talentodonna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:39:c7:68:cb:b2:ef:36:6d:ca:bf:51:0d:3a:3d:08:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=talentodonna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:39:c7:68:cb:b2:ef:36:6d:ca:bf:51:0d:3a:3d:08:b4
Serial Number (int): 291018225105746268188860450529805286049972
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:a7:09:9c:25:70:df:e4:9c:60:ba:0b:ec:23:dc:8e:e1:09:63:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:44:df:cc:e9:e4:30:b1:39:a6:16:41:29:ac:8e:1d:2e:59:2e:b4
Fingerprint (sha256): de:80:d6:08:e6:68:60:47:d9:b8:f4:96:98:9f:ee:f1:1c:79:b5:33:1e:5a:6b:99:7a:54:45:7f:0d:c7:92:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate talentodonna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for talentodonna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

talentodonna.org

Other certificates including the domain name talentodonna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for talentodonna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291018225105746268188860450529805286049972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 22:36:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 22:36:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'talentodonna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664325794593290396683088905498731293806263038873437270561799739432411189064640451682309364024944253930110687824010591629468775773653651644727697378440745476193959891151888111432029026397916633852224935170232280193566070352729464852224745489213267840678074370284450153038647009316188243519352257689667742790422360339031962278944671351009359461595237666016473965811338027201508714226148374268375209145168304742870101229798794573402136849814295451968065969307347835948606000533928870512237232363404858191503232066413006174963201359732206298127918821376172742495800555839886984451726428176029111265030731771139184449914482191412735750812071158882303243496245186458523456318134827510750774423202598669979790523835225878380831176982882517308551358910264323371081608574948650686585203533764610721670601814152482850241249203266226852925262299039969035368233666575098309319078099373329013717330670568385052807723923500829981808098677089720335972776360124962392541342777294891264410961081921097840476395243064336145972712642810377791459415387967764202292293679102403000440208403320936056058263458117314159899700278981858555761201596775197960641056317596174528599051912798282281840328142687648731166542733170030176703621928375755391268838678631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30a7099c2570dfe49c60ba0bec23dc8ee109635f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentodonna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c26583992000004030046304402203ee5ac80fde174d9c04a4a835fea42780aa377f76b1731f03a02e862e4f264ae022050e6b96d1d8df32022edb92a7257ac3d422ec7251f55f734a0391d8fe49c05f600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c265838d90000040300473045022100f26829df609dd53c0f3f56cd33e1b7e5dfe5c44de5e406a50e87909febe0d6d7022077a266f86efda0cc2588c60fbe63e6e2123da74daf670ac84cf0bdc652ac6e05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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