www.pnwco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:af:fc:30:7a:9b:ab:72:ee:50:60:96:ac:68:71:6b:cb:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pnwco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:fc:30:7a:9b:ab:72:ee:50:60:96:ac:68:71:6b:cb:b0
Serial Number (int): 408333775110179623879127655665457410329520
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:bf:b5:9c:fd:2d:15:bb:36:50:64:dd:26:49:c4:12:6f:0d:1e:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:60:b3:01:6f:46:72:ca:34:4f:db:58:f8:f7:ec:52:27:d7:d5:35
Fingerprint (sha256): 86:82:d1:48:b9:d1:f9:39:b5:1d:ed:43:62:91:8a:3a:54:f8:c6:21:63:34:63:09:b8:7e:e1:ce:df:77:0e:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pnwco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pnwco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pnwco.com

Other certificates including the domain name pnwco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pnwco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISBK/8MHqbq3LuUGCWrGhxa8uwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwMjAzNTFaFw0y
MDAxMTAwMjAzNTFaMBgxFjAUBgNVBAMTDXd3dy5wbndjby5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCmuE+62nEpNxOmz+wIWCRJiYpOAMZ6f49g
aCizeH+79McACU7s3suE+5CSHV51d//kQn2ejt95xmQkPWyUuPpBtjeU6Hz9/6Ey
QWqztA8T7y7xty/cPb2f+v/jjYQ7Pu9Fm1TlZOtKncyXnZ6H5YYrJENmDGKeO61a
OQUKkCdNDsTZcGRpb/eKtISDfqQiNBxyyVDJg/NFLteqEV+taRQkoJ5FGr2VTxlW
2yGJSxNQ6DWdu1e3borCJ896aqOBCQBgntbtqEY94u6IMW5knGUq4OBfKrz4ZT8N
jsXwVvrtfh6WbLpKHRzD9yfhA1CrbvmemX3LBrYcuoD+QhWb5Br+5nYIBehNa8Am
Fp+kjp7cvLbJGVDsf3gK6IxZIeO5Hpbc80Z9UeFZQb0vQ1iVxSbmy1x+lyABiOqC
pupdMCGXhlvVsHAVmeg1z6dYAoYAvBMPzRz5SXKc4fAewoQD5v5/DJyun/umlRAU
keoc14n5L+QDHk4apgm8GNS5cG9dDmGoKMopM5yelw7mpWI9yROV36jUVCxrBmpG
iPjflcixuHdtqdLHYFjpo9GxAKYpCA+hrmZhrlvXNY4mXagYXME8UjCddzSuAqoa
aIQPRjmWb2tmfATVEo8AX9Y60IWYxRDKH2ZLRCX0Sl+QVIWb4uD6CgN6kEbCIZs5
Y3c5l3CtUQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbv7Wc
/S0VuzZQZN0mScQSbw0eITAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5wbndjby5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW297CFIAAAE
AwBHMEUCIBASUX3a8ARDQEGd5H3eGVxhEzKPX/cgptnIPKL2sVaJAiEAxCpYerDK
On0UggYDsu4SdTF6cxUquii/DIdazrghCikAdgBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAW297CF8AAAEAwBHMEUCIEpHY76ailnV4DDYlI+iyLkt
Sx1Bo1sxk2QH0SF4rLPKAiEA9Yf04GgytZhGU8ceeksYJZOqdB66shfKkxVltRsg
YMkwDQYJKoZIhvcNAQELBQADggEBAGd0Ib6S6JtQimWkuB+f4hki9t1D8BUzS7c0
uqCRecG+OPWutx2by36dwsUdO0JzlB+xsVTj9z/RM3LqiexPtcr0efcenbpcSFG7
JnAPUUl1N/KgIdYKbp1UpfvnpwWh+HEqjNceFs25maLx/8szk/B7JhRCHDYHy4Gq
ZAxD0E0/yqsK3b+UFMsyK/DEWGXbryfH7tJ1hxqd8V4zNcsUH9Hf2QGowxqgIpBn
eap0UnOXE3XonE7fGUUpwcrv3bzX1kpj2ckaLHTrNiQ7jm8aLgtu1nJQCyXl5/JS
Wq6j9VKnHRinTOlgRUwVU/45apVYJFq3JCoRTpEHRpWsio8rMMw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408333775110179623879127655665457410329520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 02:03:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 02:03:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pnwco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680158122685382476644901181891231340140579633691749522553684735602471069908803725784377379308277302879862253082278514521571832710034909050532126834881498987702016275184203705025416267073573859483006467419853414457335981329594064157824186830371338235154992844513628917949495827266299844271148378520270838906881846285533155745236009483432968720633664336413549938180278520399428145637666552873671342685110653568885362382116763910598782752651168743718923977961289672910377447534289646723893237992281138594689872499032169951264949020754097964843655822711990818624902129077670429938572789085537801712913599299569376263354349918983075040515457355608655278410028904585500411734274033292603284773977575123618136771065935353177782075735558947607039828498107656729856881129787020578942017602693110185868413450521090139274103144618815870100877090615090766027547430853766537606241104604740276526195732106008154394751496432509397301713182265223973226196738451339590191970971195953233624223584537184535281433143399394608889889158006481178880384557226435191354425012094560913297889808947610768704987926182075181449168140457538505759550881612949490191921431181943617674459494993046927804955103187245988540777638399139293041659332635681482859481181521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bbfb59cfd2d15bb365064dd2649c4126f0d1e21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnwco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbdec2148000004030047304502201012517ddaf0044340419de47dde195c6113328f5ff720a6d9c83ca2f6b15689022100c42a587ab0ca3a7d14820603b2ee1275317a73152aba28bf0c875aceb8210a290076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbdec217c000004030047304502204a4763be9a8a59d5e030d8948fa2c8b92d4b1d41a35b31936407d12178acb3ca022100f587f4e06832b5984653c71e7a4b182593aa741ebab217ca931565b51b2060c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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