newyorkcentralpark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e9:da:d2:05:56:e9:a5:93:20:49:36:fa:1f:2d:4f:d7:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newyorkcentralpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:da:d2:05:56:e9:a5:93:20:49:36:fa:1f:2d:4f:d7:de
Serial Number (int): 428025797413339032716874042323932504119262
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:d5:08:80:8c:68:a9:5d:bf:75:3d:98:01:5b:b6:5d:c5:ad:99:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:9f:3a:ef:12:87:bd:da:b3:22:72:80:ed:c4:91:a0:66:43:75:ac
Fingerprint (sha256): 30:97:09:9e:00:8f:17:e0:7a:f5:fd:c0:19:55:b5:ec:e7:9b:06:67:81:bc:ac:ee:96:38:e1:68:7b:12:42:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newyorkcentralpark.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newyorkcentralpark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newyorkcentralpark.com

Other certificates including the domain name newyorkcentralpark.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for newyorkcentralpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuD6KnUF00eefQ2KoccT8
QFcGXNfSpmM8Jq3UU9MAUs/goc4GZIqx9sAIh+J98u1ZcbndjM2foTPBEFLKzTXg
luS4qVmhniXCPYSvKKtL5iodLoYolw5UTqAW8FGwBZu7fvRISTDF6Ne00xh6LG0A
8FX1pbIr2qrlnIyQDE+P7683KfFyQPxiUu9BmvyNtLRC0bkiskNj2L5f5ZZKDSmk
ehqQh6bRDsRAegldQvRgS4P2GvjevYrBLlmEKD4xLYkdW1a0XOF3e0JCAczFqndj
gBkMpdQ2lRkCI5bgZAjrXNIoOJD+kSytIHS2GrBIyaBxV3DNyMRkVj6+PpDoupAm
Vl74nQJkM3U1UxH8WA66ZJKA5l4nhNmmtw/0c9arlueH47FFmISUZXFcXUF6R3vV
fCgOYGmnyEvTpe6jJSM4EnZ2HthX2AeEwfwMnKKFrOyXvifRyOy6Ot9jSSoVkeU0
l6yPkTde712wDX7zcAH6rcX5gG+f12WNmdxUWyUj6K2dsBhR6wCtMlSchketyWiD
jzuk2UUHAQOt4PWK3xv1bC7iS5NpwdkAB0Qx6XPsjRm2a9Qno+m1HZO8qUO4yRaE
/liMq+lqM4uoWGxSxbW5UgBf48lbkKgtEnFQeMiffOshs0l5geIsvBpE8foLxuPg
PGdHYZkGqo2arSt8Ok7UFgECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428025797413339032716874042323932504119262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 19:56:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 19:56:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newyorkcentralpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751651176111725401974964750003039404344823064600513509965630737145444973040832617525428605219653609197194197949376888209576560399672349435643826087323434183662594855515629618805615801440291344292724906605621423341218828199536403609455730847418593148021776053333773740981602144386544450417596579203834433593580681445430040100612246114707548110028989358121839078703856126787078754215934870727676680488858019232854440233815623110489207433147747377603545150139700119124697065589944048111798174777978131135052697352641228030496338999701746221663278811051082272564196841495102821634524902108591770027397962309123945108644785362536319575311773421802706115524841681290927733720461514074591414157175312930208629136554647049628411367871586382873372478864426107336375437543031504309637601337460633354685569352091756870462972104089698468168436620018276381069140017288378278179498096021884055148925714464526996267963635496782868760125425247825238986234628193302199222684473520687105729977013147295750331005738230432422738286877624485559043785447549232092277385102682983085274132119736865260790399711438414439981522732435707100048550082580275109801719366009557649907161559152299234350499409621513936790968763292069770040546514905181926819292780033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24d508808c68a95dbf753d98015bb65dc5ad99e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcentralpark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017007b0850d0000040300483046022100bdff1cde9572d6ee9dce89a3950259fba859c8bc4d706f8d0b26524a9af6a9b0022100d8a4060c1ee213ef00cba20f30d395325cd1ea42861b4a434cbf91cebcc1f26e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017007b0853300000403004630440220429d3555a1521e7d69b80709c1b57902eefbcebfe11603b23ccb5b0c12d99b1f022009e7f01b0039bfbcd81cdef4f82d6e2ee78fb5af52a5a7cae25cc0b70fcb4afa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002a0f42ec68de53b34c7daeaa3bd4ed9b9bcdbc6d5ebaa0b4e8007a4b0ba01966f18f91d7d611dd0b0781dc85b05205fbccd3f33f8946448168359efd8cafb0d8cb7d59619503de80a989b3c998efa53d1e524fab9fa43132f26e1a7668df06e10af0a2e1d1d5dc12d63c22dbb06a0a9d89f4ca7b19de33f5cf968e75fbbbee8a890d41ecb222303e842ac58943c52ccb45ced0f83f2e3ff085126765371d64bbe71ae83430f71f753c9dc4be36a28eec8a2f03e74e2fa27e2079663b0ac2fdf7cb9c959df568318e359d38dd782af4185b7d3a9aad577896ca3a982aa4a0e62d76f88666ffc930e264b78bc032ef0eef9b2ac91d7047bd81ca833af0e11d174