gettingdivorce.com

Issued by R3

About this certificate

This digital certificate with serial number 03:31:8b:79:9c:a6:b6:6b:32:0b:02:74:66:88:2b:4b:31:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gettingdivorce.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:8b:79:9c:a6:b6:6b:32:0b:02:74:66:88:2b:4b:31:e0
Serial Number (int): 278196087911004939680253800594632000352736
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:91:84:12:74:b5:0b:02:2d:a4:e0:19:f2:cb:84:8b:4d:0a:47:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:b0:4a:31:36:47:6e:72:7a:d9:0b:52:b3:e5:25:af:39:28:a2:cc
Fingerprint (sha256): 92:12:12:36:5e:dd:c3:4c:94:b7:cb:c8:b2:d5:f5:ab:08:f8:a3:21:03:b3:20:fa:b7:a6:7a:d4:83:45:e7:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gettingdivorce.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gettingdivorce.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gettingdivorce.com

Other certificates including the domain name gettingdivorce.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gettingdivorce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAzGLeZymtmsyCwJ0ZogrSzHgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTgwNzEyMTJaFw0yNDAyMTYwNzEyMTFaMB0xGzAZBgNVBAMT
EmdldHRpbmdkaXZvcmNlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAN1Ax2W/+QaiJ9hlkqqcaR5LevsmXNxSnvjYRgHEziCzTeysm6nLMD80Bi18
PCt4Xbh1//18geKpka7EtR1E2SaQm4HvWcdpYdrsUBoqSP3YRUq5sirfany9lgsC
LMNp4gMkxpN1rdKxZdHLwfCBQP7sjS2CkNUBWNduaC2wJPeGvC4/bokbMh6ulHuy
5QkURAqnTRRbb3SfmBEgFgCPABa2PlNxRhMo9J3R3Z/fujGkL2UwcBywgtGieBx0
jaU2Z4U/I2+qhufwHF22aY1iRvvyFxs6mNHWYtEZKwXO090ifXsQAUisb2urtYTf
fxTZ0QH+EKupdvPoRzvmvF0s60PC6oOWAxqj2SShh8X8cGzpkaBDTNTQMkJsgThP
uNOmIj+JIjlOnxZTno7Ird/QkW0oo7IuTuNxEyYzr6IPr8lFMVTd+hpbAEKyUgga
JIQu15g09PQ0aRqFVYCTVFOSz2M4dsZR0aDBzrOWZTslUjKtZzEfwf4xdcp7omdi
Sc/xLmS/kxSsJ9fya8D8xaIyXpkiwgxvwkV8Lnw3TkVk5UmyIRFork2taTdF4To+
gTLgFS1UB4go0boa9z9SseRORFOl0IJqnj0FYhiK1EqXiiD723ay9gXBmELqFT8M
RNMvnAbAFSbEUM5mjg6M9KducxIFbn9533Hl69WC2P3BTS1tAgMBAAGjggIVMIIC
ETAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMeRhBJ0tQsCLaTgGfLLhItNCkcNMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEmdldHRpbmdkaXZvcmNl
LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi+F8xFAAAAQD
AEgwRgIhALIlLec+k3WTfowCU7vs6lG4xPC4eVG5+eOThIJnJkhEAiEAo4/g22rz
Fe07Cce12GfDRn8WrnSrfsD9Li/PqJytAUkAdgDuzdBk1dsazsVct520zROiModG
fLzs3sNRSFlGcR+1mwAAAYvhfMRlAAAEAwBHMEUCIGZTn/4dOef82WtZM9arXdE0
mZenEakdfaEY4FT30CrBAiEAl0KdTgVYfUVvT3VZXG6H5UN/G6nuWilRofE4NxlB
A/cwDQYJKoZIhvcNAQELBQADggEBAK+Gh+75cKcsHuvvD94mUkLJgwjLZhiSi6mR
OgYsspb1T/4C6esajFWY7YZi5uRca8ukAGdj7E8qVZS9na4PZW2j3zCVcpbkye1d
zSQI1ZqIQDDNviEOkwh8nicRtWR2CGb4ZNj5OxYOudcO+4zdVkKmgsNn4vCpE8IC
kZP0dZfdZpgeLX0NR9rmGzmKPWYf9rowY/Dvz8cnO8LyHgXk+AwhLuH56UoXAkC6
c8RsLX2KIx2WZRDyrGbdgGdnKiOT6ntPLM/OBGPyTkQP5KtyOShm5zwTqI0GQWIQ
ginAtucqlpaoXub+YX8f6Tbe2aEjENhNcgIlI346EAiFhPeE1SM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278196087911004939680253800594632000352736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 07:12:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 07:12:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gettingdivorce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 902633662626769318643133635026857673298653306588023935188238038249940591514187976311352807727009531993603943303325138431659841685954366466612228200337849575051619881527404684292789035034094105468172608879665038560737206180244992458669819111035588180681721110934960600614083888131332787557311233277459324681540736796953847147579907220773858517906964796984344903746255334917417384182913102668690389254505372387586530446051552984154187614332380901061775685772616929314749552249289667505141479760033261693608400859913571924027076628182706437888343878584984716328960369245470488401058874880724251982594585840361521105701415118887475656203274638951291130812893220442908031136897350363200145973827821002438537461381478203833998470972917101249269406288221320104464087401881905734073278867405307017953910998380493384172721196743055018392914785983971299841358029620517048902850651586824540314895508092334516008565630914527939168276239365794308637678587395043672773965951073278691573407084079713587519076598172540098691132136096564804577503373471504448730067503053623650409982934078045035012147580034414388324930209512118376720392549001288066071431446584793267100812942645310398448596120300177425721738037446254521351595969317011732580480658797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c791841274b50b022da4e019f2cb848b4d0a470d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettingdivorce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be17cc4500000040300483046022100b2252de73e9375937e8c0253bbecea51b8c4f0b87951b9f9e393848267264844022100a38fe0db6af315ed3b09c7b5d867c3467f16ae74ab7ec0fd2e2fcfa89cad0149007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018be17cc4650000040300473045022066539ffe1d39e7fcd96b5933d6ab5dd1349997a711a91d7da118e054f7d02ac102210097429d4e05587d456f4f75595c6e87e5437f1ba9ee5a2951a1f13837194103f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00af8687eef970a72c1eebef0fde265242c98308cb6618928ba9913a062cb296f54ffe02e9eb1a8c5598ed8662e6e45c6bcba4006763ec4f2a5594bd9dae0f656da3df30957296e4c9ed5dcd2408d59a884030cdbe210e93087c9e2711b564760866f864d8f93b160eb9d70efb8cdd5642a682c367e2f0a913c2029193f47597dd66981e2d7d0d47dae61b398a3d661ff6ba3063f0efcfc7273bc2f21e05e4f80c212ee1f9e94a170240ba73c46c2d7d8a231d966510f2ac66dd8067672a2393ea7b4f2ccfce0463f24e440fe4ab72392866e73c13a88d064162108229c0b6e72a9696a85ee6fe617f1fe936ded9a12310d84d720225237e3a10088584f784d523