promo.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:f3:a2:98:8e:39:c0:f0:87:2a:be:3f:4b:6c:11:1a:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=promo.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:f3:a2:98:8e:39:c0:f0:87:2a:be:3f:4b:6c:11:1a:16
Serial Number (int): 335501978066385736437873404739783415110166
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:44:41:f0:88:b4:a1:c1:7d:75:93:17:f3:92:02:06:2e:ed:7c:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:3d:3b:ca:c2:50:b7:ae:57:6f:7b:36:23:8b:d0:d2:98:92:e5:62
Fingerprint (sha256): 0f:58:42:4b:da:c1:04:2d:18:00:ec:34:bb:e6:5d:52:5f:d6:2d:e4:1b:02:dd:b5:e6:de:a4:76:fc:8b:3d:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate promo.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for promo.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

promo.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for promo.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335501978066385736437873404739783415110166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 12:09:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 12:09:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promo.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866615735331022668063384732944556110595823429375656003590362478611122277851926591075110786455303567096559810268662749731302696366825852764840149055133267938841401846743121625445177481594790590230598598513774647421844046386970949474598124144251643367013664609941956840268573006596181291176748573897802747127182375256674782986622295635499819805411134038350309222872270032392917495483811593195083782140143206666149701719781081613637783942203799729181571240883576497861177758330221228205247322396282834582426341320517268325988784258420885286161763687103760903936602857146131046657783747775154652010882391349593587938254287082552508150642826462452726176216933644148152013920537089256067017607183646845570825812343010814612070370437752930861111364677918747374142464001991970084928729605557240181396386803546306316464680795827372479631950251823372144330087029918844718711105961411198555671489241149524811499403398872559301649482450980637592621490430999308880339065974346134367647717798561957490836059409363176859674765641731302317807408309112445067088438854853282151188020379876443444013555022947240456105417633147270519490119325855224985554558171487437389822833831636360582883772583532062843060299907519837576354505430149947691827170187943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							414441f088b4a1c17d759317f39202062eed7c4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169afd221ec0000040300473045022100d0109a29287b3d1ec1a03c6d8a2886573929b20ee48ffab9a53d75d7b1295e3702203381f2aa141434a303ac44b36db2c5c53f29d620c6851d407f34df54f181c98400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169afd222610000040300473045022100d29fa04b014f06c3eff36e6e6ed2d5c03b133aa0dded320aa8daccd9227e6b1b0220322f71b4847b747c9fb8b46ed0d260fcf3a9b25489905d141a3933e54eca143d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004fb6f50900340c88fb2d10be62bff83f2d655930e3c707a4414c747bdb9a51d9c938a0d3ccc5ccab29c4a3dc0ef124917809274cd15c89377338287918dae295153ff087f2a5669386de054dd0147f3baaea091801e108c7c346e4513a9ddad34a2816a92b417b4e1162afc387e42791c5b7d3c74f4d25ca292d574381ae4143dda615c64414dad1b2b775ce999c079a69bf1ba5ac93c4fa1da0115053d111378eb76ffbbb491ed8befa073a58d8923a3d5af9eb8d0291538f456fbf0e6e96e849ad71481b55aeabb864caa220dd21f57b2d3221452409748265db757b792c85c79e163135f28e65e202b59689a803c16a954c4aea62e74680356ea9a6acb190