resortstoscana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:fc:5b:73:d1:36:5f:28:ca:37:98:ea:0a:df:13:aa:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=resortstoscana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:fc:5b:73:d1:36:5f:28:ca:37:98:ea:0a:df:13:aa:7f
Serial Number (int): 291957428754248806273929463384725379066495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:b1:98:26:60:af:0c:89:bc:f2:5a:43:23:07:b7:bb:6b:c3:f4:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:17:9f:68:89:e3:ff:f4:fa:95:e0:4e:0e:a5:f1:45:e6:a4:01:e0
Fingerprint (sha256): 54:09:17:bb:42:dc:81:f5:58:84:e7:b7:db:7a:88:ab:1f:e5:50:e2:31:ca:c6:46:0d:1f:ad:10:ee:ad:29:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate resortstoscana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resortstoscana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resortstoscana.com

Other certificates including the domain name resortstoscana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for resortstoscana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2zOdyK1PoTLHICCOI66Q
U7U+4LSUhv9nJp8T+utTFlnKpbFJfNAfMmLlekJI+wHRNmZ41pH1z2HrYLnCYXhS
eDYw+YBU5GmM21E4vzOwn8zX1+FtMP6KOgPYCgjR5ImTq7dV8hjS2+M3Ad+LvIlQ
K2fjKM1XEmqtxzMGD78eOyKLzkDJvcFxobRBbghIvvlVO1VfK9y6WxcAhGw/B8jz
64D5ca7oR/e83hSPnFeGupz75LoQ8ua1BXdaMSxFBq6fxlpu2KRbYVfkR4ZeKUKv
onhWviqKSJnM8Rx91wI0+76T2Creho8RK4JMUcOEN1FHPpKQmupd95blBcLjMHPC
lJIYHQwkSCw1f9grDjwKGITxeHyx1DGdrOYQcmrIY1sxCyc5nfCV7sGa7304OibQ
Oxscc2prQ6P/Nbl7VDdmj7WdMGDWifVMLKcnyZSf2VifeyigES0vQLRCiGQVeYxs
ojo/64Xaf2FCePS3HOQ7zwR/riD8OIlUTr15TySRiBIoAra19bFDW1xWhwcPVkTw
t4qH2pSpxLXr6zRvSkfF7eQH81SBNn0lMq3/2pNGS+WBLLrNwH6hBJse0MvmRoZe
IBk1g+SBz+tXd7fLu/fpqpLF0sZm5lD8KDctyuMlimRFLd0HMeJt5FfoMPjK1Xd0
RfyLsi6aJu8K5GeKe0Ta5OkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291957428754248806273929463384725379066495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 11:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 11:11:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resortstoscana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894264614603093681591191273662946588278178104629077791732966109051805888065220007783000260094452637606682911155675242045208950535538672057747678130780283057244544176948245256756309419690174407951935573296594109015069529636169765304625306091759824511363137704651760013616240098328571360148029837117703457371501143190210954077849065258298332945868287196132343592968394198051444393247515556272916714083762002100291541169336638098611653318549531028468141567972284582635112024856834290068944931769876442279812040700586753930183677093792299112744304012202468693650836902254621402241988512877385568874916881829160815485879151297342121180524681900144681474469967250888162380528288571775695604522741540921580736850684299320532559215160417071470286438668566850245711785245978938230247910865298759834078776974349738497050851117161984956204622953904185343885951538739033998744646848040256490965096455433257030354777848252873199721668735906565547924697096981977074500228004381746055124288815791539948180757230098495202788733196296961857851524009109284524212379615806984203066633859496108304636227367633633912103853142581276675831697694216827781124051072146724782683415113313004538481166525503868238347630437344542628412483454814772552221855507689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20b1982660af0c89bcf25a432307b7bb6bc3f417
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortstoscana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016be618130c00000403004630440220348a7647955c61801e26d3aaeaf63c9ac9021cc23c9d8a0d324d7401ad703745022006a11c9721b22c9be9e5e00e54d86e940d2aef2a23c055f70274837a5d3140ae007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be618130000000403004830460221009a51faa7ea36bdd53f02923a5e085a4c157e506f636d37d051ea51a3045f1e500221008e3d4add3601c71ee3e139a246871468370d397712deebd66b63723c56255a79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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