www.egfco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b4:38:52:4b:c8:51:96:82:79:f8:45:9e:eb:d9:b6:ae:40 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.egfco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b4:38:52:4b:c8:51:96:82:79:f8:45:9e:eb:d9:b6:ae:40Serial Number (int): 409774833845967868172205389189422511468096
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e0:17:8b:63:28:3e:95:b7:72:aa:69:7a:b1:a7:50:6c:a8:43:bc:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:17:b3:13:0c:c0:73:89:20:c1:3a:e9:06:ff:e9:5a:24:52:69:3e
Fingerprint (sha256): 07:9f:8c:09:12:44:26:18:f2:04:f3:8a:5b:6a:78:32:16:d2:60:73:a1:8b:50:f9:8b:4f:ed:a3:39:48:3d:04
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.egfco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.egfco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.egfco.com
Other certificates including the domain name egfco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.egfco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISBLQ4UkvIUZaCefhFnuvZtq5AMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYwODU3MjlaFw0y MDAzMTUwODU3MjlaMBgxFjAUBgNVBAMTDXd3dy5lZ2Zjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQClLDun9x307/CA4ZJ9upoCEg3t3iEOIo3t syVkK0PeKXMV5JIStWEhThVoNXDOuq+Y1euhG3K2TZm4AUFxlbrA0iLWb8N5iq8J zFwjp5a5dBcaLSva+ScXKRsM/mjDvoXwRPf1Q6tU6gHKfO3S3rKq1a811zPozghg Rkd3FWwJkoUv8T+z5KoJ0CHZSJlH1skH1LH87V6DHMtGv5I6RSHyu7M67NRfllt6 KeyxqMLJ5LmGLLWZhyDWLvrrP8qRYfXmf35PiAYCjAPPfsGeC6hMqq+G8Mj9kxRR rrm37VFnc4MTJozKYCnSiARZurV3CtwAbkbjoe0IVDQS0MHteMlWQUYzI8mm0LfT mxhUIPbPPbZuC5MB7lkRtK6LWSRntfXBrmUV2aPbEE76ZMltkizZZtKwNZP544Cx huvBZVXELbGcBb+ampVHlK92KjwnCdRbg13DpidcUGmUDbvJb8x/oGQnSbIWNHKg 3GTAbug/gYAwxnGVtRXvTou/qIuM5ehno4DuZoFYbhr9bqfvjgn266WZbezfjWoB 1dFil+9/NUVAfSfwjCXo27ZGi8E5Gm/L0CU5JiBmdF8VilnlDavvtlN8a7o2rsnM O1od73TPPqBIV0Dj64Vhr6tIwmY189ZIoDiinyDMhnCFBKEryf0Mig/JBdmwT/nY KF7HRhSA2QIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTgF4tj KD6Vt3KqaXqxp1BsqEO8RjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5lZ2Zjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW8OJCzsAAAE AwBGMEQCIBB3LRpYPBvkGVT3evxA9CXAtCiSXA+zjFF09SuuCHbdAiAemFq4tZ8C e73LIdXzplN8nHkO1JzqabwAljizQ7OsfwB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABbw4kLKkAAAQDAEcwRQIhALAS5Z0Fgk672jQS5Ga+DYxo fmKleS0GrPwULWOw2XmOAiAR3/31RfPJjvkE44TYofhIlc9VUQ7TDrBryZvf95BG gDANBgkqhkiG9w0BAQsFAAOCAQEATZ9YfNUPbQEcto5UYesjDXNmtgF1ruJ2YZDt HuDsjCs0tejrCJUbW6skrOUAYjJJLXMDmFmKKu6+JEsSwK3h98DyjVwplHYuJ2Ww EHUSBRzFVZ2nK9zGsVsRa8lTuNm61mPUfMyZCtel8rJta1yOdI8uU20DclKMrCIt i1Fa8TuDQIsjb3XezM7Bx99l4G0ECyiVTHnNUlRidJcrzJGW36r1ywpNoiZQEowk ONrp4K56UxIgAK9uChzEtfHsQMHEpCBZj3sKR8j6yOh7EYXmo39xgDnWEPHM115i YIqHOTJq/ZXeJv1TOMJ2eM9+pyW0s3jttfC82ZUnLO6ccYEbPg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApSw7p/cd9O/wgOGSfbqa AhIN7d4hDiKN7bMlZCtD3ilzFeSSErVhIU4VaDVwzrqvmNXroRtytk2ZuAFBcZW6 wNIi1m/DeYqvCcxcI6eWuXQXGi0r2vknFykbDP5ow76F8ET39UOrVOoBynzt0t6y qtWvNdcz6M4IYEZHdxVsCZKFL/E/s+SqCdAh2UiZR9bJB9Sx/O1egxzLRr+SOkUh 8ruzOuzUX5ZbeinssajCyeS5hiy1mYcg1i766z/KkWH15n9+T4gGAowDz37Bnguo TKqvhvDI/ZMUUa65t+1RZ3ODEyaMymAp0ogEWbq1dwrcAG5G46HtCFQ0EtDB7XjJ VkFGMyPJptC305sYVCD2zz22bguTAe5ZEbSui1kkZ7X1wa5lFdmj2xBO+mTJbZIs 2WbSsDWT+eOAsYbrwWVVxC2xnAW/mpqVR5Svdio8JwnUW4Ndw6YnXFBplA27yW/M f6BkJ0myFjRyoNxkwG7oP4GAMMZxlbUV706Lv6iLjOXoZ6OA7maBWG4a/W6n744J 9uulmW3s341qAdXRYpfvfzVFQH0n8Iwl6Nu2RovBORpvy9AlOSYgZnRfFYpZ5Q2r 77ZTfGu6Nq7JzDtaHe90zz6gSFdA4+uFYa+rSMJmNfPWSKA4op8gzIZwhQShK8n9 DIoPyQXZsE/52Chex0YUgNkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409774833845967868172205389189422511468096 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 08:57:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 08:57:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.egfco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673846173666186584900570486724625216973646041479168221758875595356991284226004997251552930215550364833894262901906673459190550224443537250996237083857966424714772343482215615901204839416069301293541012256507116300723835975693195242220688008837652051421848421435329533114834878305517049322500874451823369872660483670351475623868461036711938977254171699057109057481366234891846201140682656004239219333547005663282440833141848772535175071962676328358024139205279501805709493203391981421146280651087421951069110372472429393707310843302943211984138393968051711945028452906087440019007895424914475085889853320268159000917684014243375881270332800707953850103097251899422834935418773874832364001953706536753045336071202384824329978715402775320707311491910755437092853299764040693761858539097393864126606284626789615128340790289447484679679482175206208752277117836818386216242188487991613491750257103459079334702659404042542608733892246273523956739254238491241536502319511220003816845437507496755050843990929798886916121681454569743346474160315918670999562946547169767787968972879792002080044373595588744329282958902848039457011191342586249362862357047380443268605012542781462375459822060474729139750247659156295069470188862627228649927246041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0178b63283e95b772aa697ab1a7506ca843bc46 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egfco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0e242cec0000040300463044022010772d1a583c1be41954f77afc40f425c0b428925c0fb38c5174f52bae0876dd02201e985ab8b59f027bbdcb21d5f3a6537c9c790ed49cea69bc009638b343b3ac7f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0e242ca90000040300473045022100b012e59d05824ebbda3412e466be0d8c687e62a5792d06acfc142d63b0d9798e022011dffdf545f3c98ef904e384d8a1f84895cf55510ed30eb06bc99bdff7904680 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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