push2.onemarkets.de
- UniCredit S.p.A. -
Issued by Actalis Organization Validated Server CA G3
About this certificate
This digital certificate with serial number 54:96:1b:38:3c:6b:9b:f0:14:b4:5a:51:77:49:a6:6b was issued on by Actalis S.p.A..
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
UniCredit S.p.A.
Organization:
UniCredit S.p.A.
State / Province:
Milano
Locality: Milano
Country: IT
Locality: Milano
Country: IT
Actalis S.p.A.
Organization:
Actalis S.p.A.
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate will expire on
Certificate Details
Serial Number (hex): 54:96:1b:38:3c:6b:9b:f0:14:b4:5a:51:77:49:a6:6bSerial Number (int): 112434548255248748909598527940165477995
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 23:f7:b1:a3:8f:e9:42:82:0f:82:e7:33:f8:3a:37:62:05:be:d4:ed
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b
Fingerprint (sha1): be:cd:87:d7:67:a4:c7:ed:4d:21:19:e1:dc:83:4e:79:ec:fd:a6:a3
Fingerprint (sha256): 00:1f:44:7e:e5:f5:ba:76:9d:ab:e9:3b:56:3a:7c:4d:ec:c8:c6:2e:44:21:8c:e1:f0:94:ed:34:88:8d:be:94
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3
Revocation information
OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL
Check the revocation status for certificate push2.onemarkets.de
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for push2.onemarkets.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
push2.amministrato.unicredit.it
push2.onemarkets.hu
push2.bolsa.unicredit.es
push2.onemarkets.hr
push2.onemarkets.gr
push2.onemarkets.eu
push2.onemarkets.es
push2.onemarkets.pt
push2.onemarkets.ch
push2.onemarkets.bg
push2.onemarkets.pl
push2.beurs.unicredit.nl
push2.onemarkets.ro
push2.bourse.unicredit.fr
push2.onemarkets.de
push2.investimenti.unicredit.it
push2.onemarkets.nl
push2.structuredinvest.lu
push2.onemarkets.at
push2.bolsa.unicredit.pt
push2.onemarkets.sk
push2.onemarkets.si
push2.onemarkets.cz
push2.onemarkets.hu
push2.bolsa.unicredit.es
push2.onemarkets.hr
push2.onemarkets.gr
push2.onemarkets.eu
push2.onemarkets.es
push2.onemarkets.pt
push2.onemarkets.ch
push2.onemarkets.bg
push2.onemarkets.pl
push2.beurs.unicredit.nl
push2.onemarkets.ro
push2.bourse.unicredit.fr
push2.onemarkets.de
push2.investimenti.unicredit.it
push2.onemarkets.nl
push2.structuredinvest.lu
push2.onemarkets.at
push2.bolsa.unicredit.pt
push2.onemarkets.sk
push2.onemarkets.si
push2.onemarkets.cz
Other certificates including the domain name onemarkets.de
(limited to 100 certificates)
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
data.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
data.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
Certificate
The complete raw certificate details for push2.onemarkets.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKxjCCCK6gAwIBAgIQVJYbODxrm/AUtFpRd0mmazANBgkqhkiG9w0BAQsFADCB iTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMTQwMgYDVQQDDCtB Y3RhbGlzIE9yZ2FuaXphdGlvbiBWYWxpZGF0ZWQgU2VydmVyIENBIEczMB4XDTI0 MDYwNTEzMDEyOFoXDTI1MDYwNTEzMDEyOFowaDELMAkGA1UEBhMCSVQxDzANBgNV BAgMBk1pbGFubzEPMA0GA1UEBwwGTWlsYW5vMRkwFwYDVQQKDBBVbmlDcmVkaXQg Uy5wLkEuMRwwGgYDVQQDDBNwdXNoMi5vbmVtYXJrZXRzLmRlMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAt94lwqSmPPnMZ5c3e+fqYbMC5qgO7mh215BX rwqpGKu6aslZhFbFDazNvAntGInGta8pni2N+vzvWxf9fiztOxpXCoTzliTGRUD2 SVIiQhWTG3QpZ3ExmQj4+wJWi/TL5cxcGHYABdDJTyOH1Hal5LxtRmD6QYJC5MzZ uAudTH/WzOaQzxl+HXIHDEBsD1oZwB+eNd/WxSATPHAjjMzjw5oGHa8HfIfeFfKR IFedtuV7yJ13LdbIYp5bG3Nldv2EIW4KMJaq5HWy/hk6jyQlox7aoAF6L3n6jujF TMoVZxrfd5mZuV5Hj+uE1vcngVn2jpurl1rTTh45UcO10N6Z4ioK3/vqbsOImLAV Kps5QeU7e8daqESpz+3XuLpSrK8XSvwn38xOCH34HdR4wHLwV62R74+/YWLn13GP Pox2LIyBg3hufpcbIoI4C+YsoRpv1gQpos/LY+0/TE6Xy1UeHLSEBHXmDwVvH3zw i35+zc1bapGaq7Y3UC8Rowd9zgaUqY+NOcKDb4rE0s9MTn7bG28bQwWMxW0bMTLj Bep+F9fVKN9TOwEQao4AcdIPtaUpACzwe79EEE/2OeQAb+6vKlTV3fYoJYR7MI3y gbb9gueHB3FUvqdqqiWqi/LhK4SiJuzH8j0+6TOv85WIIPx2UgR+cB8EfwemxVVl FMMXxHECAwEAAaOCBUgwggVEMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUn4qx tfGx3oL0J3y+iM3eqUOBo0swfgYIKwYBBQUHAQEEcjBwMDsGCCsGAQUFBzAChi9o dHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxpcy1hdXRob3ZnMzAx BggrBgEFBQcwAYYlaHR0cDovL29jc3AwOS5hY3RhbGlzLml0L1ZBL0FVVEhPVi1H MzCCAiMGA1UdEQSCAhowggIWgh9wdXNoMi5hbW1pbmlzdHJhdG8udW5pY3JlZGl0 Lml0ghNwdXNoMi5vbmVtYXJrZXRzLmh1ghhwdXNoMi5ib2xzYS51bmljcmVkaXQu ZXOCE3B1c2gyLm9uZW1hcmtldHMuaHKCE3B1c2gyLm9uZW1hcmtldHMuZ3KCE3B1 c2gyLm9uZW1hcmtldHMuZXWCE3B1c2gyLm9uZW1hcmtldHMuZXOCE3B1c2gyLm9u ZW1hcmtldHMucHSCE3B1c2gyLm9uZW1hcmtldHMuY2iCE3B1c2gyLm9uZW1hcmtl dHMuYmeCE3B1c2gyLm9uZW1hcmtldHMucGyCGHB1c2gyLmJldXJzLnVuaWNyZWRp dC5ubIITcHVzaDIub25lbWFya2V0cy5yb4IZcHVzaDIuYm91cnNlLnVuaWNyZWRp dC5mcoITcHVzaDIub25lbWFya2V0cy5kZYIfcHVzaDIuaW52ZXN0aW1lbnRpLnVu aWNyZWRpdC5pdIITcHVzaDIub25lbWFya2V0cy5ubIIZcHVzaDIuc3RydWN0dXJl ZGludmVzdC5sdYITcHVzaDIub25lbWFya2V0cy5hdIIYcHVzaDIuYm9sc2EudW5p Y3JlZGl0LnB0ghNwdXNoMi5vbmVtYXJrZXRzLnNrghNwdXNoMi5vbmVtYXJrZXRz LnNpghNwdXNoMi5vbmVtYXJrZXRzLmN6MFEGA1UdIARKMEgwPAYGK4EfARQBMDIw MAYIKwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1kb3dubG9h ZDAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMEgGA1Ud HwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwwOS5hY3RhbGlzLml0L1JlcG9zaXRvcnkv QVVUSE9WLUczL2dldExhc3RDUkwwHQYDVR0OBBYEFCP3saOP6UKCD4LnM/g6N2IF vtTtMA4GA1UdDwEB/wQEAwIFoDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA zxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGP6IanfQAABAMASDBG AiEA1Wi4G30utxmr9jmIaMz+Ni0VzIJRPL6YzSW29PgCLuoCIQDGSQRIpZ8/Ghit Hxfp7CBS33ul7iXNgtdp4TQNPkzOOQB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7 uocyHf0eN45QAAABj+iGp7QAAAQDAEcwRQIgQWIkNta/F1Wa/verF3V4dVyWq0PW FO5GMEuK7FU4ANMCIQCb2BvVct+tdd6f0cOkt7jxiIbMMt5d/9yuBMVPDe9p2gB2 AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj+iGp7kAAAQDAEcw RQIgIDogh7RlDcAtmDXhDAhaK6jFsY1mU3DToqI0gveYjGICIQDnOZ1k6Vof6uKa 89y5sEB9q/l0NSPstzL6Gfh8FGTTyjANBgkqhkiG9w0BAQsFAAOCAgEAmsG5H+iF smAlSvahiUzgCpU+AvtB2fo1XZfh6nRMz6Sipi4nAGOGp9DNAUCEwnEjm7+e413P uSFr7muCJSn7G7U0mlrN53m39kJn+y8fHBP2F/Go5K1WicMB+vH9fid2k0LgCeW6 oOE9/Q0BdAzlAugCHboLPtKwCbi8P+6sye/CwQ6CPD4tSvk4SJn0aXqdnpp8uK/R 9wfNZix7n1sEQ/t23X/DPUzPnM4DdqvtB1/vLe3Xmu+onwaC7pQXnHpu1AMD/qLX 46bRFvUoactXaZxkPhykfquSXheEp1kBmX/4XGLlPYFJEcthpJ94QaPg1DM34Q73 tpdaV9TZ+at6EpV1myy4V1xm174HXJyg/YGYuEhhZWdwgsnrKb/ivZFJCmZpcWur WNA/jwjkTPId3vOOwr2+0rjRiTadl7PA1wi05irosHgGxrOu1FgJ6YrQF0zcCvc5 T/e9gS3mnrncvcd8xCzl04dBOguwxGLVhTEcl+ojcSAGB48n2AwPpAiNkTalLmse xRCaJCznHZnXxKQbowxWX6F0MbT4LbMr1Ot/CN7q8geFrWljKWUlmFGJSEeeltds HWK31ZYhowIoXqqR1YGvMFBp3H0Z6EilLRQCLKbrGBL7Ff4zN/J4T0v0/mu6GAqT 29kOlXt4Vw1wwt6jhACCrJk4iYgO8KTEeeU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt94lwqSmPPnMZ5c3e+fq YbMC5qgO7mh215BXrwqpGKu6aslZhFbFDazNvAntGInGta8pni2N+vzvWxf9fizt OxpXCoTzliTGRUD2SVIiQhWTG3QpZ3ExmQj4+wJWi/TL5cxcGHYABdDJTyOH1Hal 5LxtRmD6QYJC5MzZuAudTH/WzOaQzxl+HXIHDEBsD1oZwB+eNd/WxSATPHAjjMzj w5oGHa8HfIfeFfKRIFedtuV7yJ13LdbIYp5bG3Nldv2EIW4KMJaq5HWy/hk6jyQl ox7aoAF6L3n6jujFTMoVZxrfd5mZuV5Hj+uE1vcngVn2jpurl1rTTh45UcO10N6Z 4ioK3/vqbsOImLAVKps5QeU7e8daqESpz+3XuLpSrK8XSvwn38xOCH34HdR4wHLw V62R74+/YWLn13GPPox2LIyBg3hufpcbIoI4C+YsoRpv1gQpos/LY+0/TE6Xy1Ue HLSEBHXmDwVvH3zwi35+zc1bapGaq7Y3UC8Rowd9zgaUqY+NOcKDb4rE0s9MTn7b G28bQwWMxW0bMTLjBep+F9fVKN9TOwEQao4AcdIPtaUpACzwe79EEE/2OeQAb+6v KlTV3fYoJYR7MI3ygbb9gueHB3FUvqdqqiWqi/LhK4SiJuzH8j0+6TOv85WIIPx2 UgR+cB8EfwemxVVlFMMXxHECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 112434548255248748909598527940165477995 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 13:01:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 13:01:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'push2.onemarkets.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750115031384313494883312671094263650593462196444074251034781784622182499159609277403929142777425548593018257616079445350271945559495295954196046033721378857770964424496132098982337366595520294643832270258271713005486512253867979845761525190590745961830830303617333184326274393231926974985490960795613467803048104022792661698926949488849371764141987580809463014409180897267880588505846242381736006134891912341862024218470280139430901947884098188756713200279636138937820064313412379048601930712744359943107759035711706650416571803754384530032232603863937773160398843368499330727457644519758035680643279647108575754181125426723492542244428290774573324963931898768774445982834816463903939356190174647763722513906342487615638071383820005806852835626063517761038122795824938695847791452802239314551413253466758307056521565201097532438626393091025823504339139490029640634993390022481230032548527194040594782096571448193480260745957008003318807002428453259492577396838658007779488338966991886400799557154313414632702748372745896419191658271317423481050649998506557803764877490975205387746776673697766610950746081865843261924761376038969609408306990174956244512245108000384275064880046645242587713267675353282164146074888487210305664568509553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (538 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.amministrato.unicredit.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.bolsa.unicredit.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.beurs.unicredit.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.bourse.unicredit.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.investimenti.unicredit.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.structuredinvest.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.bolsa.unicredit.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push2.onemarkets.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23f7b1a38fe942820f82e733f83a376205bed4ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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