khgco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:15:1d:1f:17:de:17:a7:1a:05:ee:c4:c9:69:f9:b1:a8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=khgco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:15:1d:1f:17:de:17:a7:1a:05:ee:c4:c9:69:f9:b1:a8
Serial Number (int): 270892829064233077377797692977622342545832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:f4:c6:99:6d:0f:f9:fa:6a:32:3c:a4:b9:c2:8f:7c:71:cf:21:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:a3:1b:03:4b:f2:c9:cd:4c:dc:ad:a6:c5:55:56:18:78:cb:ac:99
Fingerprint (sha256): 16:cb:14:bc:79:19:6c:c7:e5:0c:ee:07:bf:e9:5a:ac:08:0f:26:84:ce:2d:ef:96:63:3d:90:50:2c:ef:58:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate khgco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for khgco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

khgco.com

Other certificates including the domain name khgco.com

(limited to 100 certificates)
khgco.com
www.khgco.com
khgco.com
www.keanu-reeves.com
834.me
www.smartexpressdata.com
www.mazzawear.com
khgco.com
jokericasino.com
khgco.com
khgco.com
premmiebabies.org
psychstation.com
ugpco.com
rkoco.com
www.khgco.com
www.khgco.com

Certificate

The complete raw certificate details for khgco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270892829064233077377797692977622342545832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:34:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:34:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khgco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877827105835583958571976096047697718905802972025558858469930293180462852297089791697139190614354868857855265783616019982663906441427511732114579493180009183014442000882357633300009443938763172841532112260792439535816747439956943951398744733569706005761051695200481686021277853563148132790054623130152082242694760769498876416987974194880098039743983168329445249922707297709995959141040809904867287292673818967482835402303032013793275826709103988339032939113803666196987552117965742472989666730033273770820765938997660530517654979370837441218173993889103213015281867478425508977274158989302817519249589100480556717515746452526999475961827972071272054787041415211794387951732609655020782077012688832689587693416197694140627915724562066737016685012620423939039536183647797221233724575665606843301798981448408320258856622923048220904643864037030872290258597548196957216704267071161906622819572521039220739765525547017801740483945226939107975148154167688952077228686957786478162745548342079733791312491286921555761534728435506409845802310368294285359278618428314725631362090309192783774141488399079826475559356935071049578049367674239718840115785973471910663760280752657181695186297215985004664852161769167169997883315887617017256811584889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8f4c6996d0ff9fa6a323ca4b9c28f7c71cf2181
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khgco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc4aed929000004030046304402207ebc92ba9222567f0964ddf2d425dad67d8a8af063225e11dab5605af6cbfd980220420f109a13dc8d4e0b95021c4ebb0df5b128d9e4ca50d6c9966e68d7920650d1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc4aed92a000004030047304502203a8288029c9633c04d2294ed0945cdb33a629b98c2520974549e170817488628022100e525f6918b121357d1497c6a7c558fcef18270a85aaa2023ab09c9ca80198133
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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