tenka.com
Issued by R3
About this certificate
This digital certificate with serial number 03:c0:0a:18:ee:ec:28:83:89:bf:5c:3d:8d:74:36:56:c2:5a was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tenka.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c0:0a:18:ee:ec:28:83:89:bf:5c:3d:8d:74:36:56:c2:5aSerial Number (int): 326684493985107249362065096723080498561626
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 98:b8:eb:72:b9:5d:21:67:bf:fb:dc:5a:06:4c:d5:88:c7:d1:4d:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 19:1e:73:bc:44:fa:d8:ed:35:4c:7c:dd:cd:7b:c2:ed:2a:86:ef:2c
Fingerprint (sha256): de:16:58:df:7a:a1:d6:ae:6f:bb:c8:1c:35:47:e0:d4:14:83:8b:21:26:44:c6:d6:4c:30:6a:48:e8:3b:28:8d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate tenka.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tenka.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chevyndesigns.com
tenka.com
titleinsuranceattorneys.com
www.lorainfleaforall.com
tenka.com
titleinsuranceattorneys.com
www.lorainfleaforall.com
Other certificates including the domain name tenka.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for tenka.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISA8AKGO7sKIOJv1w9jXQ2VsJaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjAxOTE5MzhaFw0yNDA1MjAxOTE5MzdaMBQxEjAQBgNVBAMT CXRlbmthLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALR1g/CJ OkIpER8s/Lc0uTlbFqy94f7rcHHCdgZgeqTBuIFBY0qtCpIf1TEvO7FXRSdroD1d NMjQDyePi6Ntgs3nKImhp6nw59N5vdtZgETcdHUykszQ6igL44psf3nEAjxcS+Z1 uzvI+1KwNXJpv6IhteJTPsOxfi6vfo3f33eXbYKu/IW4IKq6UyXMifFpoq/OAZMz BFY83JatwVWGBssVnjSN6QUxmjTfheZsgIeRdqmweUXfZfGa8twqeTQlkw3KzJXK GgSfjEb+pZZK8qq1VngG5uy18pPLpSFgGhzBB7AzGCXzBjFm5Zj4ZLJcx1YGYIy5 dlg4tK2uGawB/XECAwEAAaOCAlMwggJPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU mLjrcrldIWe/+9xaBkzViMfRTVAwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wXgYD VR0RBFcwVYIRY2hldnluZGVzaWducy5jb22CCXRlbmthLmNvbYIbdGl0bGVpbnN1 cmFuY2VhdHRvcm5leXMuY29tghh3d3cubG9yYWluZmxlYWZvcmFsbC5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQCi4r/W Ht4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY3ILIp6AAAEAwBGMEQCIAxT LIHX29rnqLAfsqokCf03dHPd4Q+bkecj8oML5nTkAiBwTmUsedDgtLhbWpCOyB/2 sguCWZdpaPwY4ngCOt9cVgB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h +tQXAAABjcgsirwAAAQDAEYwRAIgFPmDxGKQu40rfgnHV6hE3M5iVj+xBZxFxh9f 4Xftn9MCIBIp1UAIHQhY7ud0R69F2Pi5qwztiUON/b3xbRum8CjhMA0GCSqGSIb3 DQEBCwUAA4IBAQAvesKnfIhsyrKv3E5lpupRCX0UAdi3cU0TLp285582aeMUL9ln pGPnHZrE5obEk+j8a9nYpkm8jGE3it1/NTa1YpdNnM6bT2Z3qT69waln+GyV++HQ atkzE2Up/GJbyB1pbESR0G8NBMZPthOyviio5UiFfIhnFyHDh1TPyFJQgspCpuLI JubnAGaXoMCULVFmoEkAGA3c7fJnJ8T9S5OWUh2X/oczshaREiEoWQZBeIdKylsO 3NcI59niLpjMbJNZiBs7FrVSW1LK44MsGwcmpX5C2PsJTzfnoWHfq19+9WI5jQDw nWsXXLZPBeFIKauiRnaZyNkEkbefTSy5gIUY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHWD8Ik6QikRHyz8tzS5 OVsWrL3h/utwccJ2BmB6pMG4gUFjSq0Kkh/VMS87sVdFJ2ugPV00yNAPJ4+Lo22C zecoiaGnqfDn03m921mARNx0dTKSzNDqKAvjimx/ecQCPFxL5nW7O8j7UrA1cmm/ oiG14lM+w7F+Lq9+jd/fd5dtgq78hbggqrpTJcyJ8Wmir84BkzMEVjzclq3BVYYG yxWeNI3pBTGaNN+F5myAh5F2qbB5Rd9l8Zry3Cp5NCWTDcrMlcoaBJ+MRv6llkry qrVWeAbm7LXyk8ulIWAaHMEHsDMYJfMGMWblmPhkslzHVgZgjLl2WDi0ra4ZrAH9 cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326684493985107249362065096723080498561626 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 19:19:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 19:19:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tenka.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22780843892014309771708023498174425232984450928387635882621338657968173217557595136036552459510796232610090902168832854074241511642013265185295077651011574767428396878505837844748454479971922865813626229480807113985086143044741863720701551731631234221668700891767004097285632709675652341780797208803271605874688942267707961208272537903754193434178211416238880038411465853127404982201924776833883262603209763823706376926493857105113979819091694787065511617834039117131548183482899342063579614190529333595664559325646607826050817583698326142196331591182360900239911309440833905584880988006514203547604965926059120917873 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98b8eb72b95d2167bffbdc5a064cd588c7d14d50 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevyndesigns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenka.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titleinsuranceattorneys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorainfleaforall.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc82c8a7a000004030046304402200c532c81d7dbdae7a8b01fb2aa2409fd377473dde10f9b91e723f2830be674e40220704e652c79d0e0b4b85b5a908ec81ff6b20b8259976968fc18e278023adf5c560075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dc82c8abc0000040300463044022014f983c46290bb8d2b7e09c757a844dcce62563fb1059c45c61f5fe177ed9fd302201229d540081d0858eee77447af45d8f8b9ab0ced89438dfdbdf16d1ba6f028e1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002f7ac2a77c886ccab2afdc4e65a6ea51097d1401d8b7714d132e9dbce79f3669e3142fd967a463e71d9ac4e686c493e8fc6bd9d8a649bc8c61378add7f3536b562974d9cce9b4f6677a93ebdc1a967f86c95fbe1d06ad933136529fc625bc81d696c4491d06f0d04c64fb613b2be28a8e548857c88671721c38754cfc8525082ca42a6e2c826e6e7006697a0c0942d5166a04900180ddcedf26727c4fd4b9396521d97fe8733b2169112212859064178874aca5b0edcd708e7d9e22e98cc6c9359881b3b16b5525b52cae3832c1b0726a57e42d8fb094f37e7a161dfab5f7ef562398d00f09d6b175cb64f05e14829aba2467699c8d90491b79f4d2cb9808518