www.duzco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ed:27:dd:f9:03:0e:83:a8:8c:79:c5:e7:92:a9:f3:0d:ca was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.duzco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ed:27:dd:f9:03:0e:83:a8:8c:79:c5:e7:92:a9:f3:0d:caSerial Number (int): 342036771195546671448818119073482816032202
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b2:03:98:3e:54:71:47:bb:c5:59:f0:78:ab:0c:5b:aa:0f:85:c0:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:37:93:d6:55:d2:ea:a9:b0:39:5f:4f:c3:9e:b3:6c:e5:d1:fa:34
Fingerprint (sha256): 4e:45:10:02:1a:c5:bb:80:4a:08:ae:8a:e1:73:a8:40:cc:27:d9:32:9a:3d:87:5f:1a:e3:ea:29:f4:e6:42:ca
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.duzco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.duzco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.duzco.com
Other certificates including the domain name duzco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.duzco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISA+0n3fkDDoOojHnF55Kp8w3KMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwODM5MjVaFw0y MDAxMTEwODM5MjVaMBgxFjAUBgNVBAMTDXd3dy5kdXpjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCzzk/JxDenZjbrX+xCcEaXbkonWDIxkd+U 7IVYyUtMTlvXYBmryRlmJUeZgMgy4OjZiDIFsKzblNavlLtCjtvXh/F7NR74FXkJ 603XMhrjJBnwJIN5w0xhv7BbwS4N09qq5yHynO7JDBYhGIwXt/7WLc4q7yVvoGpv 4+A1M1HKOSXX5Vshb07I1XqErGSiRl7ERNOJEEXQFQECNMmy4giPWwIX8ZruAztm lX816cV/nmdsm+ZYRWUcpQrfVfs4wFnoV+LIzsBdhh+MiwiMk5xwDB9ceSjNQerM 0OYzWKI30kNrt95Z3CBs/yDJG5FQxTJf2QUey4bN4zbwkLMWsj4hq6e33SenLq1f u00AOACUsJ9MFmlh+fLbfM2DKQ44A6MV8mTiWIxOX+5Np/WoXEQ+HnKISPSf43Xy uzPfEqHn1SQCGU8ZHIReoJctDoG9A/LiA9gfVDzxdzSsewBlNybjlXY8BDzN32Ox mYY04dzRToVGIUBjxgzWUsP4sqSTadqloo0uOIJTeGzIiYQFOiL701DF/tbst9yB nyQq0Ols1BeoeG3s8ytAlWlhUjAA/YkfQMwCTryuAgLrAHtP8zzql9WRWggMl/AK Im2I8gix2t11sOf2va9qhuWierf/bOpF+V1jU0S0QvL3AoRddMs+7ikpz1x/Mmtb pMjOX13RcwIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSyA5g+ VHFHu8VZ8HirDFuqD4XAvDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5kdXpjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3EfKRMAAAE AwBHMEUCIQDRkuHHV7cqPhnsNZxk3BxXAudZYLaZBPGfPsKT9xWZMgIgZxk3QNey Das/X1utZZ5PNJNlYTijUyTcb8XuTXdF4UsAdwBvU3asMfAxGdiZAKRRFf93FRwR 2QLBACkGjbIImjfZEwAAAW3EfKR2AAAEAwBIMEYCIQCk5drgAFoBuVu9eRi+++oZ SOsz/iaPJS3qaNUajuPXTwIhAOH/vFKAHWK5pTYuxdCksaucqgIdLG+Ev/lOSTVF eri8MA0GCSqGSIb3DQEBCwUAA4IBAQAdHU8/6WBvM3KK4GjbBJ0oYOX7GQCOokaK XV7EsXcTEQAYTIlXci+dvN1t3Ro0Owg07keh3kz2AeNuX9mbEKasf7e7co69yIrJ dhXSFFC9aMRw9Pg9sGXlkn5QsGeP7NAyPJsmYoXFJKp2gJy+VTApryU/Th6jSMQ1 TgcSlxPY3Y7QdIKtBB2SvkBKAoktzMM+1fd9vTC+uV1wtnwgaQAaYS9r1r7v6QbT 9BVINxeFpIoYJvptvjd6NVEkvSUo60j+bk8NJPSg5Rfi5QYZhqGKU0YZqby3LgEW Qyrp43TAWFGyHrOmKZ+hLtEC4bHizcIyN6dIVgIc6fFKt1+ma8m7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs85PycQ3p2Y261/sQnBG l25KJ1gyMZHflOyFWMlLTE5b12AZq8kZZiVHmYDIMuDo2YgyBbCs25TWr5S7Qo7b 14fxezUe+BV5CetN1zIa4yQZ8CSDecNMYb+wW8EuDdPaquch8pzuyQwWIRiMF7f+ 1i3OKu8lb6Bqb+PgNTNRyjkl1+VbIW9OyNV6hKxkokZexETTiRBF0BUBAjTJsuII j1sCF/Ga7gM7ZpV/NenFf55nbJvmWEVlHKUK31X7OMBZ6FfiyM7AXYYfjIsIjJOc cAwfXHkozUHqzNDmM1iiN9JDa7feWdwgbP8gyRuRUMUyX9kFHsuGzeM28JCzFrI+ Iaunt90npy6tX7tNADgAlLCfTBZpYfny23zNgykOOAOjFfJk4liMTl/uTaf1qFxE Ph5yiEj0n+N18rsz3xKh59UkAhlPGRyEXqCXLQ6BvQPy4gPYH1Q88Xc0rHsAZTcm 45V2PAQ8zd9jsZmGNOHc0U6FRiFAY8YM1lLD+LKkk2napaKNLjiCU3hsyImEBToi +9NQxf7W7LfcgZ8kKtDpbNQXqHht7PMrQJVpYVIwAP2JH0DMAk68rgIC6wB7T/M8 6pfVkVoIDJfwCiJtiPIIsdrddbDn9r2vaoblonq3/2zqRfldY1NEtELy9wKEXXTL Pu4pKc9cfzJrW6TIzl9d0XMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342036771195546671448818119073482816032202 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 08:39:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 08:39:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.duzco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733544093608115208747893642729523650593269328755899020565326822201519172077029079989584846277061503896288604934464737262556658727513443700033272885153371099379968270592287996401044630959216976453724108718159335255165184148581470553191770587715057063586370230562069436971164094879331744287326678145753946222489686074660659086048939426568757316157787932088648858153598055573804613309661016670025796960987872970540826735601888703425764258000737983035413745530461885016669334272692280368357034646517876630446047011263187309388874268526866834621674479690102804376467418737215703098777387830676926196286191992942014816200654759289071486527144114807302917530164208924615362862027950584125707720439083659465269329648111123761411283391073049832550559592929602634848001183090416948377992025046141007974588180033606961180202638790849590137818383151657613097192544898975489148785205068985619745036862812422472327209726716480059114282195614149633937465459012891877379469722864717315342478539687460519030261207801194274958892306808004897964370767843492402746627102898941545076061804333921889391494288780671846912969383031598001989604909170686731160618823473893977565150271994383333199996676667634358226264772857021287259477119721184354521879269747 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b203983e547147bbc559f078ab0c5baa0f85c0bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duzco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc47ca44c0000040300473045022100d192e1c757b72a3e19ec359c64dc1c5702e75960b69904f19f3ec293f7159932022067193740d7b20dab3f5f5bad659e4f3493656138a35324dc6fc5ee4d7745e14b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc47ca4760000040300483046022100a4e5dae0005a01b95bbd7918befbea1948eb33fe268f252dea68d51a8ee3d74f022100e1ffbc52801d62b9a5362ec5d0a4b1ab9caa021d2c6f84bff94e4935457ab8bc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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