duratravel.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:27:38:22:da:6f:90:0c:44:a2:e4:9c:bc:3d:38:c2:51 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=duratravel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:27:38:22:da:6f:90:0c:44:a2:e4:9c:bc:3d:38:c2:51
Serial Number (int): 316855014970761592085401333591259429257809
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:9d:13:aa:19:ee:d0:08:5d:64:df:40:a3:3c:0d:ab:3f:24:b0:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:00:97:e1:da:c6:f4:7f:8e:17:28:ce:5b:c9:c7:1a:28:46:89:ba
Fingerprint (sha256): 9c:1d:8c:ee:36:71:07:10:62:82:ad:2f:2f:08:b1:d7:85:ce:ed:61:6f:36:8b:42:15:11:26:47:0a:b5:68:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate duratravel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duratravel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duratravel.com

Other certificates including the domain name duratravel.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for duratravel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316855014970761592085401333591259429257809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 07:46:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 07:46:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duratravel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860837167143181431181886305029906126739052885915977086423898768564380491217306801034495473907525401593166348180326606086072542569108070298939590948974283511439367729965409058725283370833805933687927986554759086273009514684309563139992400917542129080142391942749155548087275295344843500165590584887511709646047823948027443775162093439248469440355053792795652636939316131697324345315347080964694155565552131179444279368802711328460363852152043849424220660996785077816554123001070854626608319002760720553695214732636294582366256042897487078764798863579107707687714007541852779106349880602998452825113530039436105304868389430186885914006411270836260225577656825763328859220895262925401143934997439103775949972900819213743135535660466743765244441852745302530010482576182952884652373555730070438182087878470330901449501578708689480183326553905919566712529513826907326708164777903082608344671162189381145021516355264675410071021379994434944956897423713452370886723204626895381435285122736669964332003036224356788704036239754176755742652381512830342225227291202491936884453937939291092108642282461967288834908861511257769437705119988453550590731055757360985357860804507443343766548142743354452342323378661817724693388966726458160895266741403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc9d13aa19eed0085d64df40a33c0dab3f24b0bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duratravel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f18302a6600000403004630440220261af18848d0be5c8edd5a8c00f147613871ee0d95a202a33515f8646f246a6b0220761e4e09af1696cca96c051f67747ea84d244793b828a491b470bfba1c72f40d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f18302a720000040300483046022100d903b36cc48633fe067188652d9fac8235a5e866f3ed8bd01037ed98bc3e75f9022100e11920ca42973b9dd726ef0526a1e6bbb050d90d3555d251f840bc514af4efce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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