www.newyorksportsdoctors.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:a1:b8:da:f3:14:44:b2:5b:8c:9f:ac:8e:35:27:e5:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.newyorksportsdoctors.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:a1:b8:da:f3:14:44:b2:5b:8c:9f:ac:8e:35:27:e5:6a
Serial Number (int): 322462367004896076600089483606722345428330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:31:3c:16:90:e8:e3:08:61:24:de:81:8a:b0:45:4a:50:81:f5:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:2f:00:83:1e:63:89:54:ae:ec:25:74:9e:d6:0f:b1:8f:23:ce:15
Fingerprint (sha256): ff:e3:32:a6:d0:2f:97:c2:ac:70:dc:12:e6:d5:53:81:45:ed:7f:33:2c:fd:20:cc:f0:53:7c:01:35:aa:e5:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.newyorksportsdoctors.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.newyorksportsdoctors.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.newyorksportsdoctors.org

Other certificates including the domain name newyorksportsdoctors.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.newyorksportsdoctors.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322462367004896076600089483606722345428330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 08:28:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 08:28:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newyorksportsdoctors.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 595231968831672061707097374268804057949500667555465603865917276869988427766251077673031802710105581502544828695408194978724526464675351401471791463291871364069148190104950409120193026188759649727363618535631466038128841381117699285317621720798202740197382438592001341673797429203163052255086145238738488694876356797301384168945861688386145891731345895158413100719797838296926297010309859827042710261589606531315076240228834225557754838754566770643162920730229444443775623864450145651646585838754359535436948436582191213959280103555278671369813781483570227860716356704355393274804564708985695625435321558786990611063106743026222076878936554563355951619021411312313228891201126427200611424901101546971575925608159853712575246888231533204256416287186022136220427494981672581592041509741727035272003604575492755492248866242497352155297445877876742906533839322107178030448540474398350258892999314439036843151818938751517827062735661713238207600315907861014534472130739361456435332589748308884090068223271502951859176119224328961151834313604504085031223431007227453485213394977416403937502704997294563194379809064437045579957335909476762975092011904892441947126582539802340638897999568787033344860593607717935079922885911210077967078225391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e313c1690e8e3086124de818ab0454a5081f52e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorksportsdoctors.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ea70a6f270000040300483046022100aeaa8302c6aa3f342f8b8c8703956f0705794854d3eb34cda6f98562ceb61d98022100922433d87fb923268dbd89d897b64eeaa11d6af2db681631fc40c8da5fb7900f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ea70a6fdc00000403004730450220552edb6cae2783b173582f60b3299a7b9cf54247b1773db47e1e337def90d56d022100e5eb686f5c43ff2ac15c7fa3c78d2fa87959f8d6fee87a3782093f37eb99b9b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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