shopify.duel.tech

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:fd:2d:73:ae:65:10:3a:14:ae:56:3e:76:8b:e3:49:18 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopify.duel.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:fd:2d:73:ae:65:10:3a:14:ae:56:3e:76:8b:e3:49:18
Serial Number (int): 282430612860044286294733412985543216810264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:60:74:43:3e:a3:bc:d4:a9:bc:40:e1:b3:5d:36:8e:e3:92:71:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:53:78:df:fd:e2:3b:d1:65:51:cb:c2:79:e1:d9:1f:24:03:4e:1f
Fingerprint (sha256): d8:51:c4:eb:b6:8d:e4:ea:de:72:8d:ac:bc:8f:9f:f0:27:0a:14:18:de:f1:79:4c:a0:11:16:f3:b3:d9:0f:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shopify.duel.tech

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopify.duel.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopify.duel.tech

Other certificates including the domain name duel.tech

(limited to 100 certificates)
shopify.duel.tech
duel.tech
www.duel.tech
duel.tech
sst.duel.tech
*.duel.tech
shopify.duel.tech
shopify.duel.tech
sni.cloudflaressl.com
family.monicavinader.com
shopify.duel.tech
shopify.duel.tech
sni.cloudflaressl.com
duel.tech
community.rooftopcinemaclub.com
duel.tech
sni.cloudflaressl.com
www.duel.tech
duel.tech
collab.minirigs.co.uk
ambassador.mudjeans.eu
community.cruaoutdoors.com
duel.tech
duel.tech
shopify.duel.tech
duel.tech
duel.tech
duel.tech
ambassador.mudjeans.eu
shopify.duel.tech
duel.tech
duel.tech
shopify.duel.tech
team.lavaart.com
demo.duel.tech
duel.tech
duel.tech
rivian.duel.tech
duel.tech
ambassadors.feelunique.com
sni.cloudflaressl.com
shopify.duel.tech
duel.tech
sni.cloudflaressl.com
duel.tech
team.feelunique.com
duel.tech
www.duel.tech
shopify.duel.tech
shopify.duel.tech
shopify.duel.tech
duel.tech
duel.tech
duel.tech

Certificate

The complete raw certificate details for shopify.duel.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwUl6KDq+8wkzPELRNlD
ZIKr66C9ExCMhA9qGHgzR9VG/Cc1tdr0vpvuvFbm/EIOzyIpaq9NN80AlDz1PtNe
xQtwPOO9Y+jvRCY3SWKtyHWYs6Mn0IzRF4sQKniqVkVZlrInyztwX/plfO084Sim
Iif2TNDc54X4hk5czQ4D/vyWjAp1fTsEgVgcJiz9PU00U9le0/guK33u4KCBW3Jl
hge+sljoN/twC8ZUntrgN0b/jzbTe5zOOs1pUzmbq69aeamF4nnfImll3LbrnoK4
1Y4OmSI0YW5GnPWb3StgMPclmMAivoFMjaId0VKt4B2RqbD/afdAlu4ISwestpJV
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282430612860044286294733412985543216810264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 04:29:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 04:29:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopify.duel.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24114054861814793127050186446961904281501137851771621520016879526987214546937953005288875847258174575336831896754600443440690799031063484897360145572165774456153902712130269394361213086198346716431199559856339854141689811767241997509216693174055995350810228272130134901735038777690561628573470146813196589920971460837096138643206038780091180546698286069850845139731024545593917321173496443278384877349206261614338777719909065834282123910700475668197329559038993538628383218188848345557119525866925771737499541360315238287477650678269891304167114729241733783858181034559379520099285825072942553902723423725676909450631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a6074433ea3bcd4a9bc40e1b35d368ee3927153
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.duel.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001709edeaae000000403004730450221008c62b594bfaa7d27bff6230ad67c4d3925de7b49e9b73b2cc4ddac65216c33a90220766318e72367b33b012d695a89b1758c78387d4eb6c87587fa0d4eff6e61a455007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709edeaafa0000040300463044022034d0fb3cf6f82b5bf7efba7e8dcf8e66cb30b462fc6c55f4b4b0cb2a4e85cdbf0220186b0ad0a26c4be2560fc3ecc26b3862ed42a3f8e3f67c8ced76777cc5af3940
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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