nyca.vc
Issued by R3
About this certificate
This digital certificate with serial number 03:cb:25:25:5b:4a:24:c0:8e:e9:64:4a:5d:38:b2:86:25:3f was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nyca.vc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cb:25:25:5b:4a:24:c0:8e:e9:64:4a:5d:38:b2:86:25:3fSerial Number (int): 330463553682632587906206302925953352213823
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ae:c1:53:5b:9f:30:47:83:a2:71:94:de:d8:d0:df:88:9a:48:31:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 35:48:ea:f5:77:7d:bc:91:ad:3c:dc:ca:8e:2d:49:7f:18:74:62:5f
Fingerprint (sha256): 46:77:99:fc:98:de:2d:95:79:75:f5:f9:ad:eb:be:cb:42:64:cd:bc:c2:07:63:07:39:54:85:a2:37:3e:5a:e5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nyca.vc
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nyca.vc
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
brandrankings.com
dalworthingtongardens.com.intllawyers.com
halfmarathonscalifornia.com
lifesciencewater.com
lindellrecovery.org.covidtreatment.org
mustanggrape.com
nyca.vc
dalworthingtongardens.com.intllawyers.com
halfmarathonscalifornia.com
lifesciencewater.com
lindellrecovery.org.covidtreatment.org
mustanggrape.com
nyca.vc
Other certificates including the domain name nyca.vc
(limited to 100 certificates)
Certificate
The complete raw certificate details for nyca.vc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISA8slJVtKJMCO6WRKXTiyhiU/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjYwMzAyNDRaFw0yNDAzMjUwMzAyNDNaMBIxEDAOBgNVBAMT B255Y2EudmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxz1cg43/z m908SI43kUSdc7oc9+2CeLUy3ma+LrJLDt+ZHj07Yg79emn3fhq/XePg0csHDLiU zWcaYC7m1+Ao7W8ZgP3GyIxP/HoGNTPDuNgAoZjORlqF2hpNP/g/4XHtbSZWxrk2 fvW/SCnNxvXjxcRfJE9v1hEDSpKvyt/L1TJVEF1wgpyDTI2JEkCmZWxa85a58mAM AP8suFE8Q1sFbjMoqRp7nJ11oLprfwb4VhF+TUTzMYUZrd/oQ5gQDj+XCt/2D5zD Qh4QKWZX3QZliyf1o2cEeaLslYFt9lfF1BJri8T3ES7cIr07w8JGdGDWfje3lh0C fgb0iwnXZnPRAgMBAAGjggK5MIICtTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK7B U1ufMEeDonGU3tjQ34iaSDHrMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIG/BgNV HREEgbcwgbSCEWJyYW5kcmFua2luZ3MuY29tgilkYWx3b3J0aGluZ3RvbmdhcmRl bnMuY29tLmludGxsYXd5ZXJzLmNvbYIbaGFsZm1hcmF0aG9uc2NhbGlmb3JuaWEu Y29tghRsaWZlc2NpZW5jZXdhdGVyLmNvbYImbGluZGVsbHJlY292ZXJ5Lm9yZy5j b3ZpZHRyZWF0bWVudC5vcmeCEG11c3RhbmdncmFwZS5jb22CB255Y2EudmMwEwYD VR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBIsONr 2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYykSgoPAAAEAwBIMEYCIQCI ASFvn9yqvrnPQGJelhuiQRbYxtQbKoMNfREgrL6ZIgIhANq3akKlSzjzYVERtRQp YVsQItpYNcV4Rccm+d7+lVmkAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y b+H61BcAAAGMpEoKTQAABAMASDBGAiEA28/Nn71JzJkaIB+mNpqzV+NFF7O8SAdJ GqSHOZqR+8ICIQCW5O214W5efA1E8G0pxUBTC8ywhrjaEAYOXQdMWuXZgDANBgkq hkiG9w0BAQsFAAOCAQEArCB/PAwW2EVJ5tzCnNl9mfUZgSxh+kGDyY9dcyhA3xtf TuNxyZDUhf95aeem3SPTXgoCWPsMWZkyKnxMXGG2VGwErsKO/tXUuP5MLMOvorz0 pFYq3QpwqokvsFS5J0ViL1EfTVWMouWS2eWQoxph/djYykeSJYj0af8kjI+bVEVH T7ikDSx0PBTuHl/+81jyCpjyDNhmyJq3v6QiV7F5gHGswAymcEGGYpmGgnM9k9ia FvFRDA9tKJsN5jy9Ad94M5KiWuyLJEnyREQkO7wOj6fGe5iMSP+bAJdGddyUPVLq L3vG2YYztTZCj0rHcIGXTwZ3CgCLuchKge4e4Yj2uw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc9XION/85vdPEiON5FE nXO6HPftgni1Mt5mvi6ySw7fmR49O2IO/Xpp934av13j4NHLBwy4lM1nGmAu5tfg KO1vGYD9xsiMT/x6BjUzw7jYAKGYzkZahdoaTT/4P+Fx7W0mVsa5Nn71v0gpzcb1 48XEXyRPb9YRA0qSr8rfy9UyVRBdcIKcg0yNiRJApmVsWvOWufJgDAD/LLhRPENb BW4zKKkae5yddaC6a38G+FYRfk1E8zGFGa3f6EOYEA4/lwrf9g+cw0IeEClmV90G ZYsn9aNnBHmi7JWBbfZXxdQSa4vE9xEu3CK9O8PCRnRg1n43t5YdAn4G9IsJ12Zz 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330463553682632587906206302925953352213823 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 03:02:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 03:02:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nyca.vc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22446423314064727466397277553122183208661688980783488704377819057210381204991361370592032052021083155003288004223800687798745587861370641129707455186133601867960090414810671946204540428009831641939654500082348593064503484736636088227808692460930604547549728228864739781269128252397286619357507705569827536118477538702986328841623901124214066253680586418391333803527415154147042479163844354489047373436716669653768468870686604426320432400660327766565193508361694142833584020988427511926279766736907558342129959349282169048734399731395725712665189721567857440217666686588370159804907450090529881874387802512271723623377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aec1535b9f304783a27194ded8d0df889a4831eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (183 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandrankings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalworthingtongardens.com.intllawyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonscalifornia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifesciencewater.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindellrecovery.org.covidtreatment.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustanggrape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyca.vc' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca44a0a0f00000403004830460221008801216f9fdcaabeb9cf40625e961ba24116d8c6d41b2a830d7d1120acbe9922022100dab76a42a54b38f3615111b51429615b1022da5835c57845c726f9defe9559a40077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca44a0a4d0000040300483046022100dbcfcd9fbd49cc991a201fa6369ab357e34517b3bc4807491aa487399a91fbc202210096e4edb5e16e5e7c0d44f06d29c540530bccb086b8da10060e5d074c5ae5d980 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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