200.momentmagazine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:cf:95:81:91:40:18:19:74:20:74:0c:dd:80:af:40:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=200.momentmagazine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:cf:95:81:91:40:18:19:74:20:74:0c:dd:80:af:40:6e
Serial Number (int): 338176316827790052104822097653478223462510
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:8f:59:13:2c:66:41:9a:f2:dc:b5:21:ba:79:21:0e:34:f4:a7:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:ab:7f:87:a5:51:bb:15:df:3f:ed:15:57:69:c0:81:06:22:55:78
Fingerprint (sha256): 21:5c:ec:bc:fd:75:85:98:7b:79:89:82:23:d8:94:59:43:cf:d1:37:e0:1e:12:e9:8a:06:a0:53:93:5a:96:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 200.momentmagazine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 200.momentmagazine.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

200.momentmagazine.org

Other certificates including the domain name momentmagazine.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for 200.momentmagazine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338176316827790052104822097653478223462510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 12:24:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 12:24:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200.momentmagazine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899585338098203962104242204764281527291765413862584520607541433639757211173628002354143591710964498537098733336938637158749787368818018446247189223210214539587107507983671535061404878572546749488334994460243577568241254526238508242362284518448358094272247489453517717305029626025990720556142147545084698097694936532779316572103885537882250129806091574013114835527338481562472829922951341643349729657077785516656838937392534899448143461277760648792600088484958409755786753787019829908480450565470749394197088056742353257337958145559264907305823685014452830558288799179327554684456150940883081297882276272030582236510032104587927160698114225037873477436641989158188141503835991631067114336861703393723418366048411996457889250272320552303813144521584613621386053032801107666225610294036943112030316223514325773910303490150027305542136311934063354637767242179332130194794385227996431380621589455650043293747444606790368794741588669046701790489973999267980610729854365040081381724420015009679999771249246954975899879726099529199525812561430946894519000645462243809816488978578682941532741583971116714342064826652308159121964408477161520818723031575040512263160909613308016372321546425608849287946094118304374936906339045115542513880342637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a18f59132c66419af2dcb521ba79210e34f4a799
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '200.momentmagazine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f56fb095d0000040300483046022100e967a9922268181aab569eeb61962bb94f737b994cf1acbe85c0d91da7082be1022100bc441edbd1289924af69eeb46819c81dde711cbc67f3eb7ca7b802c55055ed41007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f56fb0b46000004030046304402207195550d7f74d494a81b64d1e533f77c96d3d008f63e9156446dc01b7e4e3c77022040c4ac0cf12087d054dc42f44187810efeb5f60e326fa3db3b233c740fb7a5b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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