hghco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:84:55:db:5e:64:ae:7e:2d:2b:fc:2d:ed:0e:1d:57:d8:b6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hghco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:55:db:5e:64:ae:7e:2d:2b:fc:2d:ed:0e:1d:57:d8:b6
Serial Number (int): 393480539567781922664472030230594054510774
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:fb:64:74:0a:2c:36:24:30:c4:15:bc:da:d6:d6:36:6c:e6:cf:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:4a:fd:69:c3:c0:8a:e8:7f:8f:d5:df:fb:77:49:8f:b9:6f:e9:d0
Fingerprint (sha256): 54:57:78:51:64:b6:9c:84:16:de:a7:fa:d6:6f:92:57:6c:27:5c:0f:4c:0e:59:b0:7e:20:d7:46:30:4a:f8:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hghco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hghco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hghco.com

Other certificates including the domain name hghco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hghco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393480539567781922664472030230594054510774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:24:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:24:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hghco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824447288431326287566028728581903360517704298399385783664440309237889856303903148687091113704091880118558698729817149250380404843732217872825616441691630972459786637635347820480088823725690051041756812006545202915383727341373443102264896199279155344097653653654630379325218607891593865512739198197802203662616119174102954869880955304378614976291693081689526964363361678097022092219922395658181648500086653793174843207504921270730035302439713303104760692452815492575533457498314759269857381370007378289022364328420031351847646319329895125901231612327408453436577824565281119236854923759955565546484675305983349841016610953067416667228992266518249503311592608173947240612910391613787634710236131141234654063299905597325643611785776078762482035643621946393346856592270229681228927136252339377107886288975851330942832151715719137387198748304679957477886213230465742842784752490810769161926412778059999855011787966434908601767349110148912821941996395970724230875833246319273916191261293855335848786112870552365818555750674032884010325584162659990266899621660760167305053069619181014493408524591188387124647561792069055442675479683513274129817711257675747718446625175543358222570393103390204798833731894503937129784714229635170629577958109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adfb64740a2c362430c415bcdad6d6366ce6cf42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hghco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc4a61a4a000004030047304502207e04787b053534a8f6e466ca6ce256c7ba775458037d6e471d1210e9a165f150022100e674196056548660b7bdfc84dff8b3edb3314a80c35142d3ee0f5f61738440510075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc4a61a85000004030046304402206df824d94347ec868d90703747ca19d2448783021f53a96d2fabd6805d35645602200495978b06cec7d5fb6e79d3796a92ec28cb08906e50b46f488cd25e1de1f081
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047e30b787f9353172ef9a18e4a797f749ac921bc9b4227509bfa395369cf92a97ca22aee77407889f845d58ba150d30ee42a1f5ce5e5d4939f2d1e53c7b39e886b7ea0c9af8a3e20cb9fb5c76164f2a7ae8e3786247f2390347fe56aa09554560e10d7c71cc88e15c605963713c806fd43cf3a24f5a2d05c11cc35d69e935418bf666dac0a23497a66d8542d6df5b3287d0a29ca74513ff7d5c6916b707bc62187c99e7e28c2c56a54855548938d62c8282d8d89eae3bffba0dcc04200c2f931a76026fd947c35c28a44450b327d232abd5425cf2d7867a1c03df957c118d6ab127140fac82c8ac4270673cb5dd2a509308c2d09721fcbd9679f9d27ec7d88de