degustazionevino.divinea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:25:45:8a:b7:9f:85:41:04:c2:c9:df:3a:23:ea:0e:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=degustazionevino.divinea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:25:45:8a:b7:9f:85:41:04:c2:c9:df:3a:23:ea:0e:df
Serial Number (int): 287247860199119992208270117391812413492959
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:f1:5f:e3:fb:26:df:1c:5c:7f:b8:60:d1:dc:07:12:16:0a:78:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:fa:a9:2f:81:a2:45:e6:e8:dd:78:41:de:56:43:96:19:95:23:24
Fingerprint (sha256): ef:d9:61:1c:f9:da:48:bf:78:3d:63:e6:75:50:52:80:49:79:40:c3:a0:d7:fc:1d:f6:d4:e6:08:c9:52:3e:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate degustazionevino.divinea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for degustazionevino.divinea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

degustazionevino.divinea.com

Other certificates including the domain name divinea.com

(limited to 100 certificates)
enoturismovaltellina.divinea.com
promo.divinea.com
divinea.com
*.divinea.com
*.api.divinea.com
promo.divinea.com
divinea.com
regalaesperienza.divinea.com
enoturismovaltellina.divinea.com
divinea.com
applicationsoap.beezsocialerp.com
divinea.com
*.divinea.com
www.thestorybookcharactercompany.com
divinea.com
divinea.com
pocketlearning.de
divinea.com
api.divinea.com
www.apur.am
divinea.com
*.divinea.com
api.divinea.com
www.bradshawandson.net
api-dws.divinea.com
divinea.com
www.promo.divinea.com
divinea.com
widget.divinea.com
divinea.com
*.divinea.com
www.gaminc.net
divinea.com
www.stevemasson.co.uk
api.divinea.com
www.guide2copenhagen.com
smart-tasting.divinea.com
*.divinea.com
api.divinea.com
*.divinea.com
api-dws.divinea.com
isitblackfridayyet.app
link-producer.xtrea.mr
promo.divinea.com
*.divinea.com
*.divinea.com
blog.divinea.com
www.divinea.com
*.api.divinea.com
promo.divinea.com
synthwave.app
promo.divinea.com
promo.divinea.com
divinea.com
divinea.com
divinea.com
*.divinea.com
divinea.com
*.divinea.com
regalaesperienza.divinea.com
openday.vu.edu.au
degustazionevino.divinea.com
api.divinea.com
nmbrs.pensioeninzichtelijk.nl
applicationsoap.beezsocialerp.com

Certificate

The complete raw certificate details for degustazionevino.divinea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287247860199119992208270117391812413492959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 15:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 15:41:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'degustazionevino.divinea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764654113362247544967005548603421383216393154502144861664453599225956243217921555978786911745198767390244330060367251189193887851993886917794977080786741062497569094780858400412475802444191414910991525409970705166979770393193940684566886123632390466568501242418343397899239971452671925821360692251059566676376387287302702930030100005315253580225193606633041905638769508669333655763346343045202985684300621136435675603703944898560215180343013720604861421243562066135286136750574564806250642792694406341909618945069245511552194634419061476547849707720343522963683714977700857285620315255113628531332059849366407784755874040719242233976021746270889615173957242920550986597757764241417207837281137567156064444047029209212935977961730618195179944246536224345576827855466741781202169515999394251176823871244299233946814967321789049929063574135362832679426169820846152378953101797890037135915006798459977209638810385733025571630227579875475627697731567499029530495685618309587721413526493617288904555623192212868997431906852867897420652065218743449635952023882350730528879296511339322125291254619918040045350655270131410885804770192570218334704567396981190937219290726344509793190867570401649760296989108625752451172479990105742315761123631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cf15fe3fb26df1c5c7fb860d1dc0712160a78b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degustazionevino.divinea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017054070072000004030046304402206b8bc9cb2db5f1cca09cf1ea49620ff0930e269cf77d042526d69c324d9bc89a022065b2db8209f077f7a509926c162530ec92d66abaff8d74932b573f9d1c6c4604007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170540700580000040300463044022052ad5d2c4b9d84314a1ca4e559e36583c068a1f2e04ce968b878afa9a3df556602200947678362f3d81465ae82cc72d1e2ec3f77f1aeff3744387a6186e467abeba0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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