www.dctco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:d0:dc:d9:c2:11:cf:c2:1e:51:dd:44:08:81:b8:23:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dctco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:d0:dc:d9:c2:11:cf:c2:1e:51:dd:44:08:81:b8:23:9e
Serial Number (int): 327629263123033601945098426456013010379678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:fd:3f:f4:f3:c2:b8:7d:7f:ed:74:77:31:f5:c3:7f:08:92:25:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:17:48:4d:85:9c:61:8e:ee:84:e2:a3:3e:73:1f:02:b7:82:49:e8
Fingerprint (sha256): e7:17:2e:e0:6b:2e:a3:e5:9b:d7:a8:40:b0:a7:81:88:22:27:6e:74:2a:04:a4:41:7d:8f:a9:2d:e2:fd:44:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dctco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dctco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dctco.com

Other certificates including the domain name dctco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dctco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327629263123033601945098426456013010379678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 15:10:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 15:10:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dctco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704589747415902191011306474047071296163139008983922244008148930600505067938036881630700696663938298592879173449573825513366106626084837539608376587780791786508921764467313299187294974346232016977569421770277829521399423039724545142691642711872635198793001840463420191322570444318197141806058719456682269948724573298912621668652097324433389476382626628869112791167121441148153028462760085694244752025753392301936188754473163487815688323649933324075260184490048309683866137127645211509730352954290632772796890028417434481889324576625886627814614698894171679107132877558679515827349299731242232898902915349413618111837959786396958153175761802807358316262248738616354989434035932615444892850061059897713428067830497265933995362162051994424661792346898575178326041406468423356737005493097226570677230227961130627600417486533661055687192187265078994808594745288464570288604586795130383516571093041020788215125761226265683430257524714032738183865023724314020639624187578624239838027409202604851125560785217357391232241366191210252520712589807381371940218802671084012162173048672926346343457846980414174918022726091205976928593699727448381413795789936498838339392912917298443722063874327375755195655511750444836195859495352867521472203275741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbfd3ff4f3c2b87d7fed747731f5c37f08922532
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dctco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001706daa58d600000403004830460221008719def08ffa3ac189c77d223756167f5a7edaec012d5a73227f5fbbe9915bba022100a66c19d3e5b847196516530003c6ce0fb18796eb8fc522802160767b0a27347e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706daa59060000040300473045022100c1403aeb84050a83016dd44baf456d1c7d147a508517b8bb01b70a1bb2526c0902200b53455598594281cb5c0a8cab18597c242815e5855b5b66f7e69ec8f13d2209
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096204e60acb1455f20dfb22c16733444f5a76588fa4681f5f0f2f8f04b117f1a8b5e6e8141b8b2fc7d51ebb211e0fbbdc946a24b0423fb6d923b489dd0677b91a9f652e66218636d250616d2d930041838e7411cb84c2343bccd4a32f6a442279f1350507528ff98ad8dc18d96afb7e53d2a60fb27fe5262642c1915e44fcd2888392d93af8814bc81e2affa12cf39e4ad42047a7f28c92f86fc58dd357be0c84708d93d445a561fc74d5337f7335964f318f0aa852f18e67fee272b92ae651167f1d0fd44b516d24b9818e822ee9edd1c31136ff20c791fa273f20a1a9e827d68fe94803f392a6d8e88ae7802891b15c24fce85d8dd0bbaa9cb8fb733927625