nfgco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d3:00:b3:3d:67:7e:2f:8d:f3:ef:ed:bd:05:7b:38:ac:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nfgco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:00:b3:3d:67:7e:2f:8d:f3:ef:ed:bd:05:7b:38:ac:22
Serial Number (int): 420249653813923219274238802713131741654050
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4c:df:66:a6:cf:b4:6c:91:81:e9:6a:e8:91:a2:ee:5c:90:4d:60:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:a4:bc:a5:d9:c6:49:4d:a0:9d:20:61:9f:92:e3:8e:a3:f5:e5:da
Fingerprint (sha256): e1:ed:ce:f4:fb:3a:14:83:91:ef:85:46:70:ca:25:39:94:08:96:5e:64:ec:f1:2b:b3:a4:cb:a0:25:06:aa:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nfgco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfgco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nfgco.com

Other certificates including the domain name nfgco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nfgco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420249653813923219274238802713131741654050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 03:57:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 03:57:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfgco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826033158159541542507934641135615030514810078078489336380727498177979515992635773393575966022232075487386184250289250442040182084569145865154307111289675098402477934497015280648481094738881202589834147154046194913302048398150693624773470017972300020985735770919846978576013575892996972207506351726410350528047910501908983599308908744234314143913512210876700884714945264151070557254878667243848331646554975341639966359666397744391125281367019685274372739781074614319751801171295460580539237846403789288978930582087525506404352253818175435577203508184207810298583235104903739579094766913239159296561046637548560256744031336428115787019884507895951807334973556870465451263672690259206959574868769199278140900290070905417899785920234781733489011431336232612132179514852973676828250053336481835450985181355203879820530708631961466859377668675428853665631044777153841937515477743232095328458937359649587380433301334634776234673819429746106212040705391353084057315802757363058348656200946980710350926529263069878347707540954754476213717167719771020647682425562690651673420021934179387385191245373466798873677827749363327528253344797744883599185185845114242217304405493115855097815538325814611152459149893600067469441910661961599374307008771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cdf66a6cfb46c9181e96ae891a2ee5c904d6019
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfgco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc37ac45d0000040300463044022077dab0292471b7abf7e520e31774652b145c2e646ce053b6e1d2d18c5d81903d022054d84c86c72229148c625bf33da1b079c6689af398f725dd21a0fcdbdc32d5be007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc37ac4500000040300483046022100b4dd6fcd3a7a2c60654c04cb7134795f4d89329591175f94aae888b17670a84c0221009c280e2be6032cf67537f4c01d1bc21b9d557c1c5c5f96faf94fb7a9720d426e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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