newyorksportsdoctors.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:01:b6:ab:96:16:be:95:f4:ab:34:e1:75:ac:de:21:a4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newyorksportsdoctors.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:01:b6:ab:96:16:be:95:f4:ab:34:e1:75:ac:de:21:a4
Serial Number (int): 267464218106064976212556775538565784150436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:25:f2:c2:43:3e:82:8e:db:13:47:e8:41:e9:86:88:eb:98:68:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:12:14:e5:36:6f:b2:a3:90:4f:0b:c8:1d:18:8a:54:3c:77:2d:d1
Fingerprint (sha256): 97:ff:7c:17:65:85:a8:09:62:4b:06:a3:60:31:cb:d1:e6:38:57:be:72:52:52:23:56:8d:1d:01:3c:11:07:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newyorksportsdoctors.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newyorksportsdoctors.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newyorksportsdoctors.org

Other certificates including the domain name newyorksportsdoctors.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for newyorksportsdoctors.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvQNdV89v9cBlRiIhuHOz
NIvPFUx9wsoUopBI0X04HMnundJljDpcgMZt9sYB+UmC9TeCxU7LNtl4hKiPDht4
u5hT5U/HwOIERoykMGNGwiVjP5i4WrDzXY0zxo+J8BqIeVHeGA9J6LLROIZRPDLy
XYjUKRhncYujUdR+yIWFVLWCg2jakC6PArfVCnZH3vFUL75DGOTupzy2GzRZezzz
5vxkPkQqFNS8H94+rv1beqZX2CKqKA02qOAjMetHyFEoTOSkl+Pk20tFMzpxrwfO
5wKjsu6LaVSQF6YcTrV+PeMtZhkLYgMvjbVnrqkc1NCy+SCviMKLOfJGnQhtmhXW
U8NQQ9UlPMlNdSFTPgvtjjCapcjnerZ0/kvQbjlsirGwu5FNkCnnF7Kei6LSf6Hz
UpyCeWtn7J6BGiArsVLvfwpLYuco16e6uPgDywMW2DNpNUE5wMhl3nUs3+8ZABoy
wp+s8sSh1hgTDzMk8YTTFC5LbTy9JhbQ53PRm+s9bb/EcNERPDBcXvK5TIKOyXco
j+OrImw68TFvbr9AU2JymmzarW+MDVRz4HvPYr9/rsHa72ztt18JYQANY4jdHE1E
PGNB1MU4LDsVHdx3ixSc7YZUy6CGI2M1kStWlYkH9qZPVsROeQDyfHZa0zu3915G
ZNaVXgJ2Pc8H4ntM1udqY/0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267464218106064976212556775538565784150436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 08:28:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 08:28:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newyorksportsdoctors.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771106347827013220776666951895204947903733549379232837177512987324067044690709370075018382290362184228337808988147918799760704335386181369809174030465349851655839631870331805299851455008317825992724386489592383082830621015427008946767479968111873966791510689655330220687995399428268839997580406680771133676751268879480285404964274548358054590170268830913447342331284972309462545521819334559766273489812090680180081168349234275414531592189076166712732852034225076953256446531216142417201290749952616809952621215374904957952491468438648240814218123156597569002494335189126018753924629254699457470264336207395303364020092000887182822094312843811219167003439262422649289620381579346847940245963308056974631442320617434983540455869183284452728889279203515623710170993143957470479485772893047693870548549159960552374530475947268740071099707631298722820673702175091943324578517775424447813915689065920484738733351117482193027671200142278098026781300370824422432783873430973646795968521113719476624472499094076826258938046044323845243936641512105470670174069734661540754659314158524545326793567032787649459198090589468124623103273168618247983238934243950745262438471884007505026004823374993785592671470555987616300592274374650622587790058493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f525f2c2433e828edb1347e841e98688eb98683e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorksportsdoctors.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ea70a6c670000040300483046022100c9071ec9027da75e84f813db9bdd9043ba9f0f1672cb5d414fe3ceda6505ed5a022100bd686297893a0518105dd9bff4d74eb02a5b7a85a3ff48b6dcb3b0da07ea782000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ea70a6c8b0000040300473045022100a73f7cfdebce4dbd931a9fb0ebbdf2c53e4867b4e7a00010237b54a49d8342e002205fa2c35e45f46c4d6f4c9199c83ca382f54c169648eb1e08b0f1d0c2011b279a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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