www.hghco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ff:51:ba:0a:82:9c:fd:51:5c:78:e0:a4:9a:08:77:15:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hghco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:51:ba:0a:82:9c:fd:51:5c:78:e0:a4:9a:08:77:15:a0
Serial Number (int): 435329780739926903500653294117850327750048
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:37:62:28:aa:bb:06:3d:29:d6:c3:f6:42:94:f7:c3:fb:b9:43:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:22:f5:20:8c:6d:34:23:6c:32:a4:e9:eb:76:8e:f9:58:a6:55:51
Fingerprint (sha256): 42:32:e9:09:3b:15:c1:de:ce:cf:c5:42:c5:9b:58:32:6c:b1:64:2c:33:b0:35:9f:4a:81:b6:e3:a6:86:72:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hghco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hghco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hghco.com

Other certificates including the domain name hghco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hghco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435329780739926903500653294117850327750048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:24:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:24:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hghco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837921835350115880810349095495188260253249299274425551053627638145844568284801708050567607388671776310063830535962310093953108594515765056243917548082145648590169787728843183447597503978536752041888651005251386610567688839970399778529804715039845583211456776555868201843900931648887147245739558973875282809975574144730899595504587736927459988155868979310335774914569928836282542121755089595761493983917781883179037977388386742737907676393204118451404233271383040614515227219962830504417308253276252495937624713157220249444417235337837953746188130595804992606953587040156051693074681057093061377042812890884130098316557803485883339725932112485879311300524280205283937629797011175832044434692477620555564499266012814859736368554104809966840672965389142182585181617371126275262425218544498196721623090035031087488906934464678505369882231468734128931851776697847263468356073486449363005249093810147569431927304962947963047991344869492598769344512513029840184092728869328031513622504581560509272915917037023367252600576206124778369414454487872059905359040449979233993200842141409944047366735152438417958996497316451531797728376973600716784119093940733070208264590089920496565205159693822838798648553842566567620637842152369970552083328291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28376228aabb063d29d6c3f64294f7c3fbb9431d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hghco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc4a5c96600000403004730450220710509de08b987facbafbdf70842532fb1ca75b009e8a3873625f1967a95a07d022100a6cb99c8e0d56a4207ef8b354894098cbfc93bd80b3e5685e9377ff67533bc0d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc4a5c9630000040300473045022100d65e6bef8f863f0838327d0d99b27229451bd314e9593ca37ebb81cf03f3ca03022057fc141d1e2227f8471a3801b3090fc1b84ea11ecc7dc1267f8f185da75e8818
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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