DV SSL/TLS Certificate for *.caffepabios.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.caffepabios.it DV SSL/TLS Certificate

This certificate with serial number 0b:c7:90:7b:62:7a:c8:01:0d:3c:0b:61:2e:11:3c:32 for *.caffepabios.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.caffepabios.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0b:c7:90:7b:62:7a:c8:01:0d:3c:0b:61:2e:11:3c:32
Serial Number (int): 15657705471007384800255788072892972082
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 2e:0f:84:65:a3:74:bd:9d:2c:1d:43:77:ce:f9:6c:2f:b9:53:36:db
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 65:01:09:1f:0b:d2:6a:25:0d:83:f3:80:bd:38:16:c9:a0:a2:d9:52
Fingerprint (SHA-256): ca:39:6f:4a:ea:bf:d7:e8:e8:8b:8d:61:2d:a0:3d:81:41:73:64:39:12:4d:65:f4:61:f8:e0:75:03:d2:39:f4

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.caffepabios.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.caffepabios.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.caffepabios.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0PAbkINMmmTDyLSzt0j
vc5kFsgbMQktaaBUVJBnoIkO/pOmar9nhQ/PfrLk2wvGLy1V7Hg4NQGh8G7m5XLZ
dz3e/SwB62frzJqY0+LOCHWzLgbkVxkAxy0USSyL4yJR84Ld1AXj0ZdhHMCVvU9P
oVeK0ZS9j6gM1guF5ve7FlCjAYwC/De4NiGFF9cp8SJ48HBXyHvHVguHzUzcYuLr
UzQssSZA60IXI/sg6MKf7rX/Vbfr+UAo+Pf0lWiFVbJb4HPz8W7OfvH/ZOlRyRrn
mX4PMaXMR4/D6ctRfUm8NJ+aWPZ7eezFRHfsMulVdd3giMECy7zqziC6/wKRFDRj
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15657705471007384800255788072892972082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 06:39:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-18 06:39:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.caffepabios.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20610253309253693837121424611607954013176265938627471841863219868796941205952665164101841472806260186167628237770445371253774584789489046798946651037739242339831891208101180760763968976289049104571351268431165699281525461728203300490093967224495281105469819594759369535431752783588791323296593500940956352443247040140581429657665023575763373875510799111742905704446793092124884176104372463144003710850069815465817859697589044869687871107096793957567411971754838541662507791016938340956218410402540258324739678691270183653168895712567811975784371282081303736029896690074306513524235485868225012336071236039286510085053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffepabios.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caffepabios.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e0f8465a374bd9d2c1d4377cef96c2fb95336db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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