divinea.com

Issued by R3

About this certificate

This digital certificate with serial number 04:79:d9:18:a7:8c:1a:c6:97:30:58:51:c6:ec:72:b8:24:38 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:d9:18:a7:8c:1a:c6:97:30:58:51:c6:ec:72:b8:24:38
Serial Number (int): 389911880612947105499209889819339668333624
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:ce:8f:82:ff:dd:69:8f:72:07:d9:42:e4:fe:d1:f7:0a:c7:d4:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:9d:c7:39:f6:65:3e:db:d3:c6:73:af:5e:e6:2a:35:47:13:3c:66
Fingerprint (sha256): 18:3a:e7:e6:54:10:df:56:63:6c:86:95:55:62:4e:7a:aa:9c:f3:f0:90:73:eb:57:2e:e3:41:39:e5:b2:58:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate divinea.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

divinea.com
www.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq6O9/9qnc82ZavdR2Mhz
L8j8u2IWGZIEs1iQ+s5BGT87DkUta1cAXD3siFHY2jwlJefezN9/u2iYnE0/xsJB
4EqEXc9FUdz+UNeDrbjh43GqVeVezKHRpz5CNjzGwKqyjJVUofOq8zycHuR4mpoc
GX7Y3g3h53VvqjWj603QuXmpu1IsUH3YCGNPJxtFipO2015j4WgcFXsffpuYM2fj
1vLBPj/WegAf6Tarjqw0+CjyxGJNfyBMfcGDghcXRbdy068/MMfBgOhme5FTb/Nc
B2ToE9NdiQkk4L2gD6MahRYtcj3zm7tiZruEwO0/o4eiukZm3O574ODUpchR8u3D
GKBEgKzJaW7bVV4sJbFGrxHmNB7jMeYZYjXEoNQIWUV5RJ6LhgBQBO9pfRo+PR5G
ry3vesjO6tbQ2M7SQh3aE3Hlrg6g++xOwmQaw68MR8MDSwXFlema3gfY+0Vx5pgE
Hpa8Yop6lz2rUd2b7jk90pwoRoZqVcwJCVlNbwImzSoCQ8iqtFyhKuVeC4P8+CVK
iEj/QVLd/c9DXQshhaXBvZgD0Z7SSFRM2ElM7hznQXATopbBx6XxloVXgvzmhIIs
Nok/1h6+z5/TPgCw/rB3r2Mo4sRLbJ1c7IUEO8+W7pSvFkTghq5NuKaLrDk0y4iV
mnl0rI4GVLuDdUn2R4RBl+kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389911880612947105499209889819339668333624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 20:45:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 20:45:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700228549048776767214283455667475015786546224721509238872300869524733102702339412060304300298083688862375572545003705149728395649891224609854096727297892246748859353399037755555109382403719343027702521221321664402517934799373032272750177412926383055288318772931680554826355621361781918969526373503630301067310624302621560593946312415803623835292875902306006900689636637763405279325731924498102230399073473671744993187433822155520196917039892779228670193905348712292477364196384908336579153441917352942813339031026553383632154758765923958639273582452353142656495141868675213811272533199411104453939391227855623462241881504237340021135169564110723711282427512319652774397282318096210503760255701638540639519281843240598815350248876851406570049899403235674599399911143440541759594476125574184121497331486155904695739138081106836380172186629713177610488187965223087178406686025247369104783868968746209737297215643396180405045091771881838721724866364482834246625081785403674633898936805805653196257602007495185923454447122530933059623367693132831984470115064112479434141701569021934742287987963434781360334441925658388164270755299241427195444608708390527463332982135300352441263362181657555606987831757729984369229078671222452155354028009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00ce8f82ffdd698f7207d942e4fed1f70ac7d455
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187062258be0000040300483046022100aca3ee0928c9bbe6fe1808d85aa25f26f85735fcf88f72eedba30c25e2c7497c022100abd0b31bbd74bbded47434ad614751c84ddd02ad6ff41783376028068d7805340076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187062258c70000040300473045022100d3e0e724292b8c9763e729dbffc9a8579ff7805b0c374bbd2522bc00c32cf2b002202077266a850adcfd374b7c9bfbea9d6cf6da640464314e2d2601439dabc5dc22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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