resortstoscana.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:59:fc:5b:73:d1:36:5f:28:ca:37:98:ea:0a:df:13:aa:7f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=resortstoscana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:59:fc:5b:73:d1:36:5f:28:ca:37:98:ea:0a:df:13:aa:7fSerial Number (int): 291957428754248806273929463384725379066495
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 20:b1:98:26:60:af:0c:89:bc:f2:5a:43:23:07:b7:bb:6b:c3:f4:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 98:17:9f:68:89:e3:ff:f4:fa:95:e0:4e:0e:a5:f1:45:e6:a4:01:e0
Fingerprint (sha256): 54:09:17:bb:42:dc:81:f5:58:84:e7:b7:db:7a:88:ab:1f:e5:50:e2:31:ca:c6:46:0d:1f:ad:10:ee:ad:29:d6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate resortstoscana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for resortstoscana.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
resortstoscana.com
Other certificates including the domain name resortstoscana.com
(limited to 100 certificates)
resortstoscana.com
www.resortstoscana.com
resortstoscana.com
www.resortstoscana.com
resortstoscana.com
www.resortstoscana.com
resortstoscana.com
resortstoscana.com
resortstoscana.com
resortstoscana.com
resortstoscana.com
www.resortstoscana.com
www.resortstoscana.com
73282.com
villingenschwenningen.org
www.resortstoscana.com
resortstoscana.com
valutazionemoto.com
www.resortstoscana.com
resortstoscana.com
www.resortstoscana.com
resortstoscana.com
www.resortstoscana.com
resortstoscana.com
resortstoscana.com
resortstoscana.com
resortstoscana.com
resortstoscana.com
www.resortstoscana.com
www.resortstoscana.com
73282.com
villingenschwenningen.org
www.resortstoscana.com
resortstoscana.com
valutazionemoto.com
Certificate
The complete raw certificate details for resortstoscana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA1n8W3PRNl8oyjeY6grfE6p/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTIxMTExMDVaFw0x OTEwMTAxMTExMDVaMB0xGzAZBgNVBAMTEnJlc29ydHN0b3NjYW5hLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANszncitT6EyxyAgjiOukFO1PuC0 lIb/ZyafE/rrUxZZyqWxSXzQHzJi5XpCSPsB0TZmeNaR9c9h62C5wmF4Ung2MPmA VORpjNtROL8zsJ/M19fhbTD+ijoD2AoI0eSJk6u3VfIY0tvjNwHfi7yJUCtn4yjN VxJqrcczBg+/Hjsii85Ayb3BcaG0QW4ISL75VTtVXyvculsXAIRsPwfI8+uA+XGu 6Ef3vN4Uj5xXhrqc++S6EPLmtQV3WjEsRQaun8ZabtikW2FX5EeGXilCr6J4Vr4q ikiZzPEcfdcCNPu+k9gq3oaPESuCTFHDhDdRRz6SkJrqXfeW5QXC4zBzwpSSGB0M JEgsNX/YKw48ChiE8Xh8sdQxnazmEHJqyGNbMQsnOZ3wle7Bmu99ODom0DsbHHNq a0Oj/zW5e1Q3Zo+1nTBg1on1TCynJ8mUn9lYn3sooBEtL0C0QohkFXmMbKI6P+uF 2n9hQnj0txzkO88Ef64g/DiJVE69eU8kkYgSKAK2tfWxQ1tcVocHD1ZE8LeKh9qU qcS16+s0b0pHxe3kB/NUgTZ9JTKt/9qTRkvlgSy6zcB+oQSbHtDL5kaGXiAZNYPk gc/rV3e3y7v36aqSxdLGZuZQ/Cg3LcrjJYpkRS3dBzHibeRX6DD4ytV3dEX8i7Iu mibvCuRnintE2uTpAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FCCxmCZgrwyJvPJaQyMHt7trw/QXMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIIScmVzb3J0c3Rvc2Nh bmEuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A AAFr5hgTDAAABAMARjBEAiA0inZHlVxhgB4m06rq9jyayQIcwjydig0yTXQBrXA3 RQIgBqEclyGyLJvp5eAOVNhulA0q7yojwFX3AnSDel0xQK4AdwApPFGWVMg5Zbqq UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWvmGBMAAAAEAwBIMEYCIQCaUfqn6ja9 1T8CkjpeCFpMFX5Qb2NtN9BR6lGjBF8eUAIhAI49St02Acce4+E5okaHFGg3DTl3 Et7r1mtjcjxWJVp5MA0GCSqGSIb3DQEBCwUAA4IBAQBvaOGw5Nsyv9ZOtcafzwMO UUbxg2jpr4WTAyKGNEvi/JoVLTG769NMYDjTgG0RQbbl2ZSiSr4l6rtI3YIbPm1t 1nhI+DSD7Li0fYeLlRvVw6maqIQ489obH25jtJYzULEBZ1K78qbf2dbDUpunpoR5 TzvPxbmOI2lPQJlqSiE+MCpwPzoYyvck9/gO6Jq+ZzCQBsa9Djth9y5FyfH3tmLj FoqhNLbF8tZO5XF4pxvR4VXJqb68F/9ec6i8pY8iP/WuL+tPL6AKR20Gd8OT2atX c7Cv392MCjz4oQi68eP5RvbfocbrnwH/GzOJ6Xo5FEOJzYpRfUlF9bQ9qXS2jBzc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2zOdyK1PoTLHICCOI66Q U7U+4LSUhv9nJp8T+utTFlnKpbFJfNAfMmLlekJI+wHRNmZ41pH1z2HrYLnCYXhS eDYw+YBU5GmM21E4vzOwn8zX1+FtMP6KOgPYCgjR5ImTq7dV8hjS2+M3Ad+LvIlQ K2fjKM1XEmqtxzMGD78eOyKLzkDJvcFxobRBbghIvvlVO1VfK9y6WxcAhGw/B8jz 64D5ca7oR/e83hSPnFeGupz75LoQ8ua1BXdaMSxFBq6fxlpu2KRbYVfkR4ZeKUKv onhWviqKSJnM8Rx91wI0+76T2Creho8RK4JMUcOEN1FHPpKQmupd95blBcLjMHPC lJIYHQwkSCw1f9grDjwKGITxeHyx1DGdrOYQcmrIY1sxCyc5nfCV7sGa7304OibQ Oxscc2prQ6P/Nbl7VDdmj7WdMGDWifVMLKcnyZSf2VifeyigES0vQLRCiGQVeYxs ojo/64Xaf2FCePS3HOQ7zwR/riD8OIlUTr15TySRiBIoAra19bFDW1xWhwcPVkTw t4qH2pSpxLXr6zRvSkfF7eQH81SBNn0lMq3/2pNGS+WBLLrNwH6hBJse0MvmRoZe IBk1g+SBz+tXd7fLu/fpqpLF0sZm5lD8KDctyuMlimRFLd0HMeJt5FfoMPjK1Xd0 RfyLsi6aJu8K5GeKe0Ta5OkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 291957428754248806273929463384725379066495 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 11:11:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 11:11:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resortstoscana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894264614603093681591191273662946588278178104629077791732966109051805888065220007783000260094452637606682911155675242045208950535538672057747678130780283057244544176948245256756309419690174407951935573296594109015069529636169765304625306091759824511363137704651760013616240098328571360148029837117703457371501143190210954077849065258298332945868287196132343592968394198051444393247515556272916714083762002100291541169336638098611653318549531028468141567972284582635112024856834290068944931769876442279812040700586753930183677093792299112744304012202468693650836902254621402241988512877385568874916881829160815485879151297342121180524681900144681474469967250888162380528288571775695604522741540921580736850684299320532559215160417071470286438668566850245711785245978938230247910865298759834078776974349738497050851117161984956204622953904185343885951538739033998744646848040256490965096455433257030354777848252873199721668735906565547924697096981977074500228004381746055124288815791539948180757230098495202788733196296961857851524009109284524212379615806984203066633859496108304636227367633633912103853142581276675831697694216827781124051072146724782683415113313004538481166525503868238347630437344542628412483454814772552221855507689 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 20b1982660af0c89bcf25a432307b7bb6bc3f417 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortstoscana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016be618130c00000403004630440220348a7647955c61801e26d3aaeaf63c9ac9021cc23c9d8a0d324d7401ad703745022006a11c9721b22c9be9e5e00e54d86e940d2aef2a23c055f70274837a5d3140ae007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be618130000000403004830460221009a51faa7ea36bdd53f02923a5e085a4c157e506f636d37d051ea51a3045f1e500221008e3d4add3601c71ee3e139a246871468370d397712deebd66b63723c56255a79 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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