www.fg1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:24:b1:e3:db:53:6f:9f:dc:56:fe:c6:2b:ee:ee:6c:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fg1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:24:b1:e3:db:53:6f:9f:dc:56:fe:c6:2b:ee:ee:6c:99
Serial Number (int): 277378904906440835179620140180579204099225
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:9e:4c:18:cd:6d:9c:ca:7e:28:18:c8:11:ac:7f:f7:0b:c8:b4:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:83:86:70:12:60:7c:dd:f4:a7:55:8b:5a:2e:5b:0d:54:ff:84:2b
Fingerprint (sha256): 94:1c:41:53:4e:81:4d:ee:86:6e:81:ff:18:ff:e3:11:1e:a5:4c:24:04:e0:b1:30:9a:ec:44:3e:82:f7:95:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fg1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fg1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fg1.com

Other certificates including the domain name fg1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fg1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277378904906440835179620140180579204099225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 05:48:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 05:48:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fg1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929802454763369770223010265907263870905850148295759818491143384708768656318050242619740679271009619781271232262049861993098284714414249825226458189898818890275371123704090183408512940446959131841980935786495153530108241208228568132506510255646124381436821150401084928314362679617584623980451850116986598348616312097810863640840130998249589125127670337733910853628177447485656385606755425111763201365279801305588480176648508434835311530395777469840107797952867165577384283252309223537248564712541276918115302585020929866934344805327218591557009172148511844734518093771246421267331292625073030588383082413783034973109494886065028994283684074367013795910099314076966284447754737799379274011965052691064354032417284274494882703990434985699068873160662470521625169053953496319568076596765196090514929173858799630002365906158023089820404780944257082437862473954104386152024643219992075934971957370051465387330274115569867870703589453290140720241204999213894975193196004465350115528023139634839048013826197751533556023225939484734399376088382008088144610998023063178234456648927124360503810952372144820724422138612985407457772800423996786959573580197029118376869570367107460833837735563729427514208994824850622402220848795357644162093892739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							749e4c18cd6d9cca7e2818c811ac7ff70bc8b48f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fg1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f65037d50000004030046304402206e214c76c8fd7162927b4e3ad080ce8abc42b3c1de9303585fca37b31dd387310220671ae8dd02f336426f357b6fda12dff98398e8ad75f2e4184b422a46e7ac8e42007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f65037d3f0000040300483046022100aee2cc4476a02218f5d8238e4c2bbac109fc60b1d045b9b154ec7dbce758f3ac0221009a92515fa016615f8cbc1c11bf35c62ea04f23a9e7056ec526b3695787602aa0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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