newyorkholdings.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 6e:3a:e9:d9:32:88:a7:0d was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newyorkholdings.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6e:3a:e9:d9:32:88:a7:0d
Serial Number (int): 7942918011886282509
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 7d:02:5d:2a:58:d1:8c:f7:f5:c9:63:11:7f:02:bf:53:ea:78:c9:a0
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 4e:d6:aa:86:1d:f1:5d:dd:37:56:00:a2:6c:87:85:ca:22:64:26:b3
Fingerprint (sha256): 1d:15:40:7e:f5:26:4c:99:e4:86:4f:9f:b9:5e:d0:44:a0:63:af:6e:a3:0a:6f:c3:4d:18:32:c1:7c:b5:45:84

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6726.crl

Check the revocation status for certificate newyorkholdings.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newyorkholdings.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newyorkholdings.com

Other certificates including the domain name newyorkholdings.com

(limited to 100 certificates)
newyorkholdings.com
471.me
newyorkholdings.com
www.newyorkholdings.com
newyorkholdings.com
www.gofromplantoprofit.com
www.newyorkholdings.com
newyorkholdings.com
newyorkholdings.com
syntheticskull.com
www.thermov.com
www.esanfrancisco.com
www.newyorkholdings.com
www.toshibay.com
www.bedsteoddstips.com
sognieracconti.com
denim-jackets.com
hytechsystem.com

Certificate

The complete raw certificate details for newyorkholdings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7942918011886282509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 17:49:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 17:49:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newyorkholdings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870220361907299743000732400863140365404265274588771191387698125016990618685100761235015557221206848859186582972706021502759903879136484821852227259547496786994575005603889392488512848987128325551318718598573271259124036461500015688570808022144198272116289863141084118722636789773619579788169123289200249810757902571528610218025842626745214903027290175205376651273215228304383389247676206813047687984072670227678511752751660075903335351102085367647897362401122519140879414214456021883548441439642021838237840988875542184881587908754933018431407195255299443308735377053399536934725136772993531221087076583053195854798112812624756669622554977613809115308525065151502758579587131277850120121124847056297204341189690532947245806670790520588244345315571987742010266612620942669598177118173276114581473588519581662726747200500068442898739912794919557510770911181482251677557440674144429154410616119322666421879850168668083774307582261883665754411724179738898156480530675424469573252806710143286810553616389413060090857836950818527827660509691247244658060031026233120745071439199159069073306209682719238816557816721948130434694286999333730876084629565199769455099926354115897232695854058222393455963352848859539994891257247421668377467880049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6726.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkholdings.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d025d2a58d18cf7f5c963117f02bf53ea78c9a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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