duzco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:d0:23:5d:5d:ca:f3:f7:de:f4:08:ec:c9:c5:f5:90:54 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=duzco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:d0:23:5d:5d:ca:f3:f7:de:f4:08:ec:c9:c5:f5:90:54
Serial Number (int): 272162274217038266692694595674220761813076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:3d:c3:67:65:fa:c7:27:59:ba:e2:06:45:b1:41:df:45:dd:6c:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:bd:93:45:e1:84:6b:ff:45:da:60:15:e8:83:48:4b:d5:39:c4:10
Fingerprint (sha256): 62:e9:dc:de:ef:ec:b1:b9:99:65:f2:91:48:f1:55:6b:79:c3:2a:5f:d6:65:ef:76:de:a1:f5:35:b2:72:af:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate duzco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duzco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duzco.com

Other certificates including the domain name duzco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for duzco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272162274217038266692694595674220761813076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 23:20:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 23:20:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duzco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825565934662878806594935024954336784391208553907577216457478237047936915940147827088229253213210717595015716669256344865796654207098141653876954099510059920325413989299936105251622315217279413823039589068208204226526840075466217488544407967458656924219849539987345224026636728295549848875768169274952034315561651678895746525554101350881494729801075531932760073756685098386018998967244422306275737607692985225036667967213185020061869541028746357956324783614914069804928514384396861043460488146068588480838800432763212473285379333333043597970301038434400905597082776022472163728213717309357825065768379365977643086522620894325349315501235977079286917374483813782646640730389128941988012829170859897726434946878070423548669950628977170069638335712053497807016440156527139999389837111642500277761515336242380932698842240638267544428833676278417815148394464217637582576042944515955908751946204880676287482548245475974465835375277442684420913566033500961546817740334055904042656544122632006142500838416837651477653851883750431896106804504572416021646179051904328590441561859069871366599561755153864300235962945310968105764016939140381668394554920570713067782498643242212660469495279292226335010566229502212998704928430365263169929959486471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a3dc36765fac72759bae20645b141df45dd6cca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duzco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f1139e2e60000040300483046022100826d76cc6ee7f756205e32e1afa3f817d138f0a18a85e074dca251fb712cad73022100ae6f255508cb832b835f390bd6f9a5a2bba4a6324d3b59cfa8be514ac7dce71300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1139e2d50000040300473045022100eaafcd9c57e4d2ac01aa779eb31c26c0764b93a4df8ac74679269a7b0de0e1e202204b843886a2486fbff94776325eb4728f9baba2c54839c6ad17b4edf0bbf28d25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000228359828bcff9c782813314e72e95ba7d55fd958675c72a9dc290413cc154d62464eb1446c8e462bda8603fa6c88c5c04ff3bfd2f455eade2b53bfe5e5e8faae7a7941d76886c9495db16dd061c403d239afcc2406391cb9e4d52947aaabe98cb087b8942b5f73ec75218f2c2c1930dda7778ab23847a38649310a6268661dcee695175a817946f27d3e7a15a5ec2cf480c040174532a6467fbb042f2d2f2d3d05ea512433367c84ac9c4c427bfa0ea7a042cd4dfab4eb7fab7a717a8be73ab00a0f70b3a57b42ce565def5a56a4f9cefe7e406324656c416f4cbb17e8b174903fbd2e89f4f8e10c90c173553313dd6aa812d30b7c4d1b4897db68b5de1837