talentodonna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:bd:37:1d:3f:2b:df:3a:c7:80:aa:6b:cd:3c:d7:3a:fd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=talentodonna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:bd:37:1d:3f:2b:df:3a:c7:80:aa:6b:cd:3c:d7:3a:fd
Serial Number (int): 287109545575076523682877799658216127675133
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:5f:95:32:d1:c6:32:3b:ae:96:f2:c6:5f:d7:b1:08:5d:4c:05:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:36:9e:57:0c:f1:b7:2e:0c:d1:fa:3d:94:c0:81:9d:8a:ac:3d:72
Fingerprint (sha256): fc:cf:80:ac:8d:c7:bd:fb:c0:76:ff:46:c5:1b:cf:ff:c4:b5:2e:0b:f6:e8:a1:2b:e6:ff:5f:5c:0d:24:46:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate talentodonna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for talentodonna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

talentodonna.org

Other certificates including the domain name talentodonna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for talentodonna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287109545575076523682877799658216127675133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 10:23:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 10:23:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'talentodonna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877714739543596107839023229514423445057294994775148482147153868316581884737194378856352718457049999851244907515166383258740983818979013242074445895432747614518646679976484948818452772510916821252017056945494226890193942547935874673674294986376617985410635452409095524156574576171505741416897322703727166123407324049088337255587793959718738525241729698873547897907907425856717091104960284610693647133730847374838000095528565383859559698755135897572622935813063505394948355638115054184826810842579607022014583095911110260362861691847828963006748936099409355736502571084312547580336507960933745021965787726921139490309374732039779923037711789715619312186181330563537180434113345095445735243106582991075040951714959565867874120434488875324728555746882396970750770514372493695435596213601596909503223545386914827246983234083818885230014655952385498179531184099866756174309345526158750716407256082999742036502725911052993462048592389438516562014599725227704116598212388696058294893642807882546390055053170729046962930436404289407065895724813244411553665900577073117944550183308317611767426943405797085408188177232049026212196443680663172468646727554398329048835556809100506792445656483208901223276879618549750346705021187704794766302163781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b95f9532d1c6323bae96f2c65fd7b1085d4c057c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentodonna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700aca66b90000040300483046022100e31b9d76f32f7e3e91fa1aee62644663cbdfc47344b78fdf7b46c2f278c3cd7a022100ca887e2d3b969b5aa12911cf3d878a387c5afb7da02fb104b801705ebb05c26f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700aca66b80000040300483046022100fb58fa12d3049fc8dd061cf1858d92283eac1b68e3185d00e3dad716d679f24f022100ce64ef2915dc29f7216f00e839f7094da79f21f137816bb3d826f8630a8c0449
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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