nwgco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:c6:cb:22:cd:a5:4f:9e:1e:52:e0:4f:2a:dd:0d:53:2d:33 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nwgco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c6:cb:22:cd:a5:4f:9e:1e:52:e0:4f:2a:dd:0d:53:2d:33Serial Number (int): 416095066369615586491283841820543079886131
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 43:90:f2:c9:e1:7b:2f:ba:6f:ae:6e:79:c1:7a:b3:14:92:7f:7e:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9d:21:ff:c8:6e:ef:33:ca:33:96:90:7e:fc:cc:6c:88:29:b3:2d:51
Fingerprint (sha256): 9a:fe:3c:61:30:57:37:c2:55:3e:4f:54:62:9c:9f:d5:0f:cb:e7:0c:cc:73:16:36:9b:fd:9d:84:32:24:6e:e7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nwgco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nwgco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nwgco.com
Other certificates including the domain name nwgco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for nwgco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISBMbLIs2lT54eUuBPKt0NUy0zMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjMyMjI1MjNaFw0y MDA1MjMyMjI1MjNaMBQxEjAQBgNVBAMTCW53Z2NvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAL4QbyjMK2AH/HsDIZbURixzFU32dLbTTWSE+ua1 bm7QxvNxgeWMP+hQq5vdizPk/mVfSf1HKf5gQs54s0GkfX6XKVExJW2PJtLqUpmH F3NMhyoWLLShI8Wyg8ZLgX4RzYFp+M46wnIJE8AqLonVy/iLBrShXhh/ZeJt1v8j 3raFysl+ZOLb+W0ZkprFsmBTJDb5HG2dRDg02IF7uNtH5wjb0hpsP/pwVRyUVP0u ZBPcKUAqZFNNkO3mR3nMGGlfrA2ujkfrrEuAFCAhv8MZjOJQT1FM73iPL3ro1t0n uAyy/Mc/1uvlZ+RDx0MdPiqGj5f+LX79MT5ZaIhptK74I5xEucHpvOfD/OstAmzQ U7Iq1m+5o1XQMJnBqnEFr8X1Kjul717bImZAZM7cJi3KRLitzEdUFnX66qKXhcTV FCIuv+wdno9USSomoP2S5QX5SU5bWilf8IM9d2Ah1iY5NbTO5ZJUILYxgfBMS6vD C6omuXPde/JdvTRaZ9+CMuKuU6WbwDn26Ov8QbY2DHtPPQYrXjkqMsVZ97N+9oT/ QFhaoaPnh1T7ZDedwie+DXoQV5txulEM+ZN0KCY0KKVtytnSslf+MT1K/JMFVr19 eCtrDnjGBt8KoU+HFEjVa/25T/wFldYlF++4JpIG61vrINJjqwNTQ2fWyzWRX6dR O1YpAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEOQ8snhey+6 b65uecF6sxSSf35bMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJbndnY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA5xLy sDd+GmL7jskMYYTx6ns3y1YdESZb8+DzS/JBVG4AAAFwdF6grAAABAMARzBFAiAm VpDLOdp9VtFPDjhmI7ffFJnG1kWUsH+hR8MgqmBEpQIhAPDF74Jm5ukx5Cdv2+OJ 2WLNAs8QHPbsq5N9/6pzyG0uAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6 GmnTohwAAAFwdF6g2gAABAMASDBGAiEA47C4KauYqBF2Z6f23XO80Z3c9EbNy2kX TIWUWVQI2ckCIQDSiDYVesiTaVAt44neGyDBH4oz4JFWhJkdfc19x02FNjANBgkq hkiG9w0BAQsFAAOCAQEAQdWmGViiVM9QBd7sqOZFQUmWr7LCa0TcSnrYIjZ69kUd 3HGfGel7esjhg3ljo0eWifl6SSekaWr/PG3AetPCYljOpH/KjbFBWEefK3JUwLTF szDw+Nge6efTigAAxRMiXEiKrx2A2wgVRmbfjJSh1CIJxC+aI/eAVxP7kWhq8Agz q6ZdEDDKX8nhEezuktDOjzIRDpTEpi3m2OSG60SRWh2sgP63k+AmVbtRulYWnnb5 l5yHkKJKc/ui3UKgherLdgc7tdifzzMkWNlIZspL0vG/62c5qU6Psq4xvOX+Ut68 byJCQPbfg3o+994UKBkTeM8D53AczxUoSL/8d1CVZQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvhBvKMwrYAf8ewMhltRG LHMVTfZ0ttNNZIT65rVubtDG83GB5Yw/6FCrm92LM+T+ZV9J/Ucp/mBCznizQaR9 fpcpUTElbY8m0upSmYcXc0yHKhYstKEjxbKDxkuBfhHNgWn4zjrCcgkTwCouidXL +IsGtKFeGH9l4m3W/yPetoXKyX5k4tv5bRmSmsWyYFMkNvkcbZ1EODTYgXu420fn CNvSGmw/+nBVHJRU/S5kE9wpQCpkU02Q7eZHecwYaV+sDa6OR+usS4AUICG/wxmM 4lBPUUzveI8veujW3Se4DLL8xz/W6+Vn5EPHQx0+KoaPl/4tfv0xPlloiGm0rvgj nES5wem858P86y0CbNBTsirWb7mjVdAwmcGqcQWvxfUqO6XvXtsiZkBkztwmLcpE uK3MR1QWdfrqopeFxNUUIi6/7B2ej1RJKiag/ZLlBflJTltaKV/wgz13YCHWJjk1 tM7lklQgtjGB8ExLq8MLqia5c9178l29NFpn34Iy4q5TpZvAOfbo6/xBtjYMe089 BiteOSoyxVn3s372hP9AWFqho+eHVPtkN53CJ74NehBXm3G6UQz5k3QoJjQopW3K 2dKyV/4xPUr8kwVWvX14K2sOeMYG3wqhT4cUSNVr/blP/AWV1iUX77gmkgbrW+sg 0mOrA1NDZ9bLNZFfp1E7VikCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 416095066369615586491283841820543079886131 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 22:25:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 22:25:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nwgco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775394270396177962359284941008024163740289413714446962469513789398874660643719115999419457700783741063495269127177866016771089623340248256709504638926487284521263466047112567716459729519814510998889557761142755400288984378735350726951195352050122699400488071783467964008628340624662163935072526295302055155642763786434070908407612717090607338350629187228491017149508980933098233583369572125284400908625141603675572217146895739282178751097452220091019345410447469745268856384470072759511187410418561066362159265620220232924726683894704803079325505655800387278816255007682537778010055345238853240670964172240736903753088972588305454120168536650581581885316499265782601482672597072021871647008367707057670518099955237717313200597860206009335248567023632418162845210612724328216606132862833278618122686970445664435761163242170938280863804068505898270330554075213797576246361405516872663439986164725435269457544777972911413461595362226810118713436339246414889513818660479622579659216988552111072177244807234328313168018358472264629412827144191961783105079851610592422041241654202597893506946849899103906120716998299152489970722954277144314507617506179780257511680347219333163626599389393931672509425056632050876871030046620422345319994921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4390f2c9e17b2fba6fae6e79c17ab314927f7e5b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwgco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170745ea0ac00000403004730450220265690cb39da7d56d14f0e386623b7df1499c6d64594b07fa147c320aa6044a5022100f0c5ef8266e6e931e4276fdbe389d962cd02cf101cf6ecab937dffaa73c86d2e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170745ea0da0000040300483046022100e3b0b829ab98a8117667a7f6dd73bcd19ddcf446cdcb69174c8594595408d9c9022100d28836157ac89369502de389de1b20c11f8a33e0915684991d7dcd7dc74d8536 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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