www.4gr.it

- 4G Retail Srl -

Issued by TI Trust Technologies Global CA

About this certificate

This digital certificate with serial number a0:f0:0b:97:9f:47:88:cd:49:57:87:53:3d:98:c9:eb:5b:c3:5c:48 was issued on by Telecom Italia Trust Technologies S.r.l..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The DER encoded certificate serial number is 21 octets long. If this is surprising to you, note that DER integers are signed and that SNs that are 20 octets long with an MSB of 1 will be automatically prefixed with 0x00, thus bumping it up to 21 octets long. SN: 00A0F00B979F4788CD495787533D98C9EB5BC35C48 Certificates must not have a DER encoded serial number longer than 20 octets (RFC 5280: 4.1.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

4G Retail Srl

Organization: 4G Retail Srl
State / Province: TO
Locality: TORINO
Country: IT

Telecom Italia Trust Technologies S.r.l.

Organization: Telecom Italia Trust Technologies S.r.l.
Organization unit: Servizi di certificazione
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): a0:f0:0b:97:9f:47:88:cd:49:57:87:53:3d:98:c9:eb:5b:c3:5c:48
Serial Number (int): 918791712008963006934627918588528723149883399240
Serial Number lenght: 160 bits, 20 octets

SubjectKeyId: b6:09:a5:f6:c1:c7:38:58:91:33:20:de:38:38:57:fa:cc:98:fc:f3
AuthorityKeyId: fd:25:dd:69:06:35:47:cd:e7:30:de:31:e8:1e:f9:88:00:79:c3:e2

Fingerprint (sha1): 67:9d:d4:a7:76:44:e2:f7:03:2e:2d:13:91:d7:13:a6:7a:47:ad:f8
Fingerprint (sha256): 00:0b:fa:8d:a2:2f:17:9e:3c:7e:61:71:b1:21:24:1b:01:ab:8e:54:5c:cb:8c:1a:18:e6:3c:bf:7f:e7:71:d3

Issuing Certificate URL: http://ca.tipki.it/TTGlobalCA/CERT

Revocation information

OCSP Server: http://ocsp.tipki.it
CRL Distribution Point: http://ca.tipki.it/TTGlobalCA/CRL

Check the revocation status for certificate www.4gr.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.4gr.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.4gr.it

Other certificates including the domain name 4gr.it

(limited to 100 certificates)
www.4gr.it
int.store.4gr.it
formazione.4gr.it
int.store.4gr.it
formazione.4gr.it
formazione.4gr.it
int.store.4gr.it
support.4gr.it
www.4gr.it
support.4gr.it
*.timretail.it
int.store.4gr.it
int.store.4gr.it
mail.4gr.it
int.store.4gr.it
int.store.4gr.it
int.store.4gr.it
int.store.4gr.it
int.store.4gr.it
int.store.4gr.it
int.store.4gr.it
int.store.4gr.it
support.4gr.it
support.4gr.it
support.4gr.it
*.timretail.it
mail.4gr.it

Certificate

The complete raw certificate details for www.4gr.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIVAKDwC5efR4jNSVeHUz2Yyetbw1xIMA0GCSqGSIb3DQEB
CwUAMIGOMQswCQYDVQQGEwJJVDExMC8GA1UECgwoVGVsZWNvbSBJdGFsaWEgVHJ1
c3QgVGVjaG5vbG9naWVzIFMuci5sLjEiMCAGA1UECwwZU2Vydml6aSBkaSBjZXJ0
aWZpY2F6aW9uZTEoMCYGA1UEAwwfVEkgVHJ1c3QgVGVjaG5vbG9naWVzIEdsb2Jh
bCBDQTAeFw0xNzAzMjAxNTIxNDhaFw0yMDAzMjAxNTIxNDhaMFgxCzAJBgNVBAgM
AlRPMQswCQYDVQQGEwJJVDEPMA0GA1UEBwwGVE9SSU5PMRYwFAYDVQQKDA00RyBS
ZXRhaWwgU3JsMRMwEQYDVQQDDAp3d3cuNGdyLml0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA9Qp+EjJNck/knq2UqruVfLMT3lzqrNw2v0A1r4l7NCxz
pHxEXFKLDtiCuFQVFuNiDf7lK9sg+8rCscyGQWSOhATBgzZl+4A4NqOrgYo5WQe0
VIZJINAc1mE9xTRpAow+Sgl3zSvo9wvaNlefpmqffvqqCQZTJhne98gHFvfYaeVZ
5AioMPILcE2OwXS2lUUwgZH4wI5qXru1vj50IXk1v0hoNeSkwn81GbUyH8zoJKfW
/cRw7LUxCVuJUhb0StSBksynvMPtMXl+JaJEdDyRZQBK7HLDbytTvhackdD+Ojda
eaNGF/dU0iQmPp337gfgHzLV+TmtUxD3HFz3QkRckQIDAQABo4IB9TCCAfEwCQYD
VR0TBAIwADCBxwYDVR0gBIG/MIG8MAgGBmeBDAECAjCBrwYJK0whAQEeAQIBMIGh
MFAGCCsGAQUFBwICMEQMQlguNTA5IFNTTCBTZXJ2ZXIgQXV0aGVudGljYXRpb24g
T3JnYW5pemF0aW9uIFZhbGlkYXRlZCBDZXJ0aWZpY2F0ZTBNBggrBgEFBQcCARZB
aHR0cHM6Ly93d3cudHJ1c3R0ZWNobm9sb2dpZXMuaXQvdHJ1c3RlZC1zZXJ2aWNl
cy9jZXJ0aWZpY2F0aS1zc2wwFQYDVR0RBA4wDIIKd3d3LjRnci5pdDBgBggrBgEF
BQcBAQRUMFIwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3NwLnRpcGtpLml0MC4GCCsG
AQUFBzAChiJodHRwOi8vY2EudGlwa2kuaXQvVFRHbG9iYWxDQS9DRVJUMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0j
BBgwFoAU/SXdaQY1R83nMN4x6B75iAB5w+IwMgYDVR0fBCswKTAnoCWgI4YhaHR0
cDovL2NhLnRpcGtpLml0L1RUR2xvYmFsQ0EvQ1JMMB0GA1UdDgQWBBS2CaX2wcc4
WJEzIN44OFf6zJj88zANBgkqhkiG9w0BAQsFAAOCAQEABeTMQinsYAcrxc0p2RsZ
RDjdafUmMpNdLc6JCsjhvAL8fgNpcnKV8Ycicic3ZfCl6ucj5EGX/CcMi3RNQE+s
ig75kUN3ZQYV3xhc7tG7w2hV0rBmhdq5o4YamJNvppEXKqpSdUkE/QOwhosnDgm4
cIL6CEN75te5gCWzYMLB1521+VPEa+3RqwVfsIrF8jTvPxtuiWGO8a3Z/Qr34IIe
E3Xsr6nvZnF9AA/mj73q9MWN8E5ASY1KrLvNeMAIWHsgZgsOd8hrVdHakG6X3zUy
pO+WMUzyU/EjCke6JTeWOeMB4vf8reWZ4s03wKAQb7snm8msx+GqMQTkNyHd5MBH
Ew==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Qp+EjJNck/knq2UqruV
fLMT3lzqrNw2v0A1r4l7NCxzpHxEXFKLDtiCuFQVFuNiDf7lK9sg+8rCscyGQWSO
hATBgzZl+4A4NqOrgYo5WQe0VIZJINAc1mE9xTRpAow+Sgl3zSvo9wvaNlefpmqf
fvqqCQZTJhne98gHFvfYaeVZ5AioMPILcE2OwXS2lUUwgZH4wI5qXru1vj50IXk1
v0hoNeSkwn81GbUyH8zoJKfW/cRw7LUxCVuJUhb0StSBksynvMPtMXl+JaJEdDyR
ZQBK7HLDbytTvhackdD+OjdaeaNGF/dU0iQmPp337gfgHzLV+TmtUxD3HFz3QkRc
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 918791712008963006934627918588528723149883399240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telecom Italia Trust Technologies S.r.l.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servizi di certificazione'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TI Trust Technologies Global CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-20 15:21:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 15:21:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TORINO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '4G Retail Srl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.4gr.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30933558744091658790525145130815930962664835581745010289286869260351077508896901619388452033247424223107555742197600685026228582459984081874808628112073679512284912728225210974019678141051240254667542618042917463684822475534123580254452397872302978708600386058684112416452286612163258859592764113471759465975958090605145529176015534823522676509182326046656238683586813561697974205308791327865231747790968714001606523916679843653820392308816122731761878480647442157608458721179478713602113986970854070083384338073834745758363456439634372276265789899341105497891380818284734459196353722496192942411027589417550901173393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.76.33.1.1.30.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'X.509 SSL Server Authentication Organization Validated Certificate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.trusttechnologies.it/trusted-services/certificati-ssl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4gr.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tipki.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.tipki.it/TTGlobalCA/CERT'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fd25dd69063547cde730de31e81ef9880079c3e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.tipki.it/TTGlobalCA/CRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b609a5f6c1c73858913320de383857facc98fcf3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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