pgfco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:3c:a0:f7:20:5c:1f:a1:b8:79:44:2a:0b:95:b6:89:ef:b9 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pgfco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3c:a0:f7:20:5c:1f:a1:b8:79:44:2a:0b:95:b6:89:ef:b9Serial Number (int): 281967759443522580201442624025102748610489
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e1:d1:45:4b:92:99:7b:f8:24:e2:d9:d4:c7:c4:b9:56:8c:e5:dc:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 32:fc:f1:48:fe:1e:f6:d5:22:26:ec:e3:1b:b6:9b:f8:30:17:e4:56
Fingerprint (sha256): 7e:21:54:97:a1:83:52:90:1d:2f:a4:d2:1e:bc:65:04:17:a3:69:72:d2:57:c7:2a:f2:15:52:02:eb:06:87:b6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pgfco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pgfco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pgfco.com
Other certificates including the domain name pgfco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for pgfco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAzyg9yBcH6G4eUQqC5W2ie+5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwNzA0NTNaFw0y MDAxMTEwNzA0NTNaMBQxEjAQBgNVBAMTCXBnZmNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAPMbok7QMn9tL10/qjlYlNfiObSZMyA0dw0xogcG 4tGEbdrPZETDJJTzez5b1XFVjeWLO2r8vy+7p5S/xKqu4axqRYh/ZJJSFysCfa8Z 8vO6lJqDXu1rUiprIyr4R22fWjDq3YVNJZEjK5r4PuZ8KkfW4nt/VloDoRrOLI/J t05SUF9FSkGgAD+wG8XNmcRdPCmleB5v4Z/apxSSmwpF4DU8263P3BLuUSDsSAvX J/opTaF891qE+dTXaj/wesOQ1qSX8zIsprvueGlYri86yJdc0vSXBi2Afda0EUTt 9g1/E0hup4a2hvmY6yP7EHL2hxboyzEfUQ0tkd4pxiQBu+nQ7MyHiO2E6k6S1bYe SGvPHLS+Y3WMlb94phA3FJc2X/vpzOP6AuylHU6HfpLD5Toetj/HULaNW1pzSbZd D14aiw5K7BSWENNYvJxmqOhIjUJYQeQeZ5a0vz5w9wrUrfDZ2s63nU5BLl9Jwaob KGOZ7dUkFe1Pj8Eo8uAUZgUXaqHutmeZo5RW7YZQ9VblkOOwPGaZarU6p1/5muif 6VYap/jaFt/Q6MV8EPw2Q7kFE4DUpv27XJssjMYMo3V0deqEbXcxoHrOtKV/EJZw AgqGaZtGSVVwtT7KxQWw1xTX0lvsbbEd0nex3qtk8ipBI7tLn1p/g3DhFB+s0NY2 aTExAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOHRRUuSmXv4 JOLZ1MfEuVaM5dw4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJcGdmY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAKTxR llTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtxCYXSgAABAMASDBGAiEA 60yUEcXW6t4jMrm0QS5GT4Q0c8y9Rc/sRQrqWkOU6D4CIQCyUMSFYdPwY/JPFVGs S4yMkdZEvaExKPDwUE6VF5Z9fAB2APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSm sKiqjrJzAAABbcQmGRUAAAQDAEcwRQIhALrzOKPtXU0z6GNLLhUEWE00vU1BN9kT yn0adPKE4fceAiBqofNvOKjWFrwJgWDFzv964CQ2QV6zor1THkPPdAELJTANBgkq hkiG9w0BAQsFAAOCAQEAXnbpRZgwTbAmVd7HHPfjPUY9+3ean/bZICZEQw3C4He9 omJKMPg7bh56BXJOv5Cv1TuKIzsXEHxLsrS5IMMnzDBv/Y/izwvpSaZ7i1y4Pqid d5eQqVErP1H6iGe9dU4ZkJQRyOFGcPQS90ZCW8dl03+zJdBYF8qofGl5D+KXnvRa 3GUjJ9XmXV1d7Xe6FZOMsSh+UPFRHliLL3suoINhaqnrmGrfV77tXO7gvqNSqSLM jlal3aL2W9/jySr/5/Bk8bUNBwptPOfKZg/Aqk0Yt0j2R2Ux/U24GgDYwvwlsEKP 71pUo4fulYovNb16lIFQIaWSmEFcQgYQYvSbXdWxOw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8xuiTtAyf20vXT+qOViU 1+I5tJkzIDR3DTGiBwbi0YRt2s9kRMMklPN7PlvVcVWN5Ys7avy/L7unlL/Eqq7h rGpFiH9kklIXKwJ9rxny87qUmoNe7WtSKmsjKvhHbZ9aMOrdhU0lkSMrmvg+5nwq R9bie39WWgOhGs4sj8m3TlJQX0VKQaAAP7Abxc2ZxF08KaV4Hm/hn9qnFJKbCkXg NTzbrc/cEu5RIOxIC9cn+ilNoXz3WoT51NdqP/B6w5DWpJfzMiymu+54aViuLzrI l1zS9JcGLYB91rQRRO32DX8TSG6nhraG+ZjrI/sQcvaHFujLMR9RDS2R3inGJAG7 6dDszIeI7YTqTpLVth5Ia88ctL5jdYyVv3imEDcUlzZf++nM4/oC7KUdTod+ksPl Oh62P8dQto1bWnNJtl0PXhqLDkrsFJYQ01i8nGao6EiNQlhB5B5nlrS/PnD3CtSt 8NnazredTkEuX0nBqhsoY5nt1SQV7U+PwSjy4BRmBRdqoe62Z5mjlFbthlD1VuWQ 47A8ZplqtTqnX/ma6J/pVhqn+NoW39DoxXwQ/DZDuQUTgNSm/btcmyyMxgyjdXR1 6oRtdzGges60pX8QlnACCoZpm0ZJVXC1PsrFBbDXFNfSW+xtsR3Sd7Heq2TyKkEj u0ufWn+DcOEUH6zQ1jZpMTECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281967759443522580201442624025102748610489 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 07:04:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:04:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pgfco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 991793887223258756979118272971706499843204149931304182651544735844257322552630358563565234472237793838552532874757475926332185492204353307179399988471041190131729405750453776272546163724367682059435521395114322779298507776412076714028081172020772135366911621183074886143254873914026885048497842501877702563999706092569989672477435216658993890600921438464037775059970430377032418961119920020478823915517882515421799172963399636309924375197294021242111150967999776129652652522024375742324589462388421506946270691417731476996079151596662602638746313379815140544266494990742793259598056144089788460818356244712811180661042367273201072099181816853185044252041405489176707448495334343436701201023123758771580644530101631094230497748330741658179753889561722514125510401112242805897125250945026798942125290908887811124791677099730474171807399455236301169239193312884617835642530245496068836165278798024901984968491227204329661136780334517361560016603546910240796792842870653380062975695892755652403691999428392049560652976969205069111908284465626716320131868411266536520708525785368691102858390367540341436198327005625239369542443962956379848237210753739652382173169358325326205754762883477135903369310320584822422045928862402531740892082481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1d1454b92997bf824e2d9d4c7c4b9568ce5dc38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgfco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc426174a0000040300483046022100eb4c9411c5d6eade2332b9b4412e464f843473ccbd45cfec450aea5a4394e83e022100b250c48561d3f063f24f1551ac4b8c8c91d644bda13128f0f0504e9517967d7c007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc42619150000040300473045022100baf338a3ed5d4d33e8634b2e1504584d34bd4d4137d913ca7d1a74f284e1f71e02206aa1f36f38a8d616bc098160c5ceff7ae02436415eb3a2bd531e43cf74010b25 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005e76e94598304db02655dec71cf7e33d463dfb779a9ff6d9202644430dc2e077bda2624a30f83b6e1e7a05724ebf90afd53b8a233b17107c4bb2b4b920c327cc306ffd8fe2cf0be949a67b8b5cb83ea89d779790a9512b3f51fa8867bd754e19909411c8e14670f412f746425bc765d37fb325d05817caa87c69790fe2979ef45adc652327d5e65d5d5ded77ba15938cb1287e50f1511e588b2f7b2ea083616aa9eb986adf57beed5ceee0bea352a922cc8e56a5dda2f65bdfe3c92affe7f064f1b50d070a6d3ce7ca660fc0aa4d18b748f6476531fd4db81a00d8c2fc25b0428fef5a54a387ee958a2f35bd7a94815021a59298415c42061062f49b5dd5b13b