www.gettingdivorce.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:58:97:e4:da:46:33:23:cf:a5:d6:2a:f6:54:82:24:2e was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gettingdivorce.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f4:58:97:e4:da:46:33:23:cf:a5:d6:2a:f6:54:82:24:2e
Serial Number (int): 344483516066127291216430575313058533614638
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:26:67:7b:38:73:49:b6:2a:27:29:75:67:61:5a:5c:da:54:9f:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:e5:50:0d:d6:50:de:e7:cc:b5:2b:63:97:5f:6f:54:e1:6e:47:0f
Fingerprint (sha256): a8:c6:35:4e:c5:04:ec:22:02:23:96:6b:c4:0f:94:77:51:cd:6b:b8:45:d7:ab:d4:3b:31:4d:0c:ea:4f:b8:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.gettingdivorce.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gettingdivorce.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gettingdivorce.com

Other certificates including the domain name gettingdivorce.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gettingdivorce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344483516066127291216430575313058533614638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 16:55:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 16:55:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gettingdivorce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765072451118926730446546499997978714748199828075383779957048286272082366669595676069269630034435761753324956495125072998067631040412525446912294485451908622113185989123782828641864398732994266865342312595098315309647497187346682339742665794171490244515273991499057747468093218984451553280213897626231357515155393161746123102267742675336852150469241961691549048888129577371709047881398776078948718535137687854722028995776107441187004328804743750653320061360312116658574511225512940086687603843896232534045649382165094081121767894665642981593495164359182478447469907767117450280875771486611323676888481390588326927728705195554596263612384863807945643849139519722281925570896742470224571762266117510992444698417522471959362406056670579356479874188838259657613795890469141510097677911241917341495459642935265891110768974903561920544134009405775925089286059704874935793295016260316275664617537629724196917646921806672552085851248441121746995472816260765665685950906418045531888362439167982204345164787714550217987160673513325633463594952570041710679418470634052406012210598111292908163079759356381985934795074529388585753447820144437715319379617781510667867577017396999638626476484992496198264386566717238635018598820506284311551408196397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6226677b387349b62a27297567615a5cda549fd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettingdivorce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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