pfgco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:af:89:ca:df:a6:fd:8f:5f:01:8f:e0:5d:53:b2:c9:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pfgco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:af:89:ca:df:a6:fd:8f:5f:01:8f:e0:5d:53:b2:c9:60
Serial Number (int): 329966943905087651870385308510792956692832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:5a:34:c0:2d:21:fb:32:07:9b:2d:2e:7d:6f:9f:f7:9d:9a:de:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:94:a8:88:93:b2:18:9f:4f:7d:94:32:4d:b7:09:ce:31:37:34:9c
Fingerprint (sha256): 88:99:70:14:fa:c6:04:74:be:c0:cd:68:44:80:22:f6:ca:da:5a:2d:df:c3:15:f4:c6:c5:e9:3a:69:54:44:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pfgco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfgco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfgco.com

Other certificates including the domain name pfgco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pfgco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329966943905087651870385308510792956692832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 03:30:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 03:30:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfgco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 949692233871799792738770162417887955746404943887130675493288171281215599473021449600339582557622973574442515039384665407231277781548960272366773182967922135816468650908745541276538911256999761994780446840532842190601192988953933423045211655075915117935831090822376801734012684342568578664676589989745726818201118151981824286069407228774642447491275138161266686501142840565862445270242703981975421491854247885608545166841468867657968984266670807286383926854714471619652084045869732857672697368435254784755528321372073757712149434811263674471157019679063425609677368340118063722268447370986348905106485497994715096985462408511134824732521615088581111554874619444670102265528194987961732941996646932652328375696354981635871270721374181969719655898155244719710969317403498536546891018178694726191474212517102398161932710688304983605136929618550636223836340184282595191678506976792444750899201801972667589456716206642090169761417856697909563083483846417815462610833015954325302237905971110287300119564838971775319901472390120605669471890342519992609642788781143286826881386865060447042920673508992627062109342945780990040179604149402775344604091293747383995797480884968394070686586255383053076338574053831390765386934473645970817236262463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							105a34c02d21fb32079b2d2e7d6f9ff79d9adee3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfgco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe3bddb30000040300473045022100daeb4c893a8c43b2bf020cf777d5b064ff3064435f622169c06957da68b4065802201acb71174020b65712d4b9a984c46c3e781b57ef763aeb92ae7390a79febe053007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe3bdda200000403004630440220744ae3fc47ea2a25372f934c89991a6f9d18aefd7a2f8ebc9afa688aa4c41e2b02203feaf7f033403c832e65c5d136a8bb014ae23bf7de1c2ac455bdd3a51140b03d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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