regalaesperienza.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:5b:79:8c:11:d9:5d:d8:86:7f:e8:e0:d4:85:5f:22:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=regalaesperienza.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:5b:79:8c:11:d9:5d:d8:86:7f:e8:e0:d4:85:5f:22:d4
Serial Number (int): 263159860486373237289486920178991361893076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:7d:d2:cc:7a:a4:f9:a6:1d:d1:f2:4c:5c:e9:37:4e:48:a0:62:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:b0:f1:d1:78:61:8a:f0:13:14:3e:d5:7d:91:5f:2b:38:07:80:d5
Fingerprint (sha256): 14:66:6e:11:49:61:c0:a4:6e:8b:2f:bc:75:61:af:b7:6e:27:c7:d2:ff:57:b1:d3:70:3f:47:90:c8:b1:5c:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate regalaesperienza.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for regalaesperienza.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

regalaesperienza.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
api-staging.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for regalaesperienza.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263159860486373237289486920178991361893076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 13:33:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 13:33:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'regalaesperienza.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811004898939948433237088690577121619626603544224324274206059164676897895926201929860567182115528143507648190923834107216898910969355474402108295918893298326752275039690728985385197820700108482246260832247774233254093260935727518846166950623326299243101822333853973006662056951741059015706083665048530892315497623203435151989520107669332746519678608573779321720486449650191556588351390235981886331583857742590266974360840033760209794014538642492659438339890139899497353974398244820319212257859346893507994713179921047587975117682568186625214014062748412053910146898196124433072870559262724680160854289416338890938039924390430255916169254454936141424774077394086718823916429020996196899207303513880156117659805542205329221687731285877821154476312000249944070194492576198020463261450770976160921541361961519531105919887367404341241202115376093769368674287227601129191832392420267168216117880923622273143367962933665351208497731910507104838507613500528377643149258992792011168495643751668560683812619324631345252401251693479146143195206205223049256971908986115440561151305813586093733467209087089419872104689215443194684554412280412125488597524180776103985288077838971941707675111752549509570137760177577807315909623893785642491776430593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b7dd2cc7aa4f9a61dd1f24c5ce9374e48a062f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalaesperienza.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017053916ca700000403004730450220015cb98802f2ce7786a03ffb606d0dae22d2d2a7b6b46de497d7accf01e7d3c8022100ee1752eb8e811c3ad5be594a1c14b89043c210165cd21a08df753a5ccd7138b400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017053916cd00000040300483046022100d68210e922184c460fbd7c971121b3a7965e32518d0df115579eac772f20828d022100d55e70b8c05568df4eea3464ae511865adf13ff9a5d817e1ea4950d52ffef0e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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