200.momentmagazine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:99:4b:16:38:fd:65:2f:97:e1:f0:b8:77:81:f0:83:0f:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=200.momentmagazine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:4b:16:38:fd:65:2f:97:e1:f0:b8:77:81:f0:83:0f:df
Serial Number (int): 400612153352050306396420627114622422552543
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:15:52:a6:62:9f:39:0a:f0:ae:6e:9c:73:4b:79:35:4e:b2:45:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:ea:76:9e:62:18:6e:51:42:1f:60:60:ea:33:b5:72:57:db:09:bc
Fingerprint (sha256): 44:6f:b3:88:76:71:bb:69:64:8b:36:96:4a:f8:f3:30:4b:9c:54:0b:69:83:28:01:cc:71:73:cc:a2:b1:01:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 200.momentmagazine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 200.momentmagazine.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

200.momentmagazine.org

Other certificates including the domain name momentmagazine.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for 200.momentmagazine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISBJlLFjj9ZS+X4fC4d4Hwgw/fMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDIxNzEwNThaFw0x
OTA1MDMxNzEwNThaMCExHzAdBgNVBAMTFjIwMC5tb21lbnRtYWdhemluZS5vcmcw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCgpUBbCh/fw8FQKPG00VxS
H/Uz7gMAdH7NqcG+6hEEbp56Jk+ZhjVztGbdykvKGqof1TTP9tvoIwa5c7zE89rt
o6+e6ODZPWhF+/Mo/fGmPssZ3cCVgsxzK+TWJ9eqZohSaxUmt2K3dohl/BnyCRUH
mQkUMWYYpX06avZDbl7hJfAWJy0Pieq8vpVt3GkfsDJT4YD+P0g1VNY4qA9hJuvZ
eB5MskatrJZseZ+k00VZkq02SNSoFk/xh9r/C4vmHcaay0wdFHkddszxKa/f1EtL
UWQXflFPEj+AgWvYuBryWJUwUrnfH7BIcCS2+tvk8c4jjIm5N7CyaUw2efUogugG
Uq5lAVojplB6GkqPvvxLEZWlkRLGw0TAHF19WceiBrdsr2sYkzyYZxhL88JFDoM/
2+tCeRXWJSoR3RyMNKr8FVGfs/pXHOI2d3KtGJsCBjEATh4/xQGcOjTx/7DzltJp
m316iYXJbA97fDnQFbVAB4U6qZKmAgLU2Wu0F2DNApSkxh/d1snpcCjCaDd53KLM
3rLFZtFt+/YHJL0fGxXrWjJufyVmSjFte4CF5AuK6NaXfadoNtp8uXMu88ia2d9p
xWephed1yaItW7P0A6DcAQZic51ITlW0/XAHra5OU2V8fg1DY1eK6LAJAnoTUwPx
A5MUC+ggs4z1YpPg/qKQqQIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQ9FVKmYp85CvCubpxzS3k1TrJFYzAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFjIwMC5tb21l
bnRtYWdhemluZS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3
NXnmEHvMVgAAAWivaA4aAAAEAwBHMEUCIFq3sVCQxppINNoCiFTA2e0g6QKHJRpA
0Sm0CHnf76ZZAiEA7BRIY/Mibrq0iRNTCfqLOnENIY/On0mRdpgjXTilw/gAdQAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWivaA4UAAAEAwBGMEQC
IH/4m5m64hnjxHas5wIx3TvMfehqw478lo4F1VUEPHZYAiB6e0sXjhSa7LM2oBQU
tcXKP2etxmwOt4UypwvkN0jZOjANBgkqhkiG9w0BAQsFAAOCAQEAHiGsjIPb/4Hk
YiSrdSFIE0yFhoNqqTzMU4ZDAv3OmulnHquy4R1zdri1hbZgno/MzBAL0AGp1R+M
rHFkpfXk3E2Vfr/545Y0VbZJgjVpPZQuHxaid8oUBdz2IGxwj0GMC/iYIU1xRec6
ZnpYHzCVRByIQpxO14zdOHgidYU/g+OfcyxusgfrFQpuvzqmrXL7dAwlKUZMeIoj
XqKOZEo8OEJcM8Z8NFwNJdH9hEfZtBMSegia6sjDLlHZADqvb+9xBxd7JTMgDZij
EOsYgemwEHLvEYfQz3tQBdQdRszmpGysvdq9TNlvA+undp211xHXi8cHKl/jvw0Z
ymRt/z8RBQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400612153352050306396420627114622422552543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-02 17:10:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 17:10:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200.momentmagazine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655376515139045446731256308035475873171821712819123971911157276258272364926701363819550359640661570799387601353165453527945823025398205250937633374691553235543314820536928104918756334504765342201073754934693135716711024095360784434506114364536035690180127394315163737340351144051947742520154073229898406561641843915555537884834053314092247917480729757131312043976540905551971209581806412921549290495039223812791250462980010021083715425824440696155572414413734648733751198567507537828788197319700894252715366899443931353778651358287544926054288597230033852544801290405200603750613507891092850802635238375326228092091298917915060652837628735389877303445876201627447311558057836940222192178110212780740509385906075177443361389344417520461882684217886023952091666660404448045742923036194688138586623673719764655996798102834404415034796387908587896816383005463115623691595207132246481349966381495586760440955474753092477422165433822742759891075525453498475211086031115526661530007397994808039210481870526840005651802007438757768317452111252465044742713300592520236153856519786840105341104045924220965432471771319348311172856466123516348029893929725052694703147042199634391610797455549781267399698955494239070263066111342063576487435604137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d1552a6629f390af0ae6e9c734b79354eb24563
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '200.momentmagazine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168af680e1a000004030047304502205ab7b15090c69a4834da028854c0d9ed20e90287251a40d129b40879dfefa659022100ec144863f3226ebab489135309fa8b3a710d218fce9f49917698235d38a5c3f8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168af680e14000004030046304402207ff89b99bae219e3c476ace70231dd3bcc7de86ac38efc968e05d555043c765802207a7b4b178e149aecb336a01414b5c5ca3f67adc66c0eb78532a70be43748d93a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e21ac8c83dbff81e46224ab752148134c8586836aa93ccc53864302fdce9ae9671eabb2e11d7376b8b585b6609e8fcccc100bd001a9d51f8cac7164a5f5e4dc4d957ebff9e3963455b6498235693d942e1f16a277ca1405dcf6206c708f418c0bf898214d7145e73a667a581f3095441c88429c4ed78cdd38782275853f83e39f732c6eb207eb150a6ebf3aa6ad72fb740c2529464c788a235ea28e644a3c38425c33c67c345c0d25d1fd8447d9b413127a089aeac8c32e51d9003aaf6fef7107177b2533200d98a310eb1881e9b01072ef1187d0cf7b5005d41d46cce6a46cacbddabd4cd96f03eba7769db5d711d78bc7072a5fe3bf0d19ca646dff3f1105