duzco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1f:d0:23:5d:5d:ca:f3:f7:de:f4:08:ec:c9:c5:f5:90:54 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=duzco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1f:d0:23:5d:5d:ca:f3:f7:de:f4:08:ec:c9:c5:f5:90:54Serial Number (int): 272162274217038266692694595674220761813076
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6a:3d:c3:67:65:fa:c7:27:59:ba:e2:06:45:b1:41:df:45:dd:6c:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 81:bd:93:45:e1:84:6b:ff:45:da:60:15:e8:83:48:4b:d5:39:c4:10
Fingerprint (sha256): 62:e9:dc:de:ef:ec:b1:b9:99:65:f2:91:48:f1:55:6b:79:c3:2a:5f:d6:65:ef:76:de:a1:f5:35:b2:72:af:e1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate duzco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for duzco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
duzco.com
Other certificates including the domain name duzco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for duzco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAx/QI11dyvP33vQI7MnF9ZBUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYyMzIwMDNaFw0y MDAzMTUyMzIwMDNaMBQxEjAQBgNVBAMTCWR1emNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMpcvB/krX9vOCO/a3mg75WpPu2pr8UIV8cTQC+y bjgmuwmGXWq/tq9CB/PD84s1jUPBWo6vLOlxd6hlTPEUun3o6TBdKP9wISyhFZmI 2VipENV1pq5Ia098IIkI8TyoyF8E+6UInanNU7/c675c7AGIVyvE1ad+ZzQ9E1vt /0pehK9q68G66oSZb9d7pcNU+mqv8wnZa90F/zwDguCBPdaOzZbJiGgFFHjcehPj BzW1thXkVvzliXn8ze+Y1xc9A7Xy6c7uNbHkRBFZKE6g8AGig8VsyL9M4KRR1SKP Ok+KG93aimuEH4cog6p4tM2jmugjT43LKxzNWoFlknQ9sE4RhpwzBXRubXYcTDX4 lfAk3xhc/lXw4qhyF5IRcIK2Phz42xWAXFTaNwuUaZ1O5JIg0Md+i/6cs+nm8PaO mzGezv67mtQegt14T/9xR+5qZzfaAAewOQMzjtVwY40ItWQsdnkNTvdbdf10fXJd cZiTixbbKd+m8lR1BnEpgx4mSuw1OGioJHitDsglhHL5Pi7JmtSpPldjquOAEIw1 nNuko3hm9oOWWkLru+zEdxrZFYX9VjFjJqs04bmSINOF+BnjevMJbsbC85sWh7H0 l1j+XHEE1Baozt6lnPMzHVvwbq1M0SuqzZV310FvujUEF9TpYSj8H1xyxX+zYmzp ILQHAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGo9w2dl+scn WbriBkWxQd9F3WzKMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJZHV6Y28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFvETni5gAABAMASDBGAiEA gm12zG7n91YgXjLhr6P4F9E48KGKheB03KJR+3EsrXMCIQCubyVVCMuDK4NfOQvW +aWiu6SmMk07Wc+ovlFKx9znEwB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh Ohpp06IcAAABbxE54tUAAAQDAEcwRQIhAOqvzZxX5NKsAap3nrMcJsB2S5Ok34rH RnkmmnsN4OHiAiBLhDiGokhvv/lHdjJetHKPm6uixUg5xq0XtO3wu/KNJTANBgkq hkiG9w0BAQsFAAOCAQEAAig1mCi8/5x4KBMxTnLpW6fVX9lYZ1xyqdwpBBPMFU1i Rk6xRGyORivahgP6bIjFwE/zv9L0VereK1O/5eXo+q56eUHXaIbJSV2xbdBhxAPS Oa/MJAY5HLnk1SlHqqvpjLCHuJQrX3PsdSGPLCwZMN2nd4qyOEejhkkxCmJoZh3O 5pUXWoF5RvJ9PnoVpews9IDAQBdFMqZGf7sELy0vLT0F6lEkMzZ8hKycTEJ7+g6n oELNTfq063+renF6i+c6sAoPcLOle0LOVl3vWlak+c7+fkBjJGVsQW9MuxfosXSQ P70uifT44QyQwXNVMxPdaqgS0wt8TRtIl9totd4YNw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyly8H+Stf284I79reaDv lak+7amvxQhXxxNAL7JuOCa7CYZdar+2r0IH88PzizWNQ8Fajq8s6XF3qGVM8RS6 fejpMF0o/3AhLKEVmYjZWKkQ1XWmrkhrT3wgiQjxPKjIXwT7pQidqc1Tv9zrvlzs AYhXK8TVp35nND0TW+3/Sl6Er2rrwbrqhJlv13ulw1T6aq/zCdlr3QX/PAOC4IE9 1o7NlsmIaAUUeNx6E+MHNbW2FeRW/OWJefzN75jXFz0DtfLpzu41seREEVkoTqDw AaKDxWzIv0zgpFHVIo86T4ob3dqKa4QfhyiDqni0zaOa6CNPjcsrHM1agWWSdD2w ThGGnDMFdG5tdhxMNfiV8CTfGFz+VfDiqHIXkhFwgrY+HPjbFYBcVNo3C5RpnU7k kiDQx36L/pyz6ebw9o6bMZ7O/rua1B6C3XhP/3FH7mpnN9oAB7A5AzOO1XBjjQi1 ZCx2eQ1O91t1/XR9cl1xmJOLFtsp36byVHUGcSmDHiZK7DU4aKgkeK0OyCWEcvk+ Lsma1Kk+V2Oq44AQjDWc26SjeGb2g5ZaQuu77MR3GtkVhf1WMWMmqzThuZIg04X4 GeN68wluxsLzmxaHsfSXWP5ccQTUFqjO3qWc8zMdW/BurUzRK6rNlXfXQW+6NQQX 1OlhKPwfXHLFf7NibOkgtAcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272162274217038266692694595674220761813076 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 23:20:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 23:20:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duzco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825565934662878806594935024954336784391208553907577216457478237047936915940147827088229253213210717595015716669256344865796654207098141653876954099510059920325413989299936105251622315217279413823039589068208204226526840075466217488544407967458656924219849539987345224026636728295549848875768169274952034315561651678895746525554101350881494729801075531932760073756685098386018998967244422306275737607692985225036667967213185020061869541028746357956324783614914069804928514384396861043460488146068588480838800432763212473285379333333043597970301038434400905597082776022472163728213717309357825065768379365977643086522620894325349315501235977079286917374483813782646640730389128941988012829170859897726434946878070423548669950628977170069638335712053497807016440156527139999389837111642500277761515336242380932698842240638267544428833676278417815148394464217637582576042944515955908751946204880676287482548245475974465835375277442684420913566033500961546817740334055904042656544122632006142500838416837651477653851883750431896106804504572416021646179051904328590441561859069871366599561755153864300235962945310968105764016939140381668394554920570713067782498643242212660469495279292226335010566229502212998704928430365263169929959486471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a3dc36765fac72759bae20645b141df45dd6cca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duzco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f1139e2e60000040300483046022100826d76cc6ee7f756205e32e1afa3f817d138f0a18a85e074dca251fb712cad73022100ae6f255508cb832b835f390bd6f9a5a2bba4a6324d3b59cfa8be514ac7dce71300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1139e2d50000040300473045022100eaafcd9c57e4d2ac01aa779eb31c26c0764b93a4df8ac74679269a7b0de0e1e202204b843886a2486fbff94776325eb4728f9baba2c54839c6ad17b4edf0bbf28d25 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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