www.hghco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:5d:b8:4f:18:96:af:d8:5f:ad:91:1c:69:42:85:2f:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hghco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:5d:b8:4f:18:96:af:d8:5f:ad:91:1c:69:42:85:2f:e0
Serial Number (int): 321351129563854347018001382793736408608736
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:5c:fe:43:5d:30:ad:3d:30:a2:c5:7c:13:62:0f:ff:6f:59:0a:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:38:c2:41:0c:da:7a:c5:7a:3b:9c:33:28:9f:24:57:f7:e8:1f:68
Fingerprint (sha256): 8f:da:8d:1c:54:f4:9e:5b:f0:54:d4:ae:ee:6e:72:f5:6b:dd:5a:35:6f:90:81:43:0a:e1:23:00:e6:ce:1e:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hghco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hghco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hghco.com

Other certificates including the domain name hghco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hghco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321351129563854347018001382793736408608736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 21:34:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 21:34:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hghco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792587874268199536938527855223272250586983513129639854148650559717458419613214516561916346592144671600888533609202636770422508620592238740049125032844617409699834523225219373109798817629752768759616608279032394736503350924883292754168239576783808429208124068635794462157846273806725512049606239647728047637372130536861796982261199774548049688179705956053649762575564563755792504544554455380945923366261882731325395647695830547140940415496412031345359844598310184063875826272108516496052240123209039036819546724685986048085163712550354967638871758424237399790007278021133965986355460140061096317923094573264871392054694784771215015579405120821241473799377143605564523564924832863952294650407562225105908537360930246831352301631714671577639837258333995883200856959051325965265208219008475216235342477360982295632708161592533973665856485852760052840960752957722677832160979682356107561153701476372938452963718471647908654278537810382208015221348339732532934007689492954847016141626056347603662611302383831700861124062208452761315671637165999115559131992903752536926796457998812984768192425814903406033245780773119835415302520287895899703821772115099269816596066263030373158982298464692134107276510555050875334405104680023424730884353207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e05cfe435d30ad3d30a2c57c13620fff6f590a4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hghco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f10d950420000040300463044022030c970f5acb7e38f8056912e91791de02e26739ed04b00b80657b24e54cdf26d02202245763dbdf73e4aeffdf24dff9b58c4998edda279433cb25411a40e50a330e40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f10d9510d0000040300473045022046693e2f8304d40a0775861f6f9478fc2f7a2d39e8866bc8966a08cd84e9ca92022100d2e732ea14a007924fd7410c0dbc5e7eba905b1dd60b9ba1d6fe462b26e410cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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