www.talenkeo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:58:50:84:c2:66:d9:09:77:d0:6a:34:f5:89:eb:7e:c7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.talenkeo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:58:50:84:c2:66:d9:09:77:d0:6a:34:f5:89:eb:7e:c7
Serial Number (int): 322364791614186641345245460489355888656071
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:f0:7f:36:70:3e:0a:6c:68:fa:d3:ef:03:0f:d0:e1:70:6b:cf:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:96:06:dc:cd:1c:1a:4d:c8:6a:28:3c:ae:e8:4e:eb:47:35:47:43
Fingerprint (sha256): c7:3e:c7:c6:5a:12:2b:86:d1:b1:bc:05:38:54:5a:45:29:60:09:81:be:de:dd:32:eb:49:22:1c:75:3c:21:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.talenkeo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.talenkeo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

talenkeo.com
www.talenkeo.com

Other certificates including the domain name talenkeo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.talenkeo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322364791614186641345245460489355888656071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 07:54:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 07:54:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.talenkeo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 553058326820644926719991828023725793529335028673094585080264160156871875874558652160926004991865631390751463813596794824194670933499766480902983016168349666632583059419222127033285115733036915882782351129899490054732807819662244880749149028689494954128878279826317936018752493020523369342408841575369524914876340290660293270850869837973615796954322088259284687832309139714149551669127804948005439158634327602404761727691726654729738742028544940582610389167941396386501359826869409391863485513812156589932531526265729431463338751030992474051551848728418016070565027873531563544597977123573047644915786615736297828038296663319876217670376134185357653690396222427778160299521567756277507512086100778842702111835518643938538204462560957466946140076113009889241638883293407614635402677981823556214521123895854721539391194427657556810416342697984526950801235640367672915243196084892590233197876300325198493760280481615081621106652060580233870303538120825737662705323122171581445654442184419065664241096859067498560084832366890677587702558999597413611602564765261835667111666827906702173794768865234989587432477398039907643531200943276156815421150979173815598843825963974039499460170482778345328961757086534834547992357928013099235010037671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5f07f36703e0a6c68fad3ef030fd0e1706bcffe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talenkeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talenkeo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae54bbf67000004030046304402205bb121abbfa3176e8587e17d3e71dcc2fd58d56e842799c86470793ffabc7eb2022032756b78fe172a00772f4fbf9bfa6a7b0a27ab91a4d6b203db1c3993d870fa140076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae54bbf790000040300473045022100e3cdd3e323c4b2aec4a8c6e6bd5445c0c04397a6d5310260a2df47b1ae6875af022046baef0b1c1effe413dd498f436f20f926024e5ede4777995c2e0face2f40cd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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