www.pgfco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:05:c0:08:18:3b:9a:fc:e2:3c:db:2f:6a:35:ba:56:8c:64 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.pgfco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:05:c0:08:18:3b:9a:fc:e2:3c:db:2f:6a:35:ba:56:8c:64Serial Number (int): 350405809366711509515209170098882310736996
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ab:b5:a6:d1:53:08:38:1e:75:80:8b:72:38:60:4c:1a:f2:1a:8b:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:a3:7b:f1:31:88:25:ab:7c:8e:09:10:20:af:3f:e0:5b:37:d0:00
Fingerprint (sha256): 67:dd:6e:cc:9e:d6:33:88:24:83:62:63:3d:49:22:9b:9a:1b:a1:e5:a5:47:47:32:0f:54:55:3a:6f:de:8c:e3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.pgfco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.pgfco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.pgfco.com
Other certificates including the domain name pgfco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.pgfco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBAXACBg7mvziPNsvajW6VoxkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYwMDU3MzhaFw0y MDA1MTYwMDU3MzhaMBgxFjAUBgNVBAMTDXd3dy5wZ2Zjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDKFbYYmtWNuXHyQpEJQPtlMAc/CQaJU95v SjHLiHPcfEmHeZNqkwTLk/WC03yjwunmW9pTrpHI+kIfo6mpDcqvHgQsHK9dArOS 96bpI1dnDQcRrSXwfvFhQUBpQ10gquMXW8cZXehka2J+ymZ0Vm2z1ycvq17Gl10w d6K+lATZV5vKKkiz1/AGxgPAc8GfqahYv5rZK/wp3yjLa2JqRno3R3PEsEUEZEs6 28dyy83gf3V6mlyYpTJhfhwnxvTiFVxh0r0T7sHH4TAhD3bJz0Sf1En0PwHyDWmb M2mkxjZe62crANKnZq8aVBeaM8GuwShuaFVXOR42HyW0xbSHL82WCoz0CEXmgyi0 XpQBTsbzlyTJaiFvyqOiqHqr6xhW+DEUTbFjtI7dUMx+ry4+V6DGG/QFgvpqx+wz 7bICJOmJrjGcuOlUsURdf2KjfRuTn44VhPYKnYtIMz2N75SdqmYJ30YrKFGCGMcM LhgHTcWnJtEjUHLgqugsSnf6evI0vCc3/nhZ5v8ig7wWnMGuQdM30AJtkcMlfetR OPx3ldUxPqNcQMrJU8RX8SaQXutzb7xX8H3WCm5zA/T6nKC7faN4aTCaQPX8Nz+r iMyNkRfQB5CglFluGbgNrLYhTgwOz22ezTySeKRMt+8tzDsyXshLV5UyNQ7/cOlS F09hRaClYwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSrtabR Uwg4HnWAi3I4YEwa8hqLBzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5wZ2Zjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXBLtyPzAAAE AwBHMEUCIHXRS8cRd9hzuQ/KdQ8nV7d/8/54TKRoFd4wq85Lhi2gAiEAxOBhqN2O flmLrOhLn7mF3E5SxIKlur7KAZZLlHB1/0AAdgAHt1wb5X1o//Gwxh0jFce65ld8 V5S3au68YToaadOiHAAAAXBLtyQcAAAEAwBHMEUCIQC1W/90KyrOnq6WAJuSvn+N 13k/4BSF69Y5EP5+lLAQxwIgMno8D6uEU5n3G8WSATgVXEaQT7PePpK+I2oawCtn c5YwDQYJKoZIhvcNAQELBQADggEBAJiw4IujWqlZxaG6ZyCwEB7K6++YnOprNddP q3O9QBoEupO+kMOGOiaAyA5scCYM0SU/z13+2mLjf3mtQJDfw32+o24CNYInSaop Aw9ODzcJtK0M6IT0cLIJ6FeTbQdvhpsxwvqumEyOm7UI8io3OplgKW0Cw9zqemAs GDHsA0PkIjsjtASzhSo9+7u9W4xABTmzITjCQ5bITIpOyD1Z8Qq9URDjI5zs8bQO OidvhQZGQZHuQ5L3/NvjPgsqLpyYD+XR8rCAlA1/fjGTXPZvwdznKmzKwLBrAZ28 ZA3OEVV52VZIMfkG/E/jl1L1REFqGl/MPkegSDVgLj377p2FLbI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyhW2GJrVjblx8kKRCUD7 ZTAHPwkGiVPeb0oxy4hz3HxJh3mTapMEy5P1gtN8o8Lp5lvaU66RyPpCH6OpqQ3K rx4ELByvXQKzkvem6SNXZw0HEa0l8H7xYUFAaUNdIKrjF1vHGV3oZGtifspmdFZt s9cnL6texpddMHeivpQE2VebyipIs9fwBsYDwHPBn6moWL+a2Sv8Kd8oy2tiakZ6 N0dzxLBFBGRLOtvHcsvN4H91eppcmKUyYX4cJ8b04hVcYdK9E+7Bx+EwIQ92yc9E n9RJ9D8B8g1pmzNppMY2XutnKwDSp2avGlQXmjPBrsEobmhVVzkeNh8ltMW0hy/N lgqM9AhF5oMotF6UAU7G85ckyWohb8qjoqh6q+sYVvgxFE2xY7SO3VDMfq8uPleg xhv0BYL6asfsM+2yAiTpia4xnLjpVLFEXX9io30bk5+OFYT2Cp2LSDM9je+Unapm Cd9GKyhRghjHDC4YB03FpybRI1By4KroLEp3+nryNLwnN/54Web/IoO8FpzBrkHT N9ACbZHDJX3rUTj8d5XVMT6jXEDKyVPEV/EmkF7rc2+8V/B91gpucwP0+pygu32j eGkwmkD1/Dc/q4jMjZEX0AeQoJRZbhm4Day2IU4MDs9tns08knikTLfvLcw7Ml7I S1eVMjUO/3DpUhdPYUWgpWMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 350405809366711509515209170098882310736996 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 00:57:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 00:57:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pgfco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824434095603517525410179023904154898752357337054937067967756019643044458716465708629453248604099331066419899975212209054721867935646987544021714225966024687591554390304823942484926227373092856218219498983269974937146376541081102831054233920524252156649356918087321079214864743427503453667425641749811717562296822424899406457819101926797826996154772351794801593874572858425946303326111803535206411649229225871288214078205933012756029763836243007922481621383121974482046494750592917470817343070058979786861951009211041949140486120461611058982716711960658808475422763611153526668696542088686687177308353243619060756886734303574273497220052449343766688185583039436575192581711408883143534605176872408973400877028746424446745895906394056321330319115886745212832009012036523841272140194889746437973480867269525440102583828576181890468715125189837256768875687850672492046655752620177992765007469869528795379690996568924290548939006079514588975359478729828167062065843434184299107153442788040217485374613711520791467212468713937798694789295867005634069514967906738261853511366739599483409866391454964809365259225260417155006392002593375100198344713108962593608360029651099349086112239172659781089263491510594592098028775743824554947105564003 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abb5a6d15308381e75808b7238604c1af21a8b07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgfco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704bb723f30000040300473045022075d14bc71177d873b90fca750f2757b77ff3fe784ca46815de30abce4b862da0022100c4e061a8dd8e7e598bace84b9fb985dc4e52c482a5babeca01964b947075ff4000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704bb7241c0000040300473045022100b55bff742b2ace9eae96009b92be7f8dd7793fe01485ebd63910fe7e94b010c70220327a3c0fab845399f71bc5920138155c46904fb3de3e92be236a1ac02b677396 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0098b0e08ba35aa959c5a1ba6720b0101ecaebef989cea6b35d74fab73bd401a04ba93be90c3863a2680c80e6c70260cd1253fcf5dfeda62e37f79ad4090dfc37dbea36e0235822749aa29030f4e0f3709b4ad0ce884f470b209e857936d076f869b31c2faae984c8e9bb508f22a373a9960296d02c3dcea7a602c1831ec0343e4223b23b404b3852a3dfbbbbd5b8c400539b32138c24396c84c8a4ec83d59f10abd5110e3239cecf1b40e3a276f8506464191ee4392f7fcdbe33e0b2a2e9c980fe5d1f2b080940d7f7e31935cf66fc1dce72a6ccac0b06b019dbc640dce115579d9564831f906fc4fe39752f544416a1a5fcc3e47a04835602e3dfbee9d852db2