gettingdivorce.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ef:b5:de:52:78:9a:a8:f9:a0:28:e5:8d:0e:da:9b:63:a8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gettingdivorce.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:b5:de:52:78:9a:a8:f9:a0:28:e5:8d:0e:da:9b:63:a8
Serial Number (int): 342906088119237529183369910408032571581352
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:9e:c3:f9:ba:97:9f:16:f0:03:70:e0:07:94:34:78:29:67:cc:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:86:a9:fb:4c:88:31:30:06:3e:00:aa:fe:ea:d7:49:66:e8:6d:05
Fingerprint (sha256): 1a:bd:b8:0b:3f:87:8d:f2:04:ea:81:9e:22:54:df:9c:2c:0f:43:d8:c8:9c:79:5c:13:b2:50:fc:07:9d:02:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gettingdivorce.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gettingdivorce.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gettingdivorce.com

Other certificates including the domain name gettingdivorce.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gettingdivorce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342906088119237529183369910408032571581352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 18:27:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 18:27:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gettingdivorce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733042560986611199674321010101965687581851867263486033604526549989841492641269806066095444729880628202460261144258399660159454305056558979701562047132435662334045067634145718609494189661962421759101755227913264355307594274433031648680417688425580104622481666476580949298548819057730136874936809341170433664707002840362746808602459022919287535687198811310879310150576852975206093156245836105257373913233094445192599508879358452307739916071779521292676244843867706736851033205102977789186300584436100906903242994499122868903917005443026433847670928014804278077847995633048948660340500547443927390164841258553953504562827616160401047500746326411082749150355510368834130553162067131146548846923694705408303015009756274939297625266749605290412077245368897094187686870971396733992074952355330809598265969765627194960252592452830748626863480917691749382813066261126622134665938003583399227996116039403804611374978269848558765043961981681691961823999553308192950118504328842053971496133839827772541196358989236029688436740109847275681950691351412621559444569758666002885477095933293406268553000097650887303782965591107516841410275177841501528348266556076465084026850348642219326805686996860611428640280764847259720528337976198819883389122009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e9ec3f9ba979f16f00370e0079434782967cc82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettingdivorce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e48bb8c4300000403004630440220781020d32bad070e07c6169398141881857cc0a3e57b5d8c072696238cf059840220797b2c329ee1a05f75ee2c2e7bf8864b2f53c25c78d0a8412a558f1e2a7d49ca007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e48bb8c48000004030047304502210095f5519e15a9030fddfed8d12126850124520db9a39173fc41791d9fa76502410220152917fa8eb0aea7a3bf5fcc0a7859044476c926b2550fde311319ea80fb3b34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a348d447b7743f054e9708adf644ab9b59bb1296674cb83f18dfbccd0953f01b584a1d565ee4c8eb1f745e2792b48ae7cc9ee98d48613b05fa3f5fa8f0e6df7902e922c04f1e6ebc4c19c4c3aef14a006c411b7ff259fb579e4064f74380461a6754de42c70dff5a53df72af7554b5625c333ff44df3584a577ab77b7332dc35ed4c40900231760331d3c2161b57a78467f6f7bc95b6226476144c6af8687f9c1da15ee5ca172afcb0775393e152fe5483d55f2d14df018e9ce910301cdc4fbb0a2e5de2f31f0fc6aee615dc49dd2301b641d038fd7a53a7abd323b9a1c809362b005cd79c1cf73262c2aea01c90c823618e8edf08406c71f2aa45bbc37623a4