www.newyorkgrowers.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:80:d1:7c:a5:31:42:fc:64:a0:e9:49:18:3f:92:eb:7d was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.newyorkgrowers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:80:d1:7c:a5:31:42:fc:64:a0:e9:49:18:3f:92:eb:7d
Serial Number (int): 265251192733021649462813581082688769682301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:54:f5:a2:96:9f:86:31:f3:19:36:ad:0a:9a:80:79:78:ac:1b:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:c0:53:a4:21:94:a7:01:bb:0c:78:6b:07:39:52:aa:2d:b5:59:1a
Fingerprint (sha256): 65:43:4e:5a:b7:87:b1:61:5b:f3:89:ae:8d:90:4b:4a:6b:be:76:62:1e:38:90:bc:fd:18:a4:80:01:d2:8b:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.newyorkgrowers.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.newyorkgrowers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canadaplayers.com
contactprivacypte.org
culturemogul.com
finlandclassroom.com
generalgrowers.com
laplandtourism.com
newyorkgrowers.com
www.contactprivacypte.org
www.culturemogul.com
www.finlandclassroom.com
www.generalgrowers.com
www.gujaratfm.com
www.newyorkgrowers.com

Other certificates including the domain name newyorkgrowers.com

(limited to 100 certificates)
www.eventgrowers.com
www.japangrowers.com
immigrationlawanswers.com
newsgrowers.com
contactprivacypte.org
newyorkgrowers.com
www.newyorkgrowers.com
www.suissegrowers.com
dronegrowers.com
www.finlandclassroom.com
www.gujaratfm.com
www.europegrowers.com
softwaregrowers.com
generalgrowers.com
www.culturemogul.com
dronegrowers.com
www.finlandclassroom.com
www.dublingrowers.com
www.gujaratfm.com
www.newyorkgrowers.com
www.zurichgrowers.com
generalgrowers.com
www.shenzhengrowers.com
contactprivacypte.org
www.gujaratfm.com
www.immigrationlawanswers.com
www.generalgrowers.com
www.gujaratfm.com
www.russiangrowers.com
www.zurichgrowers.com
aigrowers.com
www.gujaratfm.com
anyanswers.com
www.finlandclassroom.com
www.cubaplayers.com
www.anyanswers.com
www.japangrowers.com
www.gaminggrowers.com
canadaplayers.com
www.anyanswers.com
jerusalemgrowers.com
www.shenzhengrowers.com
www.finlandclassroom.com
www.newyorkgrowers.com
culturemogul.com
www.amsterdamgrowers.com
boholgrowers.com
www.illinoisgrowers.com
www.irishgrowers.com
jerusalemgrowers.com
www.generalgrowers.com
www.finlandclassroom.com
www.torontogrowers.com
generalgrowers.com
www.shenzhengrowers.com
laplandtourism.com
newyorkgrowers.com

Certificate

The complete raw certificate details for www.newyorkgrowers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfO2IT8yn/EDuIM2AIc7
pqGbXpqtD531g6rWHltpllTFkG4l53G1FGJRlwkl5uvQjKgWSAFnFZQlC+/Uf+iD
J73Im8HWwHDlLuW2TIKSjvP6r2/qO5BDVXSEX1W1HvGc7OEVvrwQ8auu6kgQNu8C
T3oVKogkd0xcyJ5tVHqvfHE9yrZ+gFUnKpp9PSYf6PhtEABT4zFEXtZJTlUaMPW1
xmFrzJPFNmxB86b2YGP0u25RX/QGV64OM0H3j+DtknrffqQWr5n59bMDzoBu3Yu3
9ZSkgoFzYhGMR0o0grtF327HmhQdDv67ls/Izh9f7AhmNC1TGChZdTtwyOT278iQ
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265251192733021649462813581082688769682301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 11:58:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-08 11:58:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newyorkgrowers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25494077890729558718189476168207973954105103139306882922503269405770772440330397593816321739210469667250803635206069268821458318034911912954063561370143269198683931365456101185599814016871266867348455800181869894969316050221937959753754299343569887627865121058982232540924108044837085609818299292632986128213773836624610389635123680547146496060808996175738814008988493566990246311200764001874573060103877688965272256249944045579178696655807178874987610960788530747604455210204274352158966014980348887187668138585363478409809040517443731739697676044516371434201641543183442138661482439730731664306214649984271677690107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e54f5a2969f8631f31936ad0a9a807978ac1bbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactprivacypte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finlandclassroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalgrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laplandtourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkgrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contactprivacypte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finlandclassroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalgrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gujaratfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkgrowers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016967aeec790000040300473045022100e81bcf2aad216dd01428334d83d7e784450c9cc441311a891ebe1769e008ff1d022032e8a6cb7ee60750d612f39ac636f1592acd50f60db17a8a3ff65cdf9ec66ae900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016967aeec98000004030047304502201ce1f1a67d4768a406457d2ac17966b2a9374206b6b65af6e6f7b31076de2a38022100dbb5e7f6369292c9eb5c0ac6ed0e2434c136842578f95113e38d668243f195ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013af543309ca0aef9d8a8e48dc5ab733efc5ee600932480a913d379fec6a503a7617865602add982b37317c3c291bb1a424ab58759034ef8b8313e800d7220feabfa60e3dae8a4d6ebf598a351696b728a97acf69eea0fc730ea05cbb79b3b66a804dd31b2992d2228bd7ab50e2e11119ad271166e5c632055bdd07a31328f74e3c834e23c6ac39a5647476f3bed0998552d38cc8d6e951aef173f726900853b1a3fa3f96f1f66427ef50a226214bc6182697738e9b7ac46813bd5b640d445a85be3367ee9f822f27d611dbc1b22a2689222fd35ff582d7cf46f07d2b999964b844a45136e3c6369141acaa4c462e20783ae08530acb3ea4dc47504627a50341