nysc.link

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:4f:ec:dc:6f:86:70:95:e0:5b:c3:5a:de:14:0d:46:12:bf was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

nysc.link

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4f:ec:dc:6f:86:70:95:e0:5b:c3:5a:de:14:0d:46:12:bf
Serial Number (int): 114309435292827386361110842869456029749951
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 52:e0:7d:8f:71:53:66:5d:84:36:fc:91:7d:91:61:3f:43:9e:fb:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:5a:49:0f:98:89:f1:f0:bf:62:2b:9f:5a:f2:38:52:9d:d9:2f:1a
Fingerprint (sha256): 8b:1c:4f:6b:31:ff:3d:31:8e:7c:1e:98:c4:78:bb:8f:88:fb:a5:aa:6c:69:39:98:5a:8f:69:02:08:fb:18:16

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on nysc.link
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: nysc.link

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISAU/s3G+GcJXgW8Na3hQNRhK/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDQxNzM0MDBaFw0x NjAzMDMxNzM0MDBaMBQxEjAQBgNVBAMTCW55c2MubGluazCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAJ/XNhFlr5RyTkcF+aHWEOwkdTzR3qmMkYuCr9kJ fvO/V16eXEUlrcZHIMbDaUd9+keS54I6imB8iTEmVdLURoJz9zOtXgeg2nVf0fOv KRlMpk8HWfMVzkg4rq4JydmtL/5Y33IBnu8cwa2xYJ1y7yS6YHbI7MV0mVh8s7wx pwfZ2yIiUn30wI2oatkHnOFiP5mlNflgho+Xxt6q+1i8OzEbZeh/HoRcGzTCSclH Sy93tiLAIQlaqYbOL32btz2zp2R6LQBhQ1SUr25sKsgMVId3VuD8JDa205aUWtDI KomL6LI498RJNMPiszf2WqNNzojTgs+7RsVvzQaUHsCTltiyms9zjD+RneTVfdgL u6jrJHUzGKgeTn1hs/7xrdFsNsmtFk/BEzwLHzXL33Ki87b3ykY7QAyTpd5GySu+ AL8nP18sm3Xtgm0sXWcOF071y2QoLDws+ElHxX0r8tCJEpJRTfbbrGIZMFYRsElI rOC8zi7DPj2F+n2YqjNaFNVVeg+ZTTVZ0mPjwfam/EzZTaNdh5FpixVR1mrM3r2S FDM1Ded00N+2xYS/TlDu7DyiVdsTRdsQzjAUhxt27XMbcMyHHMoaycPbeA1/YhV7 m1WnKj/lqtLLz3nGFRR5kMFrfGyfrQf0twPVk9OEB8UCUBELEv6MGPKFaiiwwtfx RazxAgMBAAGjggIKMIICBjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFLgfY9xU2Zd hDb8kX2RYT9DnvvxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAG CCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgxLmxl dHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14MS5s ZXRzZW5jcnlwdC5vcmcvMBQGA1UdEQQNMAuCCW55c2MubGluazCB/gYDVR0gBIH2 MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMg Q2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQ YXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNh dGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9z aXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBTaBx3cyhKc7zTAlp2mTlg6sjm7vFl hcWba88yzX45+X/C2CbOyr/PK/oP+WB3TyC8/h53q5EF2NrC+FaXslD08NSCjYVP RbM3tc1jlKZVVd+7CpnM0CzPnZ3UZq9zor2BvwGTSDeTskZRdP34+vm/7m7DQaFY 3WvJv3kUhdPlGfafZBx36yf8rATO+8FtuvUONG2SGFu2tFryKJH5iwaVg2B3MTfl fjlPUPHy4Oayj4st3X/BV0mksbi9q0nfTwKiU3pH1jKvs3Z3CtF4OXoyZfpZie5l Xg/T7iNAzMdNmK5SbZw0o8W0cPtGJkAkCnqoSlenRI+ycWsRS94lYNpT -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn9c2EWWvlHJORwX5odYQ 7CR1PNHeqYyRi4Kv2Ql+879XXp5cRSWtxkcgxsNpR336R5LngjqKYHyJMSZV0tRG gnP3M61eB6DadV/R868pGUymTwdZ8xXOSDiurgnJ2a0v/ljfcgGe7xzBrbFgnXLv JLpgdsjsxXSZWHyzvDGnB9nbIiJSffTAjahq2Qec4WI/maU1+WCGj5fG3qr7WLw7 MRtl6H8ehFwbNMJJyUdLL3e2IsAhCVqphs4vfZu3PbOnZHotAGFDVJSvbmwqyAxU h3dW4PwkNrbTlpRa0MgqiYvosjj3xEk0w+KzN/Zao03OiNOCz7tGxW/NBpQewJOW 2LKaz3OMP5Gd5NV92Au7qOskdTMYqB5OfWGz/vGt0Ww2ya0WT8ETPAsfNcvfcqLz tvfKRjtADJOl3kbJK74Avyc/Xyybde2CbSxdZw4XTvXLZCgsPCz4SUfFfSvy0IkS klFN9tusYhkwVhGwSUis4LzOLsM+PYX6fZiqM1oU1VV6D5lNNVnSY+PB9qb8TNlN o12HkWmLFVHWaszevZIUMzUN53TQ37bFhL9OUO7sPKJV2xNF2xDOMBSHG3btcxtw zIccyhrJw9t4DX9iFXubVacqP+Wq0svPecYVFHmQwWt8bJ+tB/S3A9WT04QHxQJQ EQsS/owY8oVqKLDC1/FFrPECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 114309435292827386361110842869456029749951 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 17:34:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-03 17:34:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nysc.link' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652093036141484263074409767677553154179003048297014683736853864890329047674757257992014796849204582109405790737322525504346145665904627839090433030377412334742673346287905411174568542517142806882295020598814508273188310967723780164396783509670140546052453287627621487955549300396822397058072439989038589403983070412131682981174627537516028144846963845409425853317276785316261977385095683913752703447338465405825000059858669363576666513789808056208008320178577116365578832116463919613159970604616854256327705272549944850200168783673222792408776317006149219034247444671551831181776030281046355601577322913138230825336988194268744696803339153504579493541386968619641079239082277169326900674462983970216297435311990017949801738723347869553080496320143446126171262819277291178376469507778549476060248303998728371036506093967945586835668476755502749868908251023577593444738644420459986367765561292371274167789510658547649857298832312698347591020543307925850427307638597224197754852375493486438777664326646933188072684266799971987149711087642370824485336219724197799684817591055154430827193880700235293850669092934978568141787851372296411125082805822529039515276098339772152990971095778128844890351696094768049446514486947607998797629992177 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 52e07d8f7153665d8436fc917d91613f439efbf1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nysc.link' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0053681c7773284a73bcd3025a76993960eac8e6eef16585c59b6bcf32cd7e39f97fc2d826cecabfcf2bfa0ff960774f20bcfe1e77ab9105d8dac2f85697b250f4f0d4828d854f45b337b5cd6394a65555dfbb0a99ccd02ccf9d9dd466af73a2bd81bf0193483793b2465174fdf8faf9bfee6ec341a158dd6bc9bf791485d3e519f69f641c77eb27fcac04cefbc16dbaf50e346d92185bb6b45af22891f98b06958360773137e57e394f50f1f2e0e6b28f8b2ddd7fc15749a4b1b8bdab49df4f02a2537a47d632afb376770ad178397a3265fa5989ee655e0fd3ee2340ccc74d98ae526d9c34a3c5b470fb462640240a7aa84a57a7448fb2716b114bde2560da53