tcnllc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:66:d4:a1:38:24:7a:94:34:7a:4b:41:f5:b4:34:23:2d:b2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tcnllc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:d4:a1:38:24:7a:94:34:7a:4b:41:f5:b4:34:23:2d:b2
Serial Number (int): 383440578586582424127109158204570142453170
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b2:57:f3:83:5a:7a:57:5a:8e:c4:be:7d:e8:ff:21:55:56:7f:16:3a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:c9:1f:d3:b1:31:91:57:a2:ce:f1:dc:63:05:88:f6:0e:10:1c:76
Fingerprint (sha256): e8:34:b5:94:da:6e:94:ed:98:9b:74:78:50:cd:97:6f:86:3c:33:0b:b7:5b:59:c7:ec:fb:8b:18:7e:d7:b1:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tcnllc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcnllc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcnllc.com
www.tcnllc.com

Other certificates including the domain name tcnllc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tcnllc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383440578586582424127109158204570142453170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 07:43:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 07:43:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tcnllc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790077372794957193165055024204215631304919436414981470614370941525088553135099333322454464148978621100582746410021435072519017240278791114847779275520655495344658080897275547165117149854718603848873427112769289287169310979585592004843074976231327734797861142938129568094885702026563467393964547113918096921702918930343542863885384298884650236065101896357240156790643389594560186744953756452804813105245286584783069288368416697771599474588033424520291640936030133469171993684109221738611639519988696482388497805571364301452505824756121595021669461446690024427535381998267084272187149873706972063344500489370669225899577192410949029284030195596124967816893519508739520723704512036504528049843173685828651747118030260636881448819845757661230914247974074567185699998208877961786726222835384764290117090983441497022667613752584886341219396743174064249417791623749207334822171500473706674741035324357167001940228709573992516362989559043470686063591439745623846360208399615946117604557067727323885855788955937332383656434462840745458857863737890793346614639888781619874162170824253453116136159926705794825594509217783696884690067135524801703523273200630262150434003636658350566678903693035473213135056797165685048781447662366885360813953189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b257f3835a7a575a8ec4be7de8ff2155567f163a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcnllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcnllc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c248bd19200000403004830460221009cabed64d8c6312dc6f4e8cfdbd2d56cda27f41f8f55dda27079fdf27a99cb14022100aae39515ab1ca7c6f1ca8c02ba7a51b51f84c09bb517433b425896f44cda8c660076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c248bd1a00000040300473045022100b22c3d8af20d8f709e7aee2469f45378e6e9d6cc41d73fcaf06061ca3c4b9dd702204903b7821ec42e81c856b3cefe604d8a2e5ea5e7105054c245fe9d4b1fdbbab9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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