www.ddfco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:a9:dc:09:df:a2:6a:97:bc:4e:90:ca:46:76:c8:e2:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ddfco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:a9:dc:09:df:a2:6a:97:bc:4e:90:ca:46:76:c8:e2:5f
Serial Number (int): 324855160079431654696483301789307593351775
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:85:14:b3:f5:8e:c0:f7:9a:f0:62:a0:a0:f8:e1:b5:63:50:60:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:cf:5d:60:ae:fd:be:d1:d0:cc:02:ed:80:b5:c6:1d:cd:f5:9d:78
Fingerprint (sha256): 00:c0:f0:42:4c:ef:1c:46:9a:cf:64:aa:45:36:d0:12:e0:bc:3a:5e:9c:32:13:32:d9:4f:b7:05:fc:26:e4:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ddfco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ddfco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ddfco.com

Other certificates including the domain name ddfco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ddfco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324855160079431654696483301789307593351775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 00:36:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:36:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ddfco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830276100919181689692227030610738601959515298751581013444995220859433611671192167155316700842865188589797014823135057450143496632530837870356511205405590022708381415360204605375574023574454567929475034416663255064668618463783813079061021865003994744467423254282467651030443647589584388643959871737026951568389780276980782510663151531540014692469090844753604408803637060158545651645559228779669064777526234545531422164865990560370813586795257150126248164163999018494012041784974010554405830741625855605395117467557447790351681675121573870889281923817410335297642361559920144656050099332804514611123964091965793633410330207094472851869487316719684655561239560714666124516890787178688780784856905318362174880864482564125673448394974789721478374130747237846148453281759278111965096908008303321540108222073471720127035498018178494386725927693613586476895480167240759443126057249117213889802331222763816507366099737621977490735329347850513762298352869387289183182208290165637781397144048652921025214786178454101523560518397036341477998987851919007038793979786636744237840465789272465668086543259557912570758044464866231492318870884213590421850101167704185964471234674396303894047369321668727006746599600065971146223857365523437091625243831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c8514b3f58ec0f79af062a0a0f8e1b563506033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddfco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbd9c6c6d0000040300473045022100e17c95ea47195c43844abfdbc555143bb9d3f74bd05f85c7d04e4fcf36c02fd102205868c735f4c0a1b6c0565549854e2a735d6bc27fdc972bbb2f8c461c6d7f8889007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbd9c6c7400000403004630440220325a1d0938a73bbf573087a3cf30f72c41de34cd903cba3ede9db5687ad1531c022033992576e58668f5f97e8ed1ed5149c6c5d68a233fc80fcc3c216d9c917b2afc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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