ugfco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:44:6a:85:41:a9:7d:ba:53:3a:b2:4d:1c:06:bd:05:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ugfco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:44:6a:85:41:a9:7d:ba:53:3a:b2:4d:1c:06:bd:05:e9
Serial Number (int): 309747894487997143534139058449099861591529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:6c:9f:d2:c4:f1:84:98:6d:63:4f:6c:50:05:df:4b:16:5c:22:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:e2:3c:d9:ea:50:d9:6f:5d:ca:85:fe:5b:d3:23:ab:a8:f9:df:81
Fingerprint (sha256): 97:12:fc:ba:ef:fb:c7:8d:ec:88:07:ce:89:8a:97:85:2a:8e:1f:a7:d5:69:0c:ff:83:96:19:19:c6:5d:1d:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ugfco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ugfco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ugfco.com

Other certificates including the domain name ugfco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ugfco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309747894487997143534139058449099861591529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 03:16:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 03:16:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ugfco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825825950560607911391507743141516524693789420446291118063383632377785908765762281500465552559322790278695871486616385606846624408198339584929173868863036934079215368931323311279499008111746403138864052765910466201274518501621805939505899251659035970847866086600126759215780704091007453046315355871602832796370260465174655533293050068830443115501370403162711198098365133091896948859737896423392928921625654012223956235601653955432946453954442487602421338085408620134693532027461060043338768264842959187113854238957979673780511533349447672759458053652738297082690496754125812652957517400648888039171281527689036668275038134104248965308370678690980150776498040743044573613590089510054260344827029089181126437850830760220590421484568812872067088147677581595761048126573357994184162607903231448497040540401036858756273409397445267049804437699163157342853395331481747996140307646563849390535410741704592321716870877329917163406372328964355011213378648033375541873974503229394994182285402117556371066125970543113619103445107385905893869478990962213608175715847520124892155690852107128510913976421333134930959994997002492506885154984093720277291236179370221618565746297197228177273790128457098702971766244815512955289391573369347039703590481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							736c9fd2c4f184986d634f6c5005df4b165c220e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugfco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe2ec9940000040300483046022100a505064d8370d341d0787972115db5dd6879e745580ff921ee1d1f44515cb8e7022100bd2575b9a7190a8ee7e104f3e171b68eb455a58dfdb2b34c881185120f3433a00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe2ecb9e0000040300483046022100d48357553fb82c4ea9ed22c1da32c0806c9d5d9036c998dc2e2129e794596ad9022100cc100545eb63666791000ea78d8cd944fd3d047f1aed97812accb28843b8a5c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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