smart-tasting.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:d1:79:c3:d2:da:73:e2:c4:a7:f9:11:56:66:c8:7a:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smart-tasting.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:d1:79:c3:d2:da:73:e2:c4:a7:f9:11:56:66:c8:7a:86
Serial Number (int): 308914547688105511162424759969486733867654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:46:13:91:38:12:72:59:5f:ed:52:fc:ee:53:74:05:d1:08:4a:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:41:a5:9f:49:5c:c0:c2:91:47:95:96:fe:a1:66:59:a7:b1:09:a3
Fingerprint (sha256): 6f:67:d6:41:15:71:75:57:4c:b4:40:c4:25:22:cd:e7:58:90:b1:e3:1f:2b:ef:47:ae:a0:c3:95:4a:d9:38:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate smart-tasting.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smart-tasting.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smart-tasting.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for smart-tasting.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0oPiOe8SZq/VfTdN73I+
db9R2yW9QtJB/9+VQvLo92lterGZVYv5LGM2uMjhpDzwLrFQpDIe1yxt+koTXAsW
OIUbVdZU34h5dX//Rn6ECvZTVJ8H86w2RNeUXcQN+oUh+Azet80N212saOst/X5c
b+zhThcvm/e8pNtfO9BfHB2Rvf/NOrXGT/mexWaoIg74waWfetFxGgTyN9+PgJY/
D4YmMA3J0DQNSmTBdHIzrTBXaVPUod9KIqZuuV7aWGpvZuRMBdwHBFkHcGSoW0pi
Yz0ElQGNhRFH+nOdwBGVS5wmarTRyf11yJ0OOV0QLU9qg+n1R1mXZ02uxsYKSUPz
myzg1JEZvC4g1fnwCTNYt2draff8EyCYKgw8qiB2L8+Ew8HftiTIKjmUTqUfu9Lt
vRtVIMgJyeSfWkwS3n+WGyHxL7JULmDPklyvtKlkPV+M3O15b6MXweYfHMwc3BRp
kVpycN11cbiYW/m/vTsa53m9KVhezlXmmAu0q6Mpj5Bnu+8pYSB1r6dHa/Orjh9A
JI7AUmmSWExImNgP+V0T6UmuwK5Kj4qd63XgFtryt17q5ClfFmj+BYaiVZBqn7vR
b8pPxFfHOCxzYxq5IrpwT+mZl9wc2pUGyg83YPeOvSt79QyrV5lo/ZV6uzw7La+q
cPu44//Md3f4+jEW8ab8ZSkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308914547688105511162424759969486733867654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 15:45:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 15:45:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smart-tasting.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858826967331484232922483678610655024242437807161959361433819683234301655257238373429235350307930846619223353883524269291971215842589308313797214449425346295686579377554235326647800108196271122383259305194371990400784447745049525858694776055568803242154242050238945509088091776200014466000616827518840542705063291709859814793687334553933821268961455823480712974650877509408256132103954085065971176796862193613829466065268372732193721554928508425767935697050613747096616208829131055452324178581228354618767128219962175135285677077175015780239068015979672708479370581053460654678595726998399616966082642230544539111636600497063843105491638581295215402271286654890662530344757111274427047478895460415854398836392954950007587184967684738773527031431953441200309293536477457966632728467701402049661422357067976002140419809619906788839405962226982169905252255262216988014270285480599983109435636204860402559409756979531567896135700985609464061480006142512443064286734199910154107947275443454758275257210593513946097029994329833419372437775899933131948374191454879032178506831610754845262934787767851035877306471807331913784163519613781016584125830162707095081934467423834319699380041714703279577775521950085110758528898150344096880409732393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f461391381272595fed52fcee537405d1084ac9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-tasting.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170cfa343790000040300473045022100ebd9836e6e0e3690175ba9da846f800f03c58785953d5418aac05c74013a27be022021238d11ed6fe90914e30bcf9323d33ef09c705d7650f22fa74bad374d4f08b3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170cfa34364000004030046304402202ffc01b2f61b195aa4a66651700e0f7557a0ec2074c7f9b3e48dba08d44c15f50220765ceba40078f6c32f4583d80153b069f472889ae5968793b1b10c4750ffb386
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026113abb7f6fbb18a29bb5251b3b12fc794043b5bee435ad2a1d3ce5b2693fc06304e4bc03b656e32463e70b3ec51521360d9e5a79d46538a6c888b20962994887088b3ce7b3796afc463c6a717636396777601a986a252d71fbf3cf8492e374e2c5b7da5519e62830677ddacedb0b238ba9875e83219daff40b92635fe370efd9e33ad761e9bbf61af6b5cc221195fc76a8b2231cf73a55acaebf795da0f331072a5410495dfac3effbfc39c8625bb81f9e50a0e9fdb8a8b6c6c329a8dc0efe19110cc3ba0c323bedc0564e083e2b438c4cbad4872c32291de6bf117718798f2b18ec1b6d89b129269426c576a1db28caa1df53d89e85f3ee09c74eeec7f56b