partners.nycsca.org

- New York City School Construction Authority -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4b:20:9a:9b was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 1 DNS name(s) are bare public suffixes: partners The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

New York City School Construction Authority

Organization: New York City School Construction Authority
Organization unit: Information Technology
State / Province: New York
Locality: LIC
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:20:9a:9b
Serial Number (int): 1260427931
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 5a:fc:f3:d7:7b:e0:85:bb:6f:6f:79:64:23:3b:54:bd:d8:e4:46:9d
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 29:f8:13:c3:cb:a5:dd:d6:5e:3a:b9:d5:c0:bf:de:e4:9a:9a:8c:fa
Fingerprint (sha256): 76:21:aa:7b:62:cb:a4:f5:1f:2f:43:cd:9e:17:e3:15:27:ee:98:af:66:45:a3:dd:f5:19:cf:5e:55:e1:94:1a


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate partners.nycsca.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partners.nycsca.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partners
partners.nycsca.org
scavdwebprod01.nycsca.org
scavdwebprod02.nycsca.org
scavdwebprod03.nycsca.org

Other certificates including the domain name nycsca.org

(limited to 100 certificates)
afstest.nycsca.org
smstest.nycsca.org
ifatest.nycsca.org
gethelp.nycsca.org
xtregtest.nycsca.org
uidev.nycsca.org
edocs.nycsca.org
adlds.nycsca.org
extwsdev.nycsca.org
extranet.nycsca.org
partnerstest.nycsca.org
msg.nycsca.org
erfp.nycsca.org
erfp.nycsca.org
dobusiness.nycsca.org
tobss.nycsca.org
partners.nycsca.org
scacsg.nycsca.org
bidset.nycsca.org
extwsdev.nycsca.org
cmwsprod.nycsca.org
ssrs.nycsca.org
msg.nycsca.org
partnerstest.nycsca.org
ifa.nycsca.org
extwsuat.nycsca.org
app.mylcm.com
extranetnew.nycsca.org
tk.nycsca.org
ifa.nycsca.org
erfpuat.nycsca.org
portal.nycsca.org
extranet.nycsca.org
cmwsprod.nycsca.org
tobss.nycsca.org
ifauat2016.nycsca.org
tobssuat.nycsca.org
dobusiness.nycsca.org
extwsuat.nycsca.org
laborlaw.nycsca.org
filepad.nycsca.org
adlds.nycsca.org
SCAENEC02.nycsca.org
dobusiness.nycsca.org
SCAENEC01.nycsca.org
laborlaw.nycsca.org
extranet.nycsca.org
partners.nycsca.org
tobss.nycsca.org
sda.nycsca.org
enfovdatest.nycsca.org
dobusiness.nycsca.org
webmail.nycsca.org
laborlaw.nycsca.org
xtregtest.nycsca.org
tobssuat.nycsca.org
adldstest.nycsca.org
Webmail.NYCSCA.ORG
ifaqa.nycsca.org
bidset.nycsca.org
ui.nycsca.org
partners.nycsca.org
smstest.nycsca.org
bidset.nycsca.org
cmwsprod.nycsca.org
ifauat.nycsca.org
portaluat.nycsca.org
tobss.nycsca.org
survey.nycsca.org
laborlaw.nycsca.org
ifa.nycsca.org
ifa.nycsca.org
filepad.nycsca.org
erfpuat.nycsca.org
bidsettest.nycsca.org
laborlaw.nycsca.org
erfp.nycsca.org
smstest.nycsca.org
laborlaw.nycsca.org
sts.nycsca.org
cmwstest.nycsca.org
extranet.nycsca.org
partners.nycsca.org
sitescheduling.nycsca.org
llis.nycsca.org
ifasync.nycsca.org
uiuat.nycsca.org
tobss.nycsca.org
www.nycsca.org
tobss.nycsca.org
dobusinesstest.nycsca.org
dobusiness.nycsca.org
extws.nycsca.org
webmail.nycsca.org
gcu.nycsca.org
webmail.nycsca.org
scacswfe01.nycsca.org
laborlaw.nycsca.org
scacsg.nycsca.org
scazlsrvuat01.nycsca.org

Certificate

The complete raw certificate details for partners.nycsca.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKlTkRat7J9G0Rw91gFl
azAVBPuQuqJnYsEaO1FzSW50fLo+Dxldjrwh15gFm9cgnSOi9Uzim3fhiv6KveZC
HuvrLOPl7fzk/Lj5BAfY/G99SNp0Ti1Pb36e8tyhrjwydlOBzZR1mLykafUTrOt0
FW4yHvrADV02tYmP24Mx34iUHA7T5HFlJWFAiiumPHAMYl5QkuPSBUo79QcQ51NO
YoCeQbUg9uQFOYDPz5aFsADKljC6WP+GpbubTQqKrUwp87wVnaxBRe9Y6d9Mnlio
COz6qutiNeE49busUNTFtZ/Z5oAjJ2pPaSWM84i61SJ+6rvbkN4oYQv+1SqvFZ/K
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1260427931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-01 17:13:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-28 17:42:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City School Construction Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partners.nycsca.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24826205749287655677249701415511157099391258103768244926091749339622895357016758109450337080021587758101440994267303352859849540340271471957891221599934052699961205942691466287748739512855659316617158486956089630810879593217920664383239451136055186250267313916940510336707895822107599761861598572498546267436459729797851318164363361985916780236950285351689309144347784400912944573721535382005006869676494153917956983558469206396684123097222399158973113585012653810442407983410339988942074625299408652319019825213865508412681387861006188512273645681635442986298117236833648419016313099591950374197090314809815712385771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.nycsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scavdwebprod01.nycsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scavdwebprod02.nycsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scavdwebprod03.nycsca.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5afcf3d77be085bb6f6f7964233b54bdd8e4469d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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