www.resortstoscana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:be:be:22:fa:54:f4:64:24:8e:f2:ed:79:9e:12:f5:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.resortstoscana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:be:be:22:fa:54:f4:64:24:8e:f2:ed:79:9e:12:f5:e7
Serial Number (int): 329646871744505947610006653527613901043175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:5d:fa:c7:89:33:a3:17:0d:7d:82:c1:12:66:c6:fd:2e:81:0b:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:5d:29:59:51:2c:3d:d0:9c:2c:d6:25:c0:cd:f1:53:60:b7:08:4d
Fingerprint (sha256): 18:fe:99:49:a3:f8:36:6d:ee:bb:fc:0c:1e:12:8b:f1:61:a3:1b:57:8c:a6:ae:a2:1b:dd:97:75:a8:b2:ae:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.resortstoscana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.resortstoscana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.resortstoscana.com

Other certificates including the domain name resortstoscana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.resortstoscana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3NdBspxvqza6YGuQLluY
GuzFFr/HOgGmRlxlSLkr+ZgFgOf28/cytdTNMeeskXA491tJc1KCjz++YxJBOavs
9dHBo9AeVQvpwU0DwncenmAaxGafZ/utWrsa3+QbOPQZhqZW0+QjqXObT4NSmlJi
0Po41xQK3OasWYwMX8EkLo9nDWwJLL7oQGkgFr34ubp+VJkiZXxLyHbODbyWdd/l
KaWiMm6nwctQOBq26T7iWSU5Td6R823a/sfXbAbH+3VXMJzBlvg3+4fj0vpEk3NL
WM28zAF7fgC8gNwC7D3TKUaesTUw5fDG8ovtEbnhQoV7kfvZwlo7BcYTb3SpYWMH
ImsXMRaZSdP7aGA8mAaOVa8hG/YE3EgNvc26zmTARqLG++Bq4ByDLMk2XHZ4hndD
Zs8n6MR5RwkToumhVOb13jXBplh++b7kM3Hcgsmfx6Z96Nklv+tbADqOpEcFxz15
fyQOt/8qMDY2a740X3/wBXRxkmIXthLHhv95cRBXDVo27YThIGuU/UAeqpewh2rI
+WgNiAm6JBDNppplH169uLWvRZQ/tQSdK4Y4jTUrKj7BnUDiaQ7GZerUPJMljwBo
8nclqwSXiFBKNgYpmi0iL4qLaPh2FrAkA8Fb/sk8iuhHlKG0FlgiCT3eFcDRg6Nd
GAfmkk1skr8SgVsFxCv+j6UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329646871744505947610006653527613901043175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 11:10:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 11:10:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.resortstoscana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900952048247112047705612783294533114317590881397790186943105003116275018150804878229408325862823740365532854528643884556008865558768280882827932607063390816179214505597835973493583874436005565990734075358622259626786023385897872088633094171971917415940283566743817151523103084633985321528257252487452634264544229731554130892633755401382075591802670902734240403254457237519953944994892561228262298253819001138541993387732047442238768380278216417793540995388359807177857539851556800109074406636322748196203466618439838651483830648431082679757952912714661810387763631832803555927248327883751777642800426101375618330149260962839332830686075325188473700757664384617338071889511257414567650958420077790713761026643344471910777613652546271125077715932203765975189252701278460167848999496429396641416081919023065152829207380776010403783477413263463076289281181080110890206387778144780195768452009009430174299233781180781064394176536528916366531180991518596835741146669138240245899515543657385177947339143388220715154314340877395061398845101127948946016550997323082971807973465663600934279137553389857905495542271662165452143685008383203409302384574353541343352190339730437123186289899374448560491686519817322985975249405901813908952963780517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e25dfac78933a3170d7d82c11266c6fd2e810b1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resortstoscana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016be617ee920000040300483046022100cdf82c5cfaef24b4ab0e0cad6e0415cb9e2210cfb8f1226a8ccd2d0e0e301355022100c171970e7a5fbb4d8f0e2ac195a48d6ae7e6d9cc5c37489c82f031f0fd49d885007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be617f024000004030047304502202b0528710a696f268293568de4ef5083e3bd9af92f806bd68957fc7e376d49740221008d72acd341f5c447c689f7ce2bdbb19e2927f0711b136c5e89a60d0f8ab8eb65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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