promo.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:56:fc:75:83:80:3a:f1:26:51:e8:25:da:49:3f:0e:52:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=promo.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:fc:75:83:80:3a:f1:26:51:e8:25:da:49:3f:0e:52:9e
Serial Number (int): 378049002903067046361997778220620620649118
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:71:1d:65:83:31:49:e9:96:cc:2f:f0:21:c2:1f:57:0b:5c:08:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:6d:42:02:44:95:89:1f:62:0d:46:da:81:08:9b:61:04:a5:e5:be
Fingerprint (sha256): ba:ec:c3:31:18:d9:bd:97:ec:48:12:e6:76:fb:ae:0c:b7:93:ad:87:34:98:20:9a:9a:83:9a:bf:0d:01:51:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate promo.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for promo.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

promo.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for promo.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378049002903067046361997778220620620649118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 13:09:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 13:09:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promo.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804698081851466286182038857011536843180748521122616697537144821025587754850373292808980709074598950041253402539598565831634801884639690475322534743861979265919151415275181599253795641929752012780981596409376863066791928210655792569576296478305422599817930646112526698615816319247096392773111329792896994416866894336076580747466369006206470257335431746972601250189987269476433266042143411887235308940657612326376947456763960279101617885001762408632427963785527391377856036152201776010312878157861967841130085560205806926397744606270228599931269677954695458029992745762043415838346666737803192862369787552869777047354496044804141805316891328330607337615991322356511141270576298791020708770489104151593752784363231858083954302886847352288174640452653974500343072845494554235536120550894889692329599398348502933662826045339904228092178404299305729846406808607848500654831738164387180233605225585662375838998393642003827959939016182457388594488815872500449637675084958055616307759323649187369734348412811723871905374711318759343726111486491967481382855730635050044631786466981127037652741219644642161547105578480823412910380173440543440254034071451100987061244907995909115369022716594801921844704076881902342015754028989056812978001814171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab711d65833149e996cc2ff021c21f570b5c0818
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016856feb0ce0000040300473045022100ba238f738ecf7974788eed1eee2b64742a09fdf8c63136703196f0fc41c92bef0220232bb1c002cde8b3434fad7a786ad29d235d264dddf3126cd5136635e345247b007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016856feb2ac0000040300483046022100ff3fcd5ff0bdf9edcadb74215af98a19997329f107b6071a0113f18780c87eed02210082b2b2a2bbb0f0a8f6b8fe5028e4fcab0d1f5f76ddfe4b4a6e28b82fa043954c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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