*.ibo.nyc.ny.us

- Independent Budget Office of the City of New York -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:40:7a:a1:3d:73:2a:23:67:c3:79:ff:81:54:f2:6b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Independent Budget Office of the City of New York

Organization: Independent Budget Office of the City of New York
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:7a:a1:3d:73:2a:23:67:c3:79:ff:81:54:f2:6b
Serial Number (int): 5651706210809513821054262728319103595
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:59:47:8b:58:dd:00:1c:23:54:69:8a:79:e3:a1:35:92:46:a1:a8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 53:75:aa:30:9c:8f:83:d9:b9:10:9b:bd:01:b4:6c:91:fc:fb:84:ef
Fingerprint (sha256): 30:4a:98:71:cf:70:ce:9f:c0:c5:3c:f6:32:39:bb:99:a7:d0:4c:2a:b7:9f:5b:a9:05:93:37:24:50:7d:db:6b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.ibo.nyc.ny.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibo.nyc.ny.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibo.nyc.ny.us

Other certificates including the domain name nyc.ny.us

(limited to 100 certificates)
iboremote2.ibo.nyc.ny.us
iboremote2.ibo.nyc.ny.us
www.tac.nyc.ny.us
42fw.boe.nyc.ny.us
*.ibo.nyc.ny.us
owa.trs.nyc.ny.us
ibo.nyc.ny.us
*.trs.nyc.ny.us
ctxdr.council.nyc.ny.us
qns.boe.nyc.ny.us
42fw.boe.nyc.ny.us
ctx.council.nyc.ny.us
hope.nyc.ny.us
*.trs.nyc.ny.us
*.trs.nyc.ny.us
*.ibo.nyc.ny.us
mail.trinityschoolnyc.org
mail.council.nyc.gov
*.ibo.nyc.ny.us
vote.nyc.ny.us
wm.ibo.nyc.ny.us
*.hope.nyc.ny.us
iboremote.ibo.nyc.ny.us
*.trs.nyc.ny.us
*.ibo.nyc.ny.us
ctx.council.nyc.ny.us
home.nyc.ny.us
ibo.nyc.ny.us
owa.trs.nyc.ny.us
*.council.nyc.ny.us
ibo.nyc.ny.us
ibo.nyc.ny.us
ibo.nyc.gov
wm.ibo.nyc.ny.us
*.trs.nyc.ny.us
hope.nyc.ny.us
42fw.boe.nyc.ny.us
*.ibo.nyc.ny.us
ibo.nyc.ny.us
ibomail.ibo.nyc.ny.us
*.vote.nyc
vote.nyc.ny.us
*.trs.nyc.ny.us
www.trs.nyc.ny.us
owa.trs.nyc.ny.us
*.ibo.nyc.ny.us
*.hope.nyc.ny.us
owa.trs.nyc.ny.us
mail.council.nyc.gov
owa.boe.nyc
www.trs.nyc.ny.us
www.tac.nyc.ny.us
owa.trs.nyc.ny.us
ibomail.ibo.nyc.ny.us
hope.nyc.ny.us
42fw.boe.nyc.ny.us
www.hope.nyc.ny.us
hope.nyc.ny.us
ibo.nyc.ny.us
ibo.nyc.ny.us
vote.nyc.ny.us
queens.boe.nyc.ny.us
ibo.nyc.ny.us
hope.nyc.ny.us
*.ibo.nyc.ny.us
vote.nyc.ny.us
ctx.council.nyc.ny.us
pullrequest.hope.nyc.ny.us
ibo.nyc.ny.us
ibo.nyc.ny.us
ibo.nyc.ny.us
hope.nyc.ny.us
*.council.nyc.ny.us
webmail.ibo.nyc.ny.us
queens.boe.nyc.ny.us
ibomail.ibo.nyc.ny.us
*.ibo.nyc.ny.us
iboremote2.ibo.nyc.ny.us
ibo.nyc.ny.us
owa.trs.nyc.ny.us
*.ibo.nyc.ny.us
ibo.nyc.ny.us
vote.nyc.ny.us
ibo.nyc.ny.us
ibo.nyc.ny.us
hope.nyc.ny.us
ibo.nyc.ny.us
www.trs.nyc.ny.us
42fw.boe.nyc.ny.us
*.ibo.nyc.ny.us
www.tac.nyc.ny.us
mail.council.nyc.gov
owa.trs.nyc.ny.us
*.hope.nyc.ny.us
*.ibo.nyc.ny.us
ctxdr.council.nyc.ny.us
webmail.ibo.nyc.ny.us
42fw.boe.nyc.ny.us
www.tac.nyc.ny.us
vote.nyc.ny.us

Certificate

The complete raw certificate details for *.ibo.nyc.ny.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwmYuvuC90CusrQnUVSj
/c3j5xE9DDsvRJlNKraWYmrsBvd07sL09nZOXBX9kbM/+zvZ6v/E71CtI1ek8y/D
FmIwdSuwY8XcFJnkQBSrYgQyPukKfSEMgG0gm38ljhka3qDWGP2rWwiVBuX0KnuT
cXjZYMUdkinM9U+JN2VudUgOsNE7GO0antk/H6L9QS835mkUHPHo3kzEYf/Fze2I
LtFq2dZLDTH3vDIYq1TNx/Prk4/y/1If4ugBP1tDn6/VyDR6reeAcWLqLtyQ2wfC
iK5YrWqEtZ06kd1ZisZ+BcqMvWIYLyb5QkeYWcdD7fiIt1aHWI9RsrUPwJ9n84dT
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5651706210809513821054262728319103595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Independent Budget Office of the City of New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibo.nyc.ny.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18056809871521622398066143880569931197527779442120633017083779439509369100686586500589062597975862233031995336719235422775308573236445506584457595488087088260424478715457950614000710318052910440087001958794265386015724398500222420141363904814553969201824368511004159384055846528578938060370675235773642695386625619278403290640704774675522050074217864489160076011346552914188897496205983715779540063679576817756834079031737351730753916652521105877997444241555293302669022283427303352006230427314160785081592900712225616861976096694538121457448864235187984312538489221992558613769035833162580877800078985235873468470109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8359478b58dd001c2354698a79e3a1359246a1a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibo.nyc.ny.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0083d45562efceafde342dca7ebfdc7d2b4eda9813eb5ec556687b79a58604038548a27934d6148d3d290f9ff8acb81baf2a44399b012442af4d3873b3562913a99c4b3848f20af646aa52f78a7916708aec26a882b752066284ca838825db4f00fd9d205a64f0c56727e8906c3cc729d4502c067f70dae34179f58f0099ed5d05adf630317e182cb6cfc2ddb31f897dc0de2ce8a94cb65e950a9d7a92828f1a44737fa87858ff8bca65ea4f5cbdfe21588b45376f0771c6b7ad05f6ca6ce24ec387b1749a0e5789b9bcbe7018dfdb2b7fea985f39a0aff140edd999f4a68e700012ed080ba918326d735ed28fbb284497c196e6b6304a052e2c3c819363ba36d2