enoturismovaltellina.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:44:45:85:54:98:7d:51:00:39:47:51:82:02:0d:51:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=enoturismovaltellina.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:44:45:85:54:98:7d:51:00:39:47:51:82:02:0d:51:cc
Serial Number (int): 340373115397397912802444914407692701618636
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:40:08:c5:61:dc:db:31:24:4a:0f:cf:2a:29:d4:d5:e2:77:83:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:53:64:f7:6a:e8:d6:2f:7b:aa:8f:7e:4a:df:77:30:05:80:d1:04
Fingerprint (sha256): 14:e7:19:bd:37:72:29:da:c6:6f:26:3b:25:02:b1:db:64:53:5c:cc:2b:38:0e:7f:6a:c1:07:81:c1:ca:9e:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate enoturismovaltellina.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enoturismovaltellina.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enoturismovaltellina.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
api-staging.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for enoturismovaltellina.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgISA+hERYVUmH1RADlHUYICDVHMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTAwODU3NTVaFw0y
MDA0MDkwODU3NTVaMCsxKTAnBgNVBAMTIGVub3R1cmlzbW92YWx0ZWxsaW5hLmRp
dmluZWEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Cp1UqKW
hMJt8gZVg/9JzGNO5PfvdJlRdgVxkihrAfwzmrFTj4fnWhGo3m5cMQ+00MFNu20k
e8Dr8xkYwetV7gxRFSCGkLxsfsxSOYQKHABlWfNrlceEtKhRJWVjdbs7Sue5lz8H
5OlhmhNJpzTG79z6bM/jZAvMXn37wz79JgZeRN4xoyNXJ5KNOB3bUtk1xaNMkV/X
bUaRJGHK/Z5cicl35ac2moEQV6nD0tj+pLiY+gEWHDHpfRyrpCYvrl3tbW/X+GRi
Z4H+V/1J0+o3FIkZpu2BMTqkvq4bscXh/bPkMdntLQN1s2bqgYg+ukIt6Zs1D9SB
Z7VYBM8hHFutnnd6LFU5m/6/D7EMlYeJVFD7cSCgtmoAnFFmyovF+MCA88zuhs1B
6EzjM/1DCt2TdoImmEpG9lZALAeOX7gS2zFQHFHbHHbtTxYmuRwY3bDY3Co3gyyr
nA1AiuJW+Lq8+lPI5bSyTCpUzA3UVip36UOfCpz+akWSJSigTq/imuAluoCwmOUu
Ke+ui77VGgqU34bUWgs/pdVhrDbMF29izi9zzE2A0rrU1uKut0Ene79IoN8F7O5y
yvlXOWGDgtCDD6Jca65WZrC72jT60Gr0VGqhT8BgnC7pOKNJN+iIqw3gCdiFDVdj
CrJ0qFJEdVmqtX+gWpJq+wR0rms3T6rLNqsCAwEAAaOCAnQwggJwMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUy0AIxWHc2zEkSg/PKinU1eJ3g+MwHwYDVR0jBBgwFoAU
qEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzAB
hiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAC
hiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzArBgNVHREEJDAi
giBlbm90dXJpc21vdmFsdGVsbGluYS5kaXZpbmVhLmNvbTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1APCVpFny
ANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABb47jj0oAAAQDAEYwRAIgF8jM
BiZCyydYpU5Yxp7abwGfw6e9X/KFcOmzKhKF4OYCIF4EtoAGLgVjNdWWPUzV9J+y
RrluB2UBe1eMYjgSI2zYAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L
kF4AAAFvjuOPRAAABAMARzBFAiEA+fE0M6l93+ZxWtHuRuhuz407yDlC3FRtXiNS
3F5ryLACIAohk5vBD9ttqiWqmwWzAmm5VGzWCFQQm8bSdnIcp5eSMA0GCSqGSIb3
DQEBCwUAA4IBAQCFqqq/5L0WF0nLpKa73FhPdKGOAUmturopFEg4b7FA9XqarNBg
63CPZtQXJSo5WDrb6Yu6nUI/Khi17TXnQEKC4djVaan5YD5IYqv02EIWaMYwJp4j
/bXIK+YRuXCdH7Yq+w0ZhVLvbXy+1YaC0P7Yz9IALED7NiXBxUpE/5mho6K7POWY
z9GU3Apk/0Pu+bt9yJt1Scpn37MkI1R4uHZHQVYVpmKPImTDH0mdbRISeO1ODjZJ
7XVlJSKRAKqKj2vjdwHI+70HaTCzadwwGIzNR02zGdqsGCj3N6uOc5FIYVMkn/YC
2WRfkJvXjbKviQdoU5/HD5jqFQ+Imi3VFNEN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340373115397397912802444914407692701618636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 08:57:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 08:57:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enoturismovaltellina.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865561162419312812608125320467925972105912109827052643675291260554582689217500771161628936497931924297485159786621907696120807173199110817912496998047745446330857784235619226562044721542184738602705241018816887090291539313013388458721636197617904050383089445158161105376069282807982317733192265354410753577396476953050738998524672847753641836140842457725720288565849106297582572110165966133332492070111209277793256699229676284857741560714718064018669326728310552282272864476284283159332387911105202383917911947729609242836202846462364535618009803134048681770701379958729600021819111093704668309754594045903265487949036823213804112554076996912763634165607276890488990656311190972219463153150525122285464832892780028600441190025599177247944827743067992978478383938374257221950472013246290626085512363342481196508732358141905441856764698853125404657818539872523991654792389247498647450253953309100781911065818006551260216530155054916629220197699853528146643084140698785234711247503781321863758138752880508919934629011007438792435319384383826842838826370246811170833636078747852324651717994532213606601604520211136808380215756138314714912857649456639472359422540873920182507217231026491898749198557041043085530325256149903538616554698411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb4008c561dcdb31244a0fcf2a29d4d5e27783e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enoturismovaltellina.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f8ee38f4a0000040300463044022017c8cc062642cb2758a54e58c69eda6f019fc3a7bd5ff28570e9b32a1285e0e602205e04b680062e056335d5963d4cd5f49fb246b96e0765017b578c623812236cd8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f8ee38f440000040300473045022100f9f13433a97ddfe6715ad1ee46e86ecf8d3bc83942dc546d5e2352dc5e6bc8b002200a21939bc10fdb6daa25aa9b05b30269b9546cd60854109bc6d276721ca79792
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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