www.fg1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:aa:c9:8e:59:d5:c9:cc:0a:a0:35:81:9f:d6:09:63:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fg1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:aa:c9:8e:59:d5:c9:cc:0a:a0:35:81:9f:d6:09:63:8e
Serial Number (int): 344252488255240422207265899451853126067086
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:34:5e:7a:be:5e:ed:21:f0:80:21:45:f8:a8:f0:8e:43:f9:7d:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:28:b7:61:f4:db:91:cf:d6:1e:06:75:12:ab:0e:bd:88:ef:ae:4f
Fingerprint (sha256): 4d:ad:f3:51:02:9e:c9:ea:41:0c:86:98:f0:a7:03:96:3d:00:79:81:ce:58:f2:7f:2e:09:33:c1:60:3f:e5:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fg1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fg1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fg1.com

Other certificates including the domain name fg1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fg1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344252488255240422207265899451853126067086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 03:52:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 03:52:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fg1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808003769797289125134550270334081522300667322161637087888052389155118306504639184851361105283878600390497224978989671908915926457216654118865695157008219154245237279902049509189651120097647796671346735236200380038729927823505079175577926047384498630870870113274114992268859643375906283327813998564037738545856583860154406332538800727413904690141441552161859466690119541871897023544040609250053690245728234744411416060247508827804686096194266199470894362298529812720791246446341578792950914306451465074657810782191565844050492135925826116110090623475860174032999263489037783718016723759115122485691599892983362557777914924742491884543285841455391128032440712224119582918115799984682095636580144613918870238606504872945638153377543928741001462452260912072367475527153966269082322288483174376063642093052090813330707414722040144335706724721411450470516492687670966239762803565447403383086564696780517659000190956265498865784319248739532783866701590181334171451612258191817270873394140528275945981266758154155135799320190230086122035756492987946310145378087901719468015935442800648500804925636358660549724163656569069523605320760975812627577739016774828600851056476208990697241251508156299314889788581514092388748425127188346130486014689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77345e7abe5eed21f0802145f8a8f08e43f97d15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fg1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1b01f89c000004030047304502210093accb7f96a6f7d21c39643d9cefc029cd9e8cf0b090c3b9a17dae979ca83c14022065e29ccd90ebd5aac5ce09d4c95bf66d236400671705c8dce53c38935e75011c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e1b01f8cf000004030047304502200f3614c93915549275f0fc697fbb625d0727f53c6c3e9fd6166e38234daab1fe022100a924ffd607e9f69793a9b6d9f2bee423aadd2900b169f7a669a6a01d1758c8ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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