pgfco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:a0:f7:20:5c:1f:a1:b8:79:44:2a:0b:95:b6:89:ef:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pgfco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:a0:f7:20:5c:1f:a1:b8:79:44:2a:0b:95:b6:89:ef:b9
Serial Number (int): 281967759443522580201442624025102748610489
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:d1:45:4b:92:99:7b:f8:24:e2:d9:d4:c7:c4:b9:56:8c:e5:dc:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:fc:f1:48:fe:1e:f6:d5:22:26:ec:e3:1b:b6:9b:f8:30:17:e4:56
Fingerprint (sha256): 7e:21:54:97:a1:83:52:90:1d:2f:a4:d2:1e:bc:65:04:17:a3:69:72:d2:57:c7:2a:f2:15:52:02:eb:06:87:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pgfco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pgfco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pgfco.com

Other certificates including the domain name pgfco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pgfco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281967759443522580201442624025102748610489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 07:04:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:04:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pgfco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 991793887223258756979118272971706499843204149931304182651544735844257322552630358563565234472237793838552532874757475926332185492204353307179399988471041190131729405750453776272546163724367682059435521395114322779298507776412076714028081172020772135366911621183074886143254873914026885048497842501877702563999706092569989672477435216658993890600921438464037775059970430377032418961119920020478823915517882515421799172963399636309924375197294021242111150967999776129652652522024375742324589462388421506946270691417731476996079151596662602638746313379815140544266494990742793259598056144089788460818356244712811180661042367273201072099181816853185044252041405489176707448495334343436701201023123758771580644530101631094230497748330741658179753889561722514125510401112242805897125250945026798942125290908887811124791677099730474171807399455236301169239193312884617835642530245496068836165278798024901984968491227204329661136780334517361560016603546910240796792842870653380062975695892755652403691999428392049560652976969205069111908284465626716320131868411266536520708525785368691102858390367540341436198327005625239369542443962956379848237210753739652382173169358325326205754762883477135903369310320584822422045928862402531740892082481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1d1454b92997bf824e2d9d4c7c4b9568ce5dc38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgfco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc426174a0000040300483046022100eb4c9411c5d6eade2332b9b4412e464f843473ccbd45cfec450aea5a4394e83e022100b250c48561d3f063f24f1551ac4b8c8c91d644bda13128f0f0504e9517967d7c007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc42619150000040300473045022100baf338a3ed5d4d33e8634b2e1504584d34bd4d4137d913ca7d1a74f284e1f71e02206aa1f36f38a8d616bc098160c5ceff7ae02436415eb3a2bd531e43cf74010b25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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