newvillagepress.nyupress.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c3:58:fe:4e:b5:71:18:33:39:6b:3f:df:97:96:8e:e0:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newvillagepress.nyupress.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:58:fe:4e:b5:71:18:33:39:6b:3f:df:97:96:8e:e0:77
Serial Number (int): 327810211848298128320404432820229328789623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:c8:e2:38:92:dd:50:12:89:df:ea:8a:a0:44:6f:e5:db:d6:5f:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:c2:65:f2:22:1a:be:be:71:ab:45:94:85:f7:06:ad:4b:99:fb:9d
Fingerprint (sha256): 52:73:f9:a2:45:be:99:bb:3e:a2:84:ac:5a:fc:47:6f:bb:70:76:d2:a5:cd:2f:df:32:51:4b:d6:36:8c:60:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newvillagepress.nyupress.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newvillagepress.nyupress.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newvillagepress.nyupress.org

Other certificates including the domain name nyupress.org

(limited to 100 certificates)
keywords.nyupress.org
nyuresearchsites.org
keywords.keywords.hosting.nyu.edu
www.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
sni.cloudflaressl.com
sni.cloudflaressl.com
nyupress.org
cart.nyupress.org
www.nyupress.org
www.nyupress.org
opensquare.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
www.nyupress.org
newvillagepress.nyupress.org
keywords.nyupress.org
keywords.nyupress.org
nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
cart.nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
newvillagepress.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
NYUPress.org
keywords.nyupress.org
newvillagepress.nyupress.org
keywords.keywords.hosting.nyu.edu
connectedyouth.nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
newvillagepress.nyupress.org
nyupress.org
keywords.nyupress.org
witsuniversitypress.nyupress.org
connectedyouth.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyuresearchsites.org
nyupress.org

Certificate

The complete raw certificate details for newvillagepress.nyupress.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SBsTiK+eMr3NOaB6AkD
5mrdMhrM6UajmWdmbq0iBa84BTRyrGuPIKX1Q6dXOkSToUBniY9IViUcJwqdRZdj
4DnJiRdZPIZUn1z8JTX+wYt+yoZxTrfuUrpScQV/iEwaQ00ysh3sGL8uAFHmeG5H
s/1gq5xbOK4Fu/goFFvkh6Yi6gxkVMbzPvgbWMSQTRgJ1f4h5zgEIDX7eS3cI20u
lGXUrewxhoEpvFqOyLzxEXhbi7XJrCxmgZpg1pVyd12Wb0E+x2Zcj7UnCjnZK46/
EzaAB2P9cgPRwBO1Ez4IpeOM/Ju4nnGUuJxl7gfBz2SlQUpM2Br1TyGYNX4UK64E
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327810211848298128320404432820229328789623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-23 20:06:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-22 20:06:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newvillagepress.nyupress.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28419607027723561408159461511058794810014204346358791666329375244097189650950077098049528593727883141459780471468365727329358608552226999568924815408990140803982854380198996009434484642183012381477184316851220964003061271308116761912610499050294998780699855343577633080355703705882975891246367200393003268292409097385531300111372120477557421348511193944216621820505941381354357457890502691077615221983116910424472116513787634000668370506177229857694747444289538647522269058447844346199491109224369147021511497515252198126251893034892358640683838806053557440984784816321403790866173403732546025728341354732810423632983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4c8e23892dd501289dfea8aa0446fe5dbd65f6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newvillagepress.nyupress.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162f4541117000004030047304502203ae8151c0891dd4e3f8be91fdf0a7a0c5a6d5e7b759958849be8352d4e1e0aa5022100caa8877e1d37a363d77a3775772486609950590ef23dd10f66470b661d6d5616007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162f454113b0000040300483046022100ec0a4b65d142102716a247d16fcea3e59022db6504460efaf63ef59e8d14ee5a0221009c4ede475963a94ee969c9ec52328a344efa95686f99f5ef7b103c4f369b6e69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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