nyupress.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:ac:db:e5:35:85:7c:9e:4e:e0:93:a5:42:be:7d:6e:64 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nyupress.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:ac:db:e5:35:85:7c:9e:4e:e0:93:a5:42:be:7d:6e:64
Serial Number (int): 298997687133783199588418349193438684868196
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:9b:e5:e4:92:40:05:56:29:37:af:88:da:79:25:7b:d1:3f:7b:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:17:c2:14:94:41:7f:d4:10:07:bd:f8:8e:e4:60:b6:e2:71:e1:04
Fingerprint (sha256): e4:7b:0e:63:fb:7a:dc:6c:03:2e:79:c5:21:2c:f9:3d:46:ed:d1:29:bb:23:d8:67:26:7c:43:fe:38:a3:c9:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nyupress.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nyupress.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newvillagepress.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
www.nyupress.org

Other certificates including the domain name nyupress.org

(limited to 100 certificates)
keywords.nyupress.org
nyuresearchsites.org
keywords.keywords.hosting.nyu.edu
www.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
sni.cloudflaressl.com
sni.cloudflaressl.com
nyupress.org
cart.nyupress.org
www.nyupress.org
www.nyupress.org
opensquare.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
www.nyupress.org
newvillagepress.nyupress.org
keywords.nyupress.org
keywords.nyupress.org
nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
cart.nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
newvillagepress.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
witsuniversitypress.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
dev.keywords.nyupress.org
NYUPress.org
keywords.nyupress.org
newvillagepress.nyupress.org
keywords.keywords.hosting.nyu.edu
connectedyouth.nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
nyupress.org
dev.keywords.nyupress.org
keywords.nyupress.org
newvillagepress.nyupress.org
nyupress.org
keywords.nyupress.org
witsuniversitypress.nyupress.org
connectedyouth.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyupress.org
witsuniversitypress.nyupress.org
nyupress.org
nyupress.org
keywords.nyupress.org
cart.nyupress.org
nyupress.org
newvillagepress.nyupress.org
nyuresearchsites.org
nyupress.org

Certificate

The complete raw certificate details for nyupress.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCsnut0fOqp7A27TGj3d
/2+9gRMqz4YlxQG4kfJUKdn6REHeNOVeOKWE4vH4cDXGHy+2s//uWGc1GACaET8/
jlk8rsGGSGBDaren0gOAF3Frv9Ihrw53240LTI72Q7tjLgVqWN4KOfJmUaoRtlP6
+ytmUuTHs/ZUfKd033N3b3umYhxAWxSj1E+lWJl+n15r8zg7OocIy633u114zXBo
fOX//AuPfaSaY4jj+4pdACRvDRmyXCgGLTF1EOn7bNGOeDY4ZASNuI0I9StwOVMp
B1dJJ/zUnSfz5EP9Pi7JIioU4tn5MXOiY003TwUoghDaOXqor5iipKzslw30iPln
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298997687133783199588418349193438684868196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 13:07:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 13:07:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nyupress.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21734269073988031094053008676156090598753402254794388966916951903539145440550522399678665067190153762874484014071507732328186513266633973269382088769873749481897628423478525897302308418839456836092221475270300300621557596234068834708648422779486661146297169705456828793546351626113485678763443029463496323288211338211704904427276607861055176779040352030673533246944017886513396741868177586080802734183264400734250704378259025212455122631554419065643144709914323332899684538930825340444136157414301193928449394437639345796432548844205758976103182694846782958997533214864246753480979812973770515215143134597755778459397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							309be5e4924005562937af88da79257bd13f7b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newvillagepress.nyupress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyupress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witsuniversitypress.nyupress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyupress.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169edd33ea60000040300483046022100ad255aa95268885b176e10038c59a0a31a52ac1ebf982aee2d1143dc7f0b47be022100f75292614e30b4cec0c6e6e295ce634db4aefb556968122606cc4c6f9b6843d1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169edd340910000040300483046022100e89a84757fce11baefdc9f3aa97ad268336fb692b2a2ecdab2efc5ed7b6eb0c1022100da0786b93dfc37ea8ef06740ba10dd9196f62ed5bf794d6c9b84c6810e74dab4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d7156745151ae2da4fa3c8b4d21041d3736a6f6af787b6c47fc6b231d8b6660b37e85db168edb3d7e01d7cac20503df367c2cfe56e82ec38851e88ba0281cdb0ed677e8dd6252b8717e219766d11c99e6a8bac5b6ae0994a8c22a8112c552ef38ad6d3f4dc22511fddae85941b5cc50efbe817bd0b52780f77a6cbe0cefa76f55ca0bf4ce3c977d97fc38d4bc6467fac09d5b0b5e25712106ab8eedc593a43f22de1606c1a5be28fce739e4cb8109f87bb5cef97facd99d3df948167bcffb07e30de47455294934bfe57e1aeb68a6fafda54ca7cc9677662b14f6719ff8af79b711bbc6a057f240926f794ad5e80114046382bc5085d9cf03bd55507f9796f8