duimtech.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:3f:08:28:26:00:1b:74:22:df:9f:44:10:22:98:0b:00 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=duimtech.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:3f:08:28:26:00:1b:74:22:df:9f:44:10:22:98:0b:00
Serial Number (int): 428159001302956992526583030603577959123712
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:43:82:31:dc:75:55:d2:56:2f:7b:74:cf:5b:02:56:2f:e3:e0:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:64:71:cf:28:af:50:cd:db:fe:3c:3d:25:a6:53:f9:c0:cd:b8:63
Fingerprint (sha256): ec:19:d7:50:9d:da:67:95:4c:5c:29:30:e4:21:6a:8b:02:34:84:d0:a8:ad:fb:bd:77:2b:18:39:ba:05:57:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate duimtech.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duimtech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.duimtech.com
duimtech.com

Other certificates including the domain name duimtech.com

(limited to 100 certificates)
meet.doqsoft.com
hrm.gcst.ae
people.nexeinnovations.com
support.access-innovation.com
careers.concanon.com
hrms.blucarbone.com
duimtech.com
support.duimtech.com
support.duimtech.com
people.nexeinnovations.com
support.duimtech.com
careers.concanon.com
support.duimtech.com
support.gizmabrand.com
support.charlesgroleau.com
duimtech.com
duimtech.com

Certificate

The complete raw certificate details for duimtech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DWeAPvDWOwyjhE6vllb
o2uQYWW+z9Qw0OyYzWaoh369HLLraDWHcBnj5+dsEyXVU9WPJeIf9e6DoL7Bj3Ob
lwW93Ofw40/zrJEBu8ZsK55KyiUfmW9Qy3jmulZcqAfDxzI3QankxUSE91gSeMVT
TqWLsIc8Z9lO1cfv8RtyjYCEei5qwdSP7kWANWYmC0hlXW3vGL2zxs9fA5f+hTAO
DjQtlXzs0X4Cjy/LsVbSDEuZ8zWtadwuRi4A19ohJpz51zJfocqdGhwb4JXXddsl
d35J4fYnybWyuklYmzIBWjpr/30sYdhvPKKRPP3z4NbjpyJPBJfEwJrTZu+imo0M
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428159001302956992526583030603577959123712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 13:07:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 13:07:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duimtech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29313726380099861087604259296202286504797233296825102827427137899950920326839779312586056352344089322059259055055756651606440923836962995601205663984183720519174916011911111730419792136646187091378381658956368601945133688954789042911333851882887635373992371011160605319895511835927044121161856270829169859153711655173425675420419552097863055997690347128260652422677469417540676713044930801694914282413450119125704934342582938376540913757764667539533209422859872233758444152703467916421090011216112666762629919019026352990765183030564580331350153492071235352168966346146566167332108793141529691629862912774441567849543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57438231dc7555d2562f7b74cf5b02562fe3e0e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duimtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duimtech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e7b162ca7000004030047304502207266f7a478a056b4aaca5c25b6c8ed390e3523c030c4c3d9b411c8459712125a022100809b81f5eca118c082c8cb809cc91e362c5d5dd4fdfdc277b63840ceaa7d012c007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7b162cb70000040300483046022100b1774467decba12fa4c46b19a57452c4b3b108bf77398d14b18a2f43599f7754022100906ba264a5387f18929cc6998defd8ee26936debb213343eab1d4949789f7771
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a2ee9f17187062f2760a9ccd4d4f1d2594d884c941fc296cc5ecb8e7477e8dacbd3d0e72457f89c8fbe18e5614fe7fb514c565eedad6b10a5ee9b20dee7f38b6898f20331104ced164145109b092a70f8dd17cb523728a080920f9510a07d9ea87bd2b57f4a26e0acb9eaabcbeb75f18e28e638b46793011eba6d0f4a526283e8dc18b1d79b2d37313f6d3ff0786720fe9e8d34a628f1edf94a380f902efe39e296c5b483f0163ff1f80b3d670cc3edc8b0ad08220f14437a95a0153c9e973dd92a790a3047e61ac89e5f72c67819cc852f88bdce6c58d2544869e882b3980ab02a08748a82fc0d3b65bf956744261634da65f2c67bb35449b63e53d58297e3e