dufy.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:9d:b7:39:03:c5:9b:46:73:a3:31:1e:48:ac:7f:8c:8d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dufy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:9d:b7:39:03:c5:9b:46:73:a3:31:1e:48:ac:7f:8c:8d
Serial Number (int): 358526972509807733851259021421530289507469
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:1d:b5:bd:d8:f2:e0:db:b2:0d:f7:08:77:a4:cc:a3:fb:d0:73:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:92:88:c3:9a:e6:84:ec:f2:d3:91:2f:ab:a7:43:5a:ec:f3:b2:82
Fingerprint (sha256): e6:3c:e1:3f:5f:5f:d8:c5:9c:1b:c8:a4:04:4c:3f:96:da:2a:45:0e:b6:7c:81:e1:a7:29:af:22:aa:77:09:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dufy.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dufy.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dufy.org

Other certificates including the domain name dufy.org

(limited to 100 certificates)
musicguide.org
www.ocnb.com
www.dufy.org
dufy.org
www.workwelfareandfamilies.org
dufy.org
www.dufy.org
dufy.org

Certificate

The complete raw certificate details for dufy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3PVZwqNUeLvZgcej619P
QDhK6xFBQdG7XbGmeuHC5mCZ/n+HQlRu2w0dZhekguy43gOUdi+jOWCmq6Hw/ftn
IWO1rc6VKTO1RKnMg9R2ZveqfpWI67lM2HAkCcri3YBxNr9VKkpm9YAYkCnW3Pr2
i5HG3zM/uOICPWwwRCHCYj+/R+006eLflRE9dX14WUiDDE8YOpvCYAoW8+3Kgu9V
nsRUdTijMa0OMEBUpHf+H1ofefsCTTw3Sl3Lt2uhULpriq7mu3CjLO5JA9+Z5yuX
3bSeSslsuKMcAx6qnb/CJUk/CJb16u5ZUm9bHWIYNGbe2Gec9jdbkbsrjr7AoCEF
XTduknZSvE0MTY6ByqBmPGUWablL7sk6aWRRBdX98pFyYWgCdudyuNeIo+9XOGCF
/EwykRyt05VC5T7sY499JOb6BVTZdG/Z9/QWkF37A6PVwnH4WaCoJD95foUxnw04
6hVwtY3WilLmdqTr9jvBdIl1HD01oEZUhXTIW45haUrz00TlpUMgTjqPrJoGlt34
AsAquB0RZkWDf5FOFjgphRUJ+NMFSseb2oXclOWsLSKJerRImwLE+5pTs4evRxvn
hNB/3RgwXRRap3MnUPCz6h01QVs0B9B3Upnl2pRhHxuIAH8UfU2+zCFxIdpoAFYy
3Xi6miIIF2UDqZOwf2MveNcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358526972509807733851259021421530289507469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 02:06:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 02:06:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dufy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901431629443811890286767933949104859005160798174856393633333762978669585521215055834186723534758082617454050632439447922797100724198603292836321086856883810992746494898321930017894788042815747554530863880342787269288368165343454916993648164615148559545845987377150122957030353602859316761837816060638245990168007564972682332542551872299093521733846126661162532634949413290799134567846375017778500481399016379148723048290889452860700431112072046145451215220332753600802169561876346509769574270919239652531421302447847508918779616398719935445384258162557683417887062958594913018504699343866898955396573230330900037692885362372361471834325907966018061939718937853855486176833932935842184699871941065904604004119682661222239517354223898684990400315258491625768907108820476918015403264078864837943689848560574412212847973258120342099771538330977014256215286884481352118774306476104193541522788863272124064517979606775510450446183676831122226607265296442955708519345329971660412734448079467308488737521478488529824584323993244588782002632646017358578255900600859837024512204992686716895305742585932601936412730967677414896678669851109665494559770627270750502117767219145206835435456565144693017519474552650709241013623266091975504217209047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1db5bdd8f2e0dbb20df70877a4cca3fbd07381
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dufy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167afd4cb1c0000040300473045022100b1d644c008bb93ae8a803f2c4bd09e191074cee4ec297fb036567d6f104e7b820220320e3d32b3f3bb502f85a4cd6d1d8bdfb921a0b25473efd326f9175f5847e5c1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167afd4c9840000040300473045022100d2c0c776fc970131652e656b71267c16dfcd2250c2f6ce5bc0f5bdaf2968de07022001808cb0ceae5ac90dc5c9398d0154893f8d34172f0dfb7840580c10344f350c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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