www.duvallwa.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:c9:46:0d:01:19:4b:79:91:bc:93:35:fd:fa:5b:57:ce:de was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.duvallwa.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c9:46:0d:01:19:4b:79:91:bc:93:35:fd:fa:5b:57:ce:de
Serial Number (int): 416939012960000194816987120174363319979742
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:39:06:05:5d:90:fe:0e:32:87:bc:20:7c:a3:c4:7e:59:2d:be:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:3f:a3:0b:e1:71:33:fc:d1:da:46:81:a5:57:19:b1:2a:71:5f:1f
Fingerprint (sha256): 7b:74:e2:61:b5:ee:e5:34:9a:86:11:0c:25:9f:c2:30:26:51:d7:2b:8c:59:5f:1b:7e:0e:64:c8:fd:08:59:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.duvallwa.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.duvallwa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duvallwa.gov
www.duvallwa.gov

Other certificates including the domain name duvallwa.gov

(limited to 100 certificates)
helpdesk.almeera.com.qa
servicedesk.orn.net
helpdesk.almeera.com.qa
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
servicedesk.orn.net
helpdesk.almeera.com.qa
technologyservicedesk.expocitydubai.ae
ithelpdesk.cdmig.com
servicedesk.orn.net
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
www.duvallwa.gov
technologyservicedesk.expocitydubai.ae
support.alsafygroup.com
helpdesk.vitalcareinc.com
www.duvallwa.gov
it-helpdesk.aspirafp.co.uk
servicedesk.orn.net
servicedesk.orn.net
servicedesk.orn.net
servicedesk.scscourt.org
itsupport.agencybloc.com
helpdesk.almeera.com.qa
helpdesk.aeainvestors.com
servicedesk.orn.net
helpdesk.foodspecialities.com
eedesk.hayden-homes.com
servicedesk.orn.net
servicedesk.orn.net
it-helpdesk.aspirafp.co.uk
helpdesk.almeera.com.qa
helpdesk.vitalcareinc.com
servicedesk.orn.net
service.aramtec.com
servicedesk.orn.net
helpdesk.almeera.com.qa
it-helpdesk.aspirafp.co.uk
helpdesk.duvallwa.gov
it.ziahomesep.com
helpdesk.almeera.com.qa
servicedesk.scscourt.org
servicedesk.asrc.com
servicedesk.orn.net
support.alsafygroup.com
servicedesk.orn.net
www.duvallwa.gov
helpdesk.almeera.com.qa
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
servicedesk.sarcos.com
ithelpdesk.cdmig.com
helpdesk.vitalcareinc.com
servicedesk.orn.net
www.duvallwa.gov
duvallwa.gov
servicedesk.orn.net
servicedesk.orn.net
servicedesk.orn.net
support.alsafygroup.com
servicedesk.orn.net
helpdesk.foodspecialities.com
servicedesk.orn.net
eedesk.hayden-homes.com
www.duvallwa.gov
servicedesk.orn.net
support.eltizam.com
service.aramtec.com
servicedesk.orn.net
helpdesk.almeera.com.qa
www.duvallwa.gov
eedesk.hayden-homes.com
it-helpdesk.aspirafp.co.uk
helpdesk.almeera.com.qa
servicedesk.orn.net
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
eedesk.hayden-homes.com
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
servicedesk.orn.net
ithelpdesk.cdmig.com
www.duvallwa.gov
servicedesk.orn.net
www.duvallwa.gov
helpdesk.almeera.com.qa
helpdesk.duvallwa.gov
it.ziahomesep.com
service.aramtec.com
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
technologyservicedesk.expocitydubai.ae
www.duvallwa.gov
it.ziahomesep.com
servicedesk.sarcos.com

Certificate

The complete raw certificate details for www.duvallwa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWwD0XN5pjuyi46TPGxZ
JeIxbRuhl5cA3loURqjb+Y7QCULgZacY11XFms0W9Gb2MV+aeBwKDfwWOxhyTeN4
g501YuCh7z3ALLfxwgYfm1CnToo/YHCKp9vffIOKRxGcKq0jTJRcZkfPkHys3YIQ
jbM9pEtTSTivAAKFlg6crX+XvsaadCRWfCXegPUVKhlimfmimg2eEs5oVzC5FsWI
QIQQw8Wg2pA65KZ8f/ikiy/GSCjn1FxHG1K4JgKTis2cZEM6OnJu8k3JllhoCDSP
AZGCkECpYEoLY/Nl08FEBCoNF3ycXhwbksZokWDn4gubg37HRlKR7DWRP/StiNlR
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416939012960000194816987120174363319979742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 01:03:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 01:03:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.duvallwa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16842958700115786529672758172838603086790482134235627222347389049723000573491524275579154872457864450968853704429419441994808430477527008227101600126386002042633695578034026282667909333706905597839027251418888435722043468792225405383258663196646813310637645016775401242075722012830054389762706560657053300745785237044682402178586944274269129043305652209283287183274035470165671759234940703550031837682459618594423406591936739380992759463510268627265777663558880378134020078722762185212899739822925551373906329303282648749129317307278407709686691657910821352628608598944882792575033919248943834520342638721537117081891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							623906055d90fe0e3287bc207ca3c47e592dbece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvallwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvallwa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7f23f5450000040300473045022100a0b85714648d91aefb9951a4175de61dc5918cce21bfda40f04f4f255ea5edb30220502cfa8b01356faabaf48b31e816000deea683c6353564f6ee43017d8c69cbe300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7f23f573000004030046304402206831d795164580e12903567c351bf473177a793d7fd12fb558aef048e748912f022009e7828f57b64d4510ffb1be37f68ab48c0a2423adfc8f6b83b5f1db84787b68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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