enoturismovaltellina.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:b3:4a:4f:cb:ae:d8:b1:76:a8:1c:d2:c5:25:3d:7f:a3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=enoturismovaltellina.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:b3:4a:4f:cb:ae:d8:b1:76:a8:1c:d2:c5:25:3d:7f:a3
Serial Number (int): 345965202451334298433894165753843993640867
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:f5:07:0e:1e:ab:34:ea:9f:14:8c:05:0e:73:f8:fe:89:8f:68:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:41:af:f2:9d:eb:76:21:35:5f:58:58:8d:75:b7:5d:48:40:4b:2a
Fingerprint (sha256): 01:3f:0d:37:16:62:b3:d1:25:c8:f7:d2:48:e4:d9:fb:48:5e:a5:f4:c7:0c:1a:d0:98:e1:13:74:9d:f1:5f:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate enoturismovaltellina.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enoturismovaltellina.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enoturismovaltellina.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for enoturismovaltellina.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345965202451334298433894165753843993640867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 08:00:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 08:00:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enoturismovaltellina.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695023424546798825654598839005512451794592740674130504981539497879153165635862704931931316878788392054244249855850205895558412668632206330793411328974258616483392209612197798242753435036845199194556784587732194235985741600246838850031741820874497039950257175171805275498124651878833780463567138537952906262563439884994347011370324197605464808186963763764955483856823403878396650909714158852653765689548290016721520435125553659040853406572243117656220364885385176037084392352098010704960930460392210886357353869815578837270121370426260059220214895649150673799370728747735070773364645924993347089924850352092841978913686234979361510408306533393407470765041275789183258168405102203297725032595428810182662193155487285163055085062307481192044944179811801534254262992665104939691993754954408193094440631950481600556561955374778444020433343052582685785724587351718753089969106272216241870409107506412269239462108614219941718901482213177318309507738460440808472651738046572722501483689297765226975243721051696801803829433611298075382185778670784467606710592958835681248956582119635004257457894544114515762247352593025854917309818271575567023348541687592720887728797817928630589726424274318511068853461896702506108638405858771340142795746089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bf5070e1eab34ea9f148c050e73f8fe898f68f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enoturismovaltellina.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170dd6c828e00000403004630440220642e0654addbf5072b9db37c2f3ee55b73d4e75df460f897e2d6831bbc6a619302203fa8c1d3015b796549cf2fb777c3c89a5fd22b9ae052460abe31a9fc93e53e0b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170dd6c828c00000403004630440220670dbe1641a670748de30307c3a39abc3810e2674aed9c90c407c92f022f9c2c02204d0dc343eca1125db705bd7b90e6ecb5efcdf3a440b475b1b87bd75cc1a919a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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