www.pgfco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:05:c0:08:18:3b:9a:fc:e2:3c:db:2f:6a:35:ba:56:8c:64 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pgfco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:c0:08:18:3b:9a:fc:e2:3c:db:2f:6a:35:ba:56:8c:64
Serial Number (int): 350405809366711509515209170098882310736996
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:b5:a6:d1:53:08:38:1e:75:80:8b:72:38:60:4c:1a:f2:1a:8b:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:a3:7b:f1:31:88:25:ab:7c:8e:09:10:20:af:3f:e0:5b:37:d0:00
Fingerprint (sha256): 67:dd:6e:cc:9e:d6:33:88:24:83:62:63:3d:49:22:9b:9a:1b:a1:e5:a5:47:47:32:0f:54:55:3a:6f:de:8c:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pgfco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pgfco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pgfco.com

Other certificates including the domain name pgfco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pgfco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350405809366711509515209170098882310736996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 00:57:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 00:57:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pgfco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824434095603517525410179023904154898752357337054937067967756019643044458716465708629453248604099331066419899975212209054721867935646987544021714225966024687591554390304823942484926227373092856218219498983269974937146376541081102831054233920524252156649356918087321079214864743427503453667425641749811717562296822424899406457819101926797826996154772351794801593874572858425946303326111803535206411649229225871288214078205933012756029763836243007922481621383121974482046494750592917470817343070058979786861951009211041949140486120461611058982716711960658808475422763611153526668696542088686687177308353243619060756886734303574273497220052449343766688185583039436575192581711408883143534605176872408973400877028746424446745895906394056321330319115886745212832009012036523841272140194889746437973480867269525440102583828576181890468715125189837256768875687850672492046655752620177992765007469869528795379690996568924290548939006079514588975359478729828167062065843434184299107153442788040217485374613711520791467212468713937798694789295867005634069514967906738261853511366739599483409866391454964809365259225260417155006392002593375100198344713108962593608360029651099349086112239172659781089263491510594592098028775743824554947105564003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abb5a6d15308381e75808b7238604c1af21a8b07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgfco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704bb723f30000040300473045022075d14bc71177d873b90fca750f2757b77ff3fe784ca46815de30abce4b862da0022100c4e061a8dd8e7e598bace84b9fb985dc4e52c482a5babeca01964b947075ff4000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704bb7241c0000040300473045022100b55bff742b2ace9eae96009b92be7f8dd7793fe01485ebd63910fe7e94b010c70220327a3c0fab845399f71bc5920138155c46904fb3de3e92be236a1ac02b677396
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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