nyca.vc
Issued by R3
About this certificate
This digital certificate with serial number 03:f0:cc:56:9a:26:61:86:71:ca:70:f5:ce:b3:c4:ba:52:7f was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nyca.vc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f0:cc:56:9a:26:61:86:71:ca:70:f5:ce:b3:c4:ba:52:7fSerial Number (int): 343276238031507859721603618008943218545279
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 91:a4:ae:35:78:72:73:a2:47:c1:c6:0c:b4:69:e3:01:17:42:93:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:b2:d3:bb:23:a1:2e:7c:51:f3:28:25:fc:29:8c:6d:78:81:bd:d9
Fingerprint (sha256): c6:7f:7a:de:a6:4e:f7:70:6d:ec:3f:00:0f:9f:9a:3e:82:ea:6a:d8:f0:89:40:d9:61:34:3c:3f:5c:e9:33:69
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nyca.vc
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nyca.vc
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atomicforge.com
champyphoto.com
gayriyadh.com
integrityseniorlife.com
nyca.vc
philandsharri.com
salivalyzer.com
champyphoto.com
gayriyadh.com
integrityseniorlife.com
nyca.vc
philandsharri.com
salivalyzer.com
Other certificates including the domain name nyca.vc
(limited to 100 certificates)
Certificate
The complete raw certificate details for nyca.vc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISA/DMVpomYYZxynD1zrPEulJ/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTQyMTEzNDlaFw0yNDA3MTMyMTEzNDhaMBIxEDAOBgNVBAMT B255Y2EudmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPMmDugEt ovp08Q2gleB0gKrwf13xBYaJ1GZHxuxu6hXrMyVhtAqta+iB8GSqH3xnCTrZXYD/ 17JZwxNLJu20uS5Pip/tu1NJtcikrQJISuWFJ533yeW02lEi7iIAef20qsieYFkd KWI2azVEGdpUTKwKg5N+e/Rd05k1hpVjLxYiYgZfrt/7QmA3oXwe5vCFFzxSFW1r RfOng1lIixBoq43J/8QHfkC4eMO3cyzlkHTpeczOVnBukTecMzJ11CBXiTd5Z10o szqmlEmHTiMjXD5uthxywLKuuptw0JDC+Nc30LAWcQ2cGcTSJEViwDrmistVJuDD 6B4mNbw3vhxVAgMBAAGjggJ5MIICdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJGk rjV4cnOiR8HGDLRp4wEXQpNjMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIGABgNV HREEeTB3gg9hdG9taWNmb3JnZS5jb22CD2NoYW1weXBob3RvLmNvbYINZ2F5cml5 YWRoLmNvbYIXaW50ZWdyaXR5c2VuaW9ybGlmZS5jb22CB255Y2EudmOCEXBoaWxh bmRzaGFycmkuY29tgg9zYWxpdmFseXplci5jb20wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAY7erHsSAAAEAwBIMEYCIQDJXG5S1xF4ijZQt7H34UQ9 xuQglMbl2+Hj4qI3DCNO9gIhAKBrYwldQOUQfsL9/y5KlalMia950MxEyjnlvx4r yy6ZAHYAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGO3qx7dwAA BAMARzBFAiBXtGM5FoNt8oKJ8K9ICYV9P978mvXqnof5ER8YvZoTzAIhAODuTCiW BPkb5XleaHv9Zkgdckrs74fYl4ENPmx4qpf5MA0GCSqGSIb3DQEBCwUAA4IBAQCc JoM0+TTlS8lNLaM2CNOTOGcHXNPxNMxQiuAYf0dDQUd05rzutss2cD5gQZiwZFYC 2kj0HnLvVkXx5c9mY2FxnXimwXeCramKQfwdApDCbQrhPDe9Efc/5YhkLM/L2zCj QeozoZIXXO7Yzf34TszSMG4myfgoPJpDvKVRjx40zCZ5UoMt+3c5PwvMlqqk7Nw8 GIozdL0RF4bq6qpasf9PTZamrrA+lNSLnMK6pc1flMQr/iyVMDF7ix9LGC87NIrT OIvsdviwd6w6DuJq2+0NRlWroRsyuPoP+YMHyY31Zsu475Xv7ZQBh5jEw1mMa3S8 7qASLPq+yWRb47qC5CW/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DzJg7oBLaL6dPENoJXg dICq8H9d8QWGidRmR8bsbuoV6zMlYbQKrWvogfBkqh98Zwk62V2A/9eyWcMTSybt tLkuT4qf7btTSbXIpK0CSErlhSed98nltNpRIu4iAHn9tKrInmBZHSliNms1RBna VEysCoOTfnv0XdOZNYaVYy8WImIGX67f+0JgN6F8HubwhRc8UhVta0Xzp4NZSIsQ aKuNyf/EB35AuHjDt3Ms5ZB06XnMzlZwbpE3nDMyddQgV4k3eWddKLM6ppRJh04j I1w+brYccsCyrrqbcNCQwvjXN9CwFnENnBnE0iRFYsA65orLVSbgw+geJjW8N74c VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343276238031507859721603618008943218545279 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 21:13:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 21:13:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nyca.vc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26792495921670007837242112510964067183948273568554753483215703699819800529801500262553729262338203566664934034891929055684509770205822780807707227411548653770417505405115245207075355526925684370226076985175244174760721815214807395132020115966971736818064220978827199538704142990531003024855357687935842730925643309711553535771175976145408340376181252031362329769582678623657180310919873849338172567662292953890261973769832992900174608073407485816089740393122551127846716282937920530001169981239890520536132797859747910729231796098545472609714850712592492070844537120170107899721022934433690233232037631845833797147733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 91a4ae35787273a247c1c60cb469e30117429363 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomicforge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champyphoto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayriyadh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrityseniorlife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyca.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philandsharri.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salivalyzer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018edeac7b120000040300483046022100c95c6e52d711788a3650b7b1f7e1443dc6e42094c6e5dbe1e3e2a2370c234ef6022100a06b63095d40e5107ec2fdff2e4a95a94c89af79d0cc44ca39e5bf1e2bcb2e990076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018edeac7b770000040300473045022057b4633916836df28289f0af4809857d3fdefc9af5ea9e87f9111f18bd9a13cc022100e0ee4c289604f91be5795e687bfd66481d724aecef87d897810d3e6c78aa97f9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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