pfgco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c9:af:89:ca:df:a6:fd:8f:5f:01:8f:e0:5d:53:b2:c9:60 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pfgco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c9:af:89:ca:df:a6:fd:8f:5f:01:8f:e0:5d:53:b2:c9:60Serial Number (int): 329966943905087651870385308510792956692832
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 10:5a:34:c0:2d:21:fb:32:07:9b:2d:2e:7d:6f:9f:f7:9d:9a:de:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b1:94:a8:88:93:b2:18:9f:4f:7d:94:32:4d:b7:09:ce:31:37:34:9c
Fingerprint (sha256): 88:99:70:14:fa:c6:04:74:be:c0:cd:68:44:80:22:f6:ca:da:5a:2d:df:c3:15:f4:c6:c5:e9:3a:69:54:44:f9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pfgco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pfgco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pfgco.com
Other certificates including the domain name pfgco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for pfgco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISA8mvicrfpv2PXwGP4F1TsslgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwMzMwNTdaFw0y MDAxMTAwMzMwNTdaMBQxEjAQBgNVBAMTCXBmZ2NvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAOjJuy4nn1TZKWLERreI/3UGllvPW+uA/l5sF0ox QIh0KGqji15pCyPb+RLYXvbKDfWgPyr5OKgPKaYM3lgJJah2ABZjqa7SW5Apa4t/ 97PKK9VTiYtY4Ya0oaF63E+hlfXAuYxSW9TlgRb5k2A6Fo6d/ntykxRMvvXuZxf1 ygaUprxxpphUcz6IxAwytPDfALxulBr1G4tZEMP3M/nq7bRFkpm36XArNXDzupt+ /ROL7PQiv2BWPKNz8geXU7HuGV6uEzpy+zyyzJb0snntVK2ftZulyiNcMlWFxByl IZr4pp/HaLA83X38IDCX8TNigzYLey1BhU6wwC/2+60cEspdV9ebPqfZvlVwD6oP RrP9OUzs3dLaDOGuErIYQry7W/M3ATnzvRkILUQgN4Afdl6iqbEMYomPEW2Z4ed7 BuR2O5iv2lRO/6NqZwYigZp4TeiQ3zbB5q5PR8j9ZqTCX7pl688a8k7W0gCNmFSm vLkMpKvKxHePBqk7zR/r1I2d0lNtDtelzVrSuJyl6AB+iGD3AvX/kcOotppST6oG UaAcaPalBJX6W4v/oXX1uI7NQ8EswOif1usLoXG05WSffJGI8Icc9tQ4mw1PI5QS 2GocVycM6t1VoxRsJ/zYKVd5XLKjsY6yWO6NcNBbUcrCp5iwF0RzoVVFZrTFGtU2 Jt4/AgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBBaNMAtIfsy B5stLn1vn/edmt7jMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJcGZnY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtvjvdswAABAMARzBFAiEA 2utMiTqMQ7K/Agz3d9WwZP8wZENfYiFpwGlX2mi0BlgCIBrLcRdAILZXEtS5qYTE bD54G1fvdjrrkq5zkKef6+BTAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT Le+LkF4AAAFtvjvdogAABAMARjBEAiB0SuP8R+oqJTcvk0yJmRpvnRiu/Xovjrya +miKpMQeKwIgP+r38DNAPIMuZcXRNqi7AUriO/feHCrEVb3TpRFAsD0wDQYJKoZI hvcNAQELBQADggEBAIrGF/WR5Wl+xOqWPPS9e3MJVdtXyBxyOlAojJ7xEmkN3QcR XWGnakDxP1y5fNN2jybs6cxeG/dfcGuQ0fpcsfv0EYNl8lcDheWPgii70JPwlyfJ qWzj/At/eyZiImW1TXrl+tGBB7TYumdFoAeN9ykzd9+ZZuVoNChh4lcVLbsnjYKN 4drVFnoVQm8k4WGe1nGlMLAQzq4OhmOmTeP2lyfVFJzMC8MUWGRu7n+6QLFbeCrF BhzQAWw5fHLydp8EvwErqpIkF4VYTHh1zOFV9OGIvEsYHYzBVndYHyqlX4qitwGq Je0eO+rUMhS8B01ZRMKikxly4N2m8sZ7yeZGqPY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6Mm7LiefVNkpYsRGt4j/ dQaWW89b64D+XmwXSjFAiHQoaqOLXmkLI9v5Ethe9soN9aA/Kvk4qA8ppgzeWAkl qHYAFmOprtJbkClri3/3s8or1VOJi1jhhrShoXrcT6GV9cC5jFJb1OWBFvmTYDoW jp3+e3KTFEy+9e5nF/XKBpSmvHGmmFRzPojEDDK08N8AvG6UGvUbi1kQw/cz+ert tEWSmbfpcCs1cPO6m379E4vs9CK/YFY8o3PyB5dTse4ZXq4TOnL7PLLMlvSyee1U rZ+1m6XKI1wyVYXEHKUhmvimn8dosDzdffwgMJfxM2KDNgt7LUGFTrDAL/b7rRwS yl1X15s+p9m+VXAPqg9Gs/05TOzd0toM4a4SshhCvLtb8zcBOfO9GQgtRCA3gB92 XqKpsQxiiY8RbZnh53sG5HY7mK/aVE7/o2pnBiKBmnhN6JDfNsHmrk9HyP1mpMJf umXrzxryTtbSAI2YVKa8uQykq8rEd48GqTvNH+vUjZ3SU20O16XNWtK4nKXoAH6I YPcC9f+Rw6i2mlJPqgZRoBxo9qUElfpbi/+hdfW4js1DwSzA6J/W6wuhcbTlZJ98 kYjwhxz21DibDU8jlBLYahxXJwzq3VWjFGwn/NgpV3lcsqOxjrJY7o1w0FtRysKn mLAXRHOhVUVmtMUa1TYm3j8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329966943905087651870385308510792956692832 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 03:30:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 03:30:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfgco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 949692233871799792738770162417887955746404943887130675493288171281215599473021449600339582557622973574442515039384665407231277781548960272366773182967922135816468650908745541276538911256999761994780446840532842190601192988953933423045211655075915117935831090822376801734012684342568578664676589989745726818201118151981824286069407228774642447491275138161266686501142840565862445270242703981975421491854247885608545166841468867657968984266670807286383926854714471619652084045869732857672697368435254784755528321372073757712149434811263674471157019679063425609677368340118063722268447370986348905106485497994715096985462408511134824732521615088581111554874619444670102265528194987961732941996646932652328375696354981635871270721374181969719655898155244719710969317403498536546891018178694726191474212517102398161932710688304983605136929618550636223836340184282595191678506976792444750899201801972667589456716206642090169761417856697909563083483846417815462610833015954325302237905971110287300119564838971775319901472390120605669471890342519992609642788781143286826881386865060447042920673508992627062109342945780990040179604149402775344604091293747383995797480884968394070686586255383053076338574053831390765386934473645970817236262463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 105a34c02d21fb32079b2d2e7d6f9ff79d9adee3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfgco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe3bddb30000040300473045022100daeb4c893a8c43b2bf020cf777d5b064ff3064435f622169c06957da68b4065802201acb71174020b65712d4b9a984c46c3e781b57ef763aeb92ae7390a79febe053007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe3bdda200000403004630440220744ae3fc47ea2a25372f934c89991a6f9d18aefd7a2f8ebc9afa688aa4c41e2b02203feaf7f033403c832e65c5d136a8bb014ae23bf7de1c2ac455bdd3a51140b03d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008ac617f591e5697ec4ea963cf4bd7b730955db57c81c723a50288c9ef112690ddd07115d61a76a40f13f5cb97cd3768f26ece9cc5e1bf75f706b90d1fa5cb1fbf4118365f2570385e58f8228bbd093f09727c9a96ce3fc0b7f7b26622265b54d7ae5fad18107b4d8ba6745a0078df7293377df9966e568342861e257152dbb278d828de1dad5167a15426f24e1619ed671a530b010ceae0e8663a64de3f69727d5149ccc0bc31458646eee7fba40b15b782ac5061cd0016c397c72f2769f04bf012baa92241785584c7875cce155f4e188bc4b181d8cc15677581f2aa55f8aa2b701aa25ed1e3bead43214bc074d5944c2a2931972e0dda6f2c67bc9e646a8f6