200.momentmagazine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:d2:a0:26:46:6c:db:15:36:80:42:7e:87:c4:72:31:5b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=200.momentmagazine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:d2:a0:26:46:6c:db:15:36:80:42:7e:87:c4:72:31:5b
Serial Number (int): 299728452313349271304252261923532500513115
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:d3:e5:c0:b4:2e:6e:14:07:0a:62:a4:18:0e:4b:1f:70:17:cb:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:5d:4e:42:df:c0:67:52:c0:37:ef:5f:1f:40:fc:70:3c:09:4b:89
Fingerprint (sha256): 64:47:72:1a:ae:9e:99:9b:d0:b5:8e:03:45:ec:aa:2a:b1:25:4c:dd:59:75:8f:8d:ee:45:8f:f3:fe:e3:23:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 200.momentmagazine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 200.momentmagazine.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

200.momentmagazine.org

Other certificates including the domain name momentmagazine.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for 200.momentmagazine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvHl0joERRycCdCwjXuTg
9Bnc0u2K+KgdQMgflMgkZuU/LQvlLUvW0gZyT0JZYYjHI+2Ygzm8KD3fiMtu9A+5
lR1UNfAZ/hsCdvjPlSTvCKlnphhn3TxXAlH8Dc0Zp2rGvnyDxaMzuz1ZHvL0IjfK
kl4emeZPGPS6QNL1MOIQOH1cuzfjp3LOnojqy9VOMsAdj/mSt3xGQ8zl0mfvII69
1d9gXesX5rfSsO7GLXOZ+OAWr4HpD6tD1Q/DQ297u1iYgYaKf7qcxGEMhAem1c2C
q1mQa4irozYwhrePUGROcYDsVy3AjeRH/NTbgIWFK5Ih/hXx/n+hnpF0icA0Mrb8
Q9iy9bzAExYnHCfh/RL8hG9Udjn/D1FdRBbATw7xdsC2jP83zpmOGvcXeE5hPEXb
ay+TBduhWP4iklW3teJOVZLXuOMegjAKa1RK82Eck3ZRM/CuigVOkAfTDPt8xsAo
yLTpm7VTRuwuG8T0/yHBYefQSE+cObk4Y2bXnOTj/ebJ7GTrS7hnhQ38bAYOV/0e
kk80vi39Hd/POMuj1SGU1cByboBAaVy3pIdeoUHTIn6kLxKQQZ2HVj8r+Ep2GerZ
qBBKV22JKOB+6H1yH93Np0q557ac3uD4Xx6QNUTi5WHuQlQIr3YAItHOJkxynI0b
gfnwYXqfSXRCH9JgtIDewW8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299728452313349271304252261923532500513115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 14:23:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 14:23:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200.momentmagazine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768908609756121235067625212298854953105796746888196824599441346851586691286786664982220329477852450270355236263431288506875259861065396319996057866464556937193657276748226396897521842395867419615639434779518422331887321599795533737570252720988129578746964433813973631768952338327087147886745291983036160092661414774812571359714587102026994486553162906091190189410195184553299227598644356685164552620666092151205315466902907100109941876608372864579504591540034715687814820236329348567565733702651617992840586421608303435801360912680476708912415549066413027287037195905938514422712992766183339815018831932473598490990164905656181889766273573679376044680216977332083468632099510569719447741115895980835366497242502545357100413928588105061363247856481950339644550726342852077712345259008773277909368173269451509418384282405715546027581466986400118307223062752712424570176211176005342653865051870736019988325395178523470647624905783585492073334649210256768457974914051517981944366507093498811984762142536522770058499477377322926271834563229855325687036542636850780261930643115224808408283429670425227586451170966202692678589082205794200043204318949298068376126564574381299964270286796231294650708908655403781344805380370192504625421009263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5d3e5c0b42e6e14070a62a4180e4b1f7017cb41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '200.momentmagazine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c95e054ea0000040300473045022100aab984c4b1ab1ef0ee1d60f38f85352998b4bf7f3593077ff4dd7842e51fc32302200ee878b32015a59ef8b1dc0afe644eeefd653593028ed5c730ae3b48edc7f4f3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c95e053150000040300463044022041c3f35b9285684d7a63d6602a31d598553c1ddecdd6cf4206f8f0eee82dca9102206ea8e3dc5b6098ca2ebbaa9854d8267694b04d3880cb03648caa73a19056615a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a6ed7850359f4ad66ba072aa8c20ea8ca51c0bd03854044a634cf2f663f26be0afe97b19198de2615bb60467d101c5864afa4ba4fbc5c007deb48ae697dc517aa14ddb3c15fd303dae9e2d94fac89c323763bd718ed6c0101349d62c8360eeecc412d2e29744fd3e560f5f2770d23b3842b13282caf2af8e02f26384d45c32918a7ea9dae803447469ad781b37d9e6623d33f9cd85918187262c245812c2c33b04d9e1d4f46f14f0135123a0bc4573a296635379e8706f0b58632e84c6b46cd8d3fd42aab1bd20dc55a4b789fd81ca57b913348259216bf54748f3a5ce7ab1ddcef205298697da48ef143383324c0d58e4921d9e2fe55082625c96c0e9bee24