www.duzco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:27:dd:f9:03:0e:83:a8:8c:79:c5:e7:92:a9:f3:0d:ca was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.duzco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:27:dd:f9:03:0e:83:a8:8c:79:c5:e7:92:a9:f3:0d:ca
Serial Number (int): 342036771195546671448818119073482816032202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:03:98:3e:54:71:47:bb:c5:59:f0:78:ab:0c:5b:aa:0f:85:c0:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:37:93:d6:55:d2:ea:a9:b0:39:5f:4f:c3:9e:b3:6c:e5:d1:fa:34
Fingerprint (sha256): 4e:45:10:02:1a:c5:bb:80:4a:08:ae:8a:e1:73:a8:40:cc:27:d9:32:9a:3d:87:5f:1a:e3:ea:29:f4:e6:42:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.duzco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.duzco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.duzco.com

Other certificates including the domain name duzco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.duzco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs85PycQ3p2Y261/sQnBG
l25KJ1gyMZHflOyFWMlLTE5b12AZq8kZZiVHmYDIMuDo2YgyBbCs25TWr5S7Qo7b
14fxezUe+BV5CetN1zIa4yQZ8CSDecNMYb+wW8EuDdPaquch8pzuyQwWIRiMF7f+
1i3OKu8lb6Bqb+PgNTNRyjkl1+VbIW9OyNV6hKxkokZexETTiRBF0BUBAjTJsuII
j1sCF/Ga7gM7ZpV/NenFf55nbJvmWEVlHKUK31X7OMBZ6FfiyM7AXYYfjIsIjJOc
cAwfXHkozUHqzNDmM1iiN9JDa7feWdwgbP8gyRuRUMUyX9kFHsuGzeM28JCzFrI+
Iaunt90npy6tX7tNADgAlLCfTBZpYfny23zNgykOOAOjFfJk4liMTl/uTaf1qFxE
Ph5yiEj0n+N18rsz3xKh59UkAhlPGRyEXqCXLQ6BvQPy4gPYH1Q88Xc0rHsAZTcm
45V2PAQ8zd9jsZmGNOHc0U6FRiFAY8YM1lLD+LKkk2napaKNLjiCU3hsyImEBToi
+9NQxf7W7LfcgZ8kKtDpbNQXqHht7PMrQJVpYVIwAP2JH0DMAk68rgIC6wB7T/M8
6pfVkVoIDJfwCiJtiPIIsdrddbDn9r2vaoblonq3/2zqRfldY1NEtELy9wKEXXTL
Pu4pKc9cfzJrW6TIzl9d0XMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342036771195546671448818119073482816032202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 08:39:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 08:39:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.duzco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733544093608115208747893642729523650593269328755899020565326822201519172077029079989584846277061503896288604934464737262556658727513443700033272885153371099379968270592287996401044630959216976453724108718159335255165184148581470553191770587715057063586370230562069436971164094879331744287326678145753946222489686074660659086048939426568757316157787932088648858153598055573804613309661016670025796960987872970540826735601888703425764258000737983035413745530461885016669334272692280368357034646517876630446047011263187309388874268526866834621674479690102804376467418737215703098777387830676926196286191992942014816200654759289071486527144114807302917530164208924615362862027950584125707720439083659465269329648111123761411283391073049832550559592929602634848001183090416948377992025046141007974588180033606961180202638790849590137818383151657613097192544898975489148785205068985619745036862812422472327209726716480059114282195614149633937465459012891877379469722864717315342478539687460519030261207801194274958892306808004897964370767843492402746627102898941545076061804333921889391494288780671846912969383031598001989604909170686731160618823473893977565150271994383333199996676667634358226264772857021287259477119721184354521879269747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b203983e547147bbc559f078ab0c5baa0f85c0bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duzco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc47ca44c0000040300473045022100d192e1c757b72a3e19ec359c64dc1c5702e75960b69904f19f3ec293f7159932022067193740d7b20dab3f5f5bad659e4f3493656138a35324dc6fc5ee4d7745e14b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc47ca4760000040300483046022100a4e5dae0005a01b95bbd7918befbea1948eb33fe268f252dea68d51a8ee3d74f022100e1ffbc52801d62b9a5362ec5d0a4b1ab9caa021d2c6f84bff94e4935457ab8bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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