resortstoscana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:30:31:90:98:69:a5:40:26:76:b7:f4:d3:28:f6:ee:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=resortstoscana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:30:31:90:98:69:a5:40:26:76:b7:f4:d3:28:f6:ee:99
Serial Number (int): 296450001887223505174793647568599727402649
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:33:a5:3f:25:b2:9e:3b:d8:7a:61:57:1f:55:92:4e:5a:87:c2:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:15:02:e3:9c:e6:18:22:14:b6:5c:0f:10:c9:18:fc:0d:a1:eb:f4
Fingerprint (sha256): ac:a0:01:e9:99:6a:10:00:6f:0f:e4:b7:ae:2c:a7:17:8c:b4:57:4e:fc:6e:6e:eb:25:66:c7:48:a9:f6:b6:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate resortstoscana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resortstoscana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resortstoscana.com

Other certificates including the domain name resortstoscana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for resortstoscana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296450001887223505174793647568599727402649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 20:51:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 20:51:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resortstoscana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854340558880856839040213980611970751135868910942230390176136498001795197187344001977671080126410705582164342923505382833672667213949924009214728283665130078002601240074921607465638726929483412879132427939245761327793297414335871922391011826154733795033937271563017308337037642908467254758521989595299671321375871755608625077497484353365497048391192013924675934635393437354720666978110667972403383567784761965409396399254941638854316845981494054327951857509301642575806105073901761906328647570953596344695311845028560270050829456090349529616799335802508446682137287980932125662228292473036298936423793570313030494064657959409061027234513855908468657904502308588431962547614109703404246332249900575648886213396305303890555264139143433557202560879947411594409471468599115554036473303509194434430075697118062055892239083190763951737472103628932686571938003267543127391827705280283535701086002678574340738502312857520940271125962894208125809941818753781033044486305340344659013674954429251577566165824998462190171147893699102387242366059449173300964189775613217351058483736982238755853238215695005234030408429736039493948835100503041546279242909474388947961960060581168611403605718532390733192172668953571807606573119951743769225079250789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f233a53f25b29e3bd87a61571f55924e5a87c268
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortstoscana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169ac895bd10000040300483046022100935944cef36256c88c2db24ac44fd93de3241a095236902b53e98c5131a8580e022100a29dc65bf25db7de7fd501ba4be91016ae0e5cab0c0d402441848e3f31b0cf5d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169ac895bd8000004030046304402201589096d8e5b0c9c058705e4669ef56dc4fa48e44cba3105b706d270e0fd011402202acb6d469feb2589c8b8712c94044aa6823baf0256ad21a79ce5fa043d0ab9b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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