7c:cc:52:38:39:50:61:85:0f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate foodhelp-stg.nyc.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foodhelp-stg.nyc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foodhelp-stg.nyc.gov

Other certificates including the domain name nyc.gov

(limited to 100 certificates)
a806-housingconnectAPI.nyc.gov
a858-anltw.nyc.gov
a069-ra1.nyc.gov
webapps.nyc.gov
a127-jobs.nyc.gov
a827-mwbe.nyc.gov
legistar.council.nyc.gov
mspava-vcsxcl01.nyc.gov
*.nyc.gov
foodhelp-stg.nyc.gov
fisa.ctxns.nyc.gov
zap.planning.nyc.gov
5685570869133312-fe1.pantheonsite.io
a858-nycnotify.nyc.gov
psc-esa1.nyc.gov
a860-openrecords.nyc.gov
manhattanbp.nyc.gov
a127-HRFTS.NYC.GOV
a826-depvpn.nyc.gov
enterpriseenrollment.dhs.nyc.gov
A127-uag.nyc.gov
a806-housingconnect.nyc.gov
regional-viz.planninglabs.nyc
zoningresolution.planning.nyc.gov
migration.planning.nyc.gov
a073-ils-web.nyc.gov
Apply.council.nyc.gov
a827-bladerunner.nyc.gov
www.nycbers.org
laws.council.nyc.gov
a816-certifytrn.nyc.gov
enterpriseenrollment.tlc.nyc.gov
a002-oomwap01.nyc.gov
a002-oom03.nyc.gov
a858-nycnotify.nyc.gov
a860-gpp.nyc.gov
Portal.dss.nyc.gov
a810-lmpaca.nyc.gov
a816-evitaltrn.nyc.gov
a858-aaf.nyc.gov
skypeaccess.dep.nyc.gov
enterpriseenrollment.cto.nyc.gov
5685570869133312-fe1.pantheonsite.io
laws.council.nyc.gov
nyc-factfinder.planninglabs.nyc
law.ctxns.nyc.gov
laws.council.nyc.gov
a0333-passportpublic.nyc.gov
gis.nyc.gov
a069-cmg.nyc.gov
on.nyc.gov
a826-web01.nyc.gov
a127-essdr.nyc.gov
transit-survey.council.nyc.gov
iwomm.council.nyc.gov
nycpss.nyc.gov
transit-survey.council.nyc.gov
lotselector.planninglabs.nyc
comptroller.nyc.gov
enterpriseenrollment.dcas.nyc.gov
a856-ptdb.nyc.gov
comptroller.nyc.gov
otcmail.nyc.gov
mentalhealthforall-stg.nyc.gov
a801-sbscssp.nyc.gov
a827-bladerunner.nyc.gov
a858-anltw.nyc.gov
membertimesheet.council.nyc.gov
a127-pip.nyc.gov
depwebmail.nyc.gov
comptroller.nyc.gov
streets.planning.nyc.gov
www2.nyc.gov
*.nyc.gov
a127-ess.nyc.gov
schools.nyc.gov
on.nyc.gov
a826-ocsedge01.nyc.gov
mtpralpwvcse2.nyc.gov
migration.planning.nyc.gov
a841-dotwebpcard01.nyc.gov
mail.council.nyc.gov
psacmeetingadmin.nyc.gov
a127-jobs.nyc.gov
a127-hrp.nyc.gov
maps5.nyc.gov
a826-umax-accssrs.dep.nyc.gov
dotwebmail.nyc.gov
doitt.ctxns.nyc.gov
a827-dsnyftp.nyc.gov
A127-uag.nyc.gov
webapps.nyc.gov
a127-rbp.nyc.gov
a858-eds-tstxf-fa01.nyc.gov
bronxdawebapp.nyc.gov
council.nyc.gov
a032-secure.nyc.gov
securetransport.nyc.gov
mail.nycboe.net
fisa.ctxns.nyc.gov

Certificate

The complete raw certificate details for foodhelp-stg.nyc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz58mepgLxgXb3aFhMI40
8OIQ/ThUj266LAbdvH0aDNQuAFF2m1ZBMIXlLVbVolTNwZSQJ4Fbrl3Opq09NZO8
Rppxr1YVIwaiaR+nxs+YLwbq6sWPwkzDcseuZ6FYVhuKRWli4oyPODG1XWkpNJYD
7aNl5tsfQoaWqZxTQc/bAtRWx60BaINiYTt/C5lNQGOlDCNNuLJv8FW+uPU/Rdwz
hbMZ3uJLL1CBmIUUxMFK4GLfEcZ7ZsZAWT+sOQd9bn1C1337vSARlJF03RTcgxAg
772KLedGBo/+jH7x1aFpmJRuRggEIp7g61MVmCo2d3nv5vRPbK1SHuS/n00OuoBi
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12069468381425881328529639070101441031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foodhelp-stg.nyc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26209809069902952509341890438660004021399192057833467474988265095625969388643311145543476394508096491203962103763257459796433278680535513739618428810431557705967634280407319259992924320088168989496492381494591821930972112312991090067439281264472074673102530765038629778634921129281955713936264157966390753827564542968988111606968089090335647776770654900063646191706276831422315474865544827574743608757277982558543567470008142439834127670086565874218488041398272573774585680115053048699870854838742857079724260728148572094438389180227465858269994549438087034411602514156429621228079238592483798812847516432314446930549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f16bb241fa2e7696b9cd010325986e6b5fd36e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodhelp-stg.nyc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a2e74c4298dcd3011186cbcc4233c89aa6a17c433198983a3e6f1ffc0fd7aeaa82369f22acff01eaa3db7599317d2e413e2a3600d1722e4f4eb6558b16f396b3d5e0870278c8784e98ed2e96b12794fdb04c3f82ffdf61be95979df2c0c7178358656809d0f04aa0f268a5986ef6d10a82b6dcbfb86545266e04c2b45cfa4c0080da54cc574cb4ce36b5176badaf80edad69dc7de4e6827d21b0297aac87f74d9d9d91e335e51ffdcb29a344e92d7a15928bc0c49b0751c393eca80fdd50d8e0790e492364ebe008955dd69bf1aa890020db8e62ce612785e179d9572df9fcf13b3cfcba800a635847693c07fc09e25d8498fb05e4ed2c582f0df12def7057737abedf5765fa49b8d9de53c221786d6ce13d7454843384d5ecd22b0ab51b745694410e177e8ea7102ae67d942405dbfc1891e4912546c4a5e9d18d5a5166a25aeb0d7f0ef0ea41bff4455604be0919ea8aadef1267ec27c7f4e484e26e4bd324888bd5bd6652202b01065a79bc2e2dbdb6e16e4c390ba1ca39f078f0af2f34311dab5ac8fd3fca000173a6b760b41e3403cb775289504b0ef95c80b7ac1d376582e31719c82e8a47f2624dbb5c7ac7653e1de7ac29fb7d670e4453c7334c97854493f3102ed1ddc39f9a5afaf5f1f3029e67cb996e0d2f0ad3b964dccf42e8bf6cb6d52688f5b20112cd9cbb9b12ce564169773a8ec907149b8a5ebdfe943a76