*.coofficeagliana.it

Issued by Actalis Domain Validation Server CA G1

About this certificate

This digital certificate with serial number 2e:ec:fc:88:c8:67:d5:f9 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

*.coofficeagliana.it

Organization unit: Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:ec:fc:88:c8:67:d5:f9
Serial Number (int): 3381355084656399865
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 41:41:65:72:00:2d:c6:72:fe:d2:fb:ae:23:14:fe:32:8f:d5:dc:f6
AuthorityKeyId: 1b:42:7f:5c:45:7e:ff:7e:1e:1e:41:9c:f3:ad:ae:35:c6:65:eb:c5

Fingerprint (sha1): 86:9f:68:ad:3b:27:01:0b:dc:68:cb:83:92:73:ab:4c:4e:2b:3b:9a
Fingerprint (sha256): 00:18:62:a1:ef:17:45:d3:93:00:35:73:fc:9e:15:21:da:29:f7:8e:00:d1:8e:26:a3:80:58:0f:75:d7:b0:be

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg1

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G1
CRL Distribution Point: ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL

Check the revocation status for certificate *.coofficeagliana.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coofficeagliana.it


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coofficeagliana.it
*.coofficeagliana.it

Certificate

The complete raw certificate details for *.coofficeagliana.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56K65hymALWgb+u/G4+k
J60/zoSb9sxN4WHVX0FD9uMHdSLqynK3+yXg1B9DFAr8zCSKCtE/Ww5iMbZJAlc3
BxFqhWVGxV7/EvY25REDI61svVmBcUYvsBaNwWL776aOmg3GzU1YAP4t20nGnLdv
K2S3eeeHGAMonsXpXbSbEidkDJgQZWUi34ngnOYtFtNLtGGZX6JJ+jkW9aE09lFa
yGAbWFyhW9uH42GgLdmHF3s1fEjYfudaXYrgW+pObpzCTaHiMZahK2subYr9jNo5
c5wp9Txg5uwed6cXf7joHgTH/I6XxjW372e04q6chfrjdwvX4fA3ovZyfGN2IVs0
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3381355084656399865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 02:31:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 16:06:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coofficeagliana.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29241293637294537474429182760819099719861511560791259414803013384542926530992143279524741614626067020086809649837096329648236216533177176586904234664359587253024617784471635780824124406056074155151922293550813355000280886738138839386551388172901957460034662861963564124706503712734952412968136817694986767498520864040452281217569577183887522481346692289458782178869310295399546497963509880226412578766320388035606880108702975283561566915272208005438481066169801821823750138423413201698089344465098908282306921890223792400095100444989993148889833431322476789276731147976620543399380977072444462703132515197813561963631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G1'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41416572002dc672fed2fbae2314fe328fd5dcf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b427f5c457eff7e1e1e419cf3adae35c665ebc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coofficeagliana.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coofficeagliana.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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