200.momentmagazine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:3b:b3:ea:f0:c7:be:34:e3:fb:f0:b1:b0:ae:b6:6c:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=200.momentmagazine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:3b:b3:ea:f0:c7:be:34:e3:fb:f0:b1:b0:ae:b6:6c:4e
Serial Number (int): 337979748990541305710320933648896032664654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:d4:f5:10:6b:a5:93:6d:ea:fe:4b:85:5a:bc:8d:e9:c5:59:dc:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:56:cc:bf:89:1d:a3:18:c1:bb:e4:f9:0c:4c:fc:7f:c1:17:d5:81
Fingerprint (sha256): ab:f2:8e:f1:c8:4a:74:bb:67:c1:e3:cf:87:ad:c6:29:26:37:19:2d:36:9e:d9:8f:68:51:37:2f:2d:f8:81:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 200.momentmagazine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 200.momentmagazine.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

200.momentmagazine.org

Other certificates including the domain name momentmagazine.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for 200.momentmagazine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337979748990541305710320933648896032664654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 16:21:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 16:21:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200.momentmagazine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903322440898043917357663305954065240412107972306635995375596746527767448796231109828761048798821430268723132249774064618609947170047757203015640697741645829137830332000897246596877201833067782229641047744435063551903708142579912010786235443338512218047689391865343775744957219884746685300785072270347323611779179275878958662579161728004467989767519446348389941247041767436456670529959216206895265605513771276296993390398920349767122678861531768021790705183370454401888125963714477594000296880731083265804464491505785290258385059078942906912793662507722653759590642181583592192562788141506325265714166950093296889540160480523565858361831602136972322751918319525806115322911529449373486574546873446844982895854751781413019179894788328441932217847316501958236197424158952751504343893576161683378987106295445961127435506278719338625242455776015088461480653734743033066900799187885067940057656188055817999121809278592182500443585009714164965437878696266241633133499639090211664313608174939457728463137390095805547792585067506549485739819558038346290535019969209633296172179454317934545586783254605496176231807259142383257325467002638878189700126208801043970376157624624650043903340656360286899237264946209452117468845117381066899161097001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97d4f5106ba5936deafe4b855abc8de9c559dc2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '200.momentmagazine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169e95e97800000040300463044022074c2e97e1daa65cf09594a9c1c946b365622401a8f38c7315fcf60028e38c0a602204d55a7a85b33fbf48a0bc5d3684c148fdff900dbbaca8fc33702165b0b112c5600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169e95e95a30000040300473045022100e5b51f1d795dd8e5bab2d64c14a07ceaa6ccbac8ef50cb2068e4caf5e7aa5f1902207a20a273684a36ef469af227a48ca9f5f8e0dd4b12f2b218e63840878edb5f96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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