globaltrade.it.hypovereinsbank.de

- UniCredit Bank AG -

Issued by Actalis Organization Validated Server CA G1

About this certificate

This digital certificate with serial number 15:ae:0e:ad:ee:4d:3a:e7 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit Bank AG

Organization: UniCredit Bank AG
State / Province: München
Locality: München
Country: DE

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 15:ae:0e:ad:ee:4d:3a:e7
Serial Number (int): 1562202260934310631
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 4f:7b:ad:1c:76:02:2f:62:6e:bd:f7:7c:62:5f:33:49:e2:e5:92:33
AuthorityKeyId: 23:b4:cc:8e:be:20:f9:24:d5:a9:90:a5:0a:26:39:8e:d5:95:05:96

Fingerprint (sha1): 61:92:13:6b:41:fa:3d:95:30:f3:62:a7:79:6a:c7:d0:95:ce:17:76
Fingerprint (sha256): 00:5e:c8:6f:34:34:5d:5f:22:39:d9:bd:fc:95:c1:6b:55:e1:de:29:b2:e6:2e:d9:98:28:eb:fc:7a:b6:bb:0f

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authov

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G1
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G1/getLastCRL

Check the revocation status for certificate globaltrade.it.hypovereinsbank.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globaltrade.it.hypovereinsbank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globaltrade.it.unicredit.eu
globaltrade.it.hypovereinsbank.de

Other certificates including the domain name hypovereinsbank.de

(limited to 100 certificates)
www.hypovereinsbank.de
pfp.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
produkte.hypovereinsbank.de
communications.qa.hypovereinsbank.de
hbci-01.hypovereinsbank.de
blog.hypovereinsbank.de
res-findata-uj-v3.unicredit.it
angebot.qa.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
webtraining-qsu.hypovereinsbank.de
banking4business.hypovereinsbank.de
www.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
communications.qc.hypovereinsbank.de
ucforms.qa.hypovereinsbank.de
my.hypovereinsbank.de
about.hypovereinsbank.de
forms.hypovereinsbank.de
workingcapital.hypovereinsbank.de
virtuals.qc.hypovereinsbank.de
mcatalogue.hypovereinsbank.de
hbci-01.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
sucmetrics.hypovereinsbank.de
kampagne.hypovereinsbank.de
communications.qc.hypovereinsbank.de
hypovereinsbank.de
forms.hypovereinsbank.de
finanzkonzept.hypovereinsbank.de
contact.hypovereinsbank.de
MQ.GET.HVB.HV.GWXIGW00.MQEXTGWGET.HYPOVEREINSBANK.DE
www.hypovereinsbank.de
multiweb.it-v.hypovereinsbank.de
geschichte.hypovereinsbank.de
privatebanking-standorte.hypovereinsbank.de
il.hypovereinsbank.de
communications.hypovereinsbank.de
akamai-san228.exacttarget.com
www.qc.hypovereinsbank.de
hypovereinsbank.de
press.qa.hypovereinsbank.de
immobilienfinanzierung.hypovereinsbank.de
kredit.qc.hypovereinsbank.de
tpas.application.hypovereinsbank.de
res-findata-hv-v2.hypovereinsbank.de
hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
ucforms.hypovereinsbank.de
dossiers.hypovereinsbank.de
www.qc.hypovereinsbank.de
hypovereinsbank.de
stats.hypovereinsbank.de
dossiers.hypovereinsbank.de
www-gimb.qc.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
communications.hypovereinsbank.de
ratenkredit.hypovereinsbank.de
webtraining.hypovereinsbank.de
angebot.hypovereinsbank.de
hvbforms.hypovereinsbank.de
antrag.hypovereinsbank.de
upload.hypovereinsbank.de
uat.omnichannel.hypovereinsbank.de
euroweb-sin.application.hypovereinsbank.de
kredit4business.hypovereinsbank.de
geschichte.hypovereinsbank.de
hbci-01.hypovereinsbank.de
forms.hypovereinsbank.de
my.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
akamai-san228.exacttarget.com
virtual-reality.hypovereinsbank.de
kredit.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
tpasgw.application.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
www.hypovereinsbank.de
ebics-clearing-itu.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
services.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
empfehlen.hypovereinsbank.de
pfp.hypovereinsbank.de
allianz.hypovereinsbank.de
antrag.qa.hypovereinsbank.de
ebics-clearing-qsu.hypovereinsbank.de
retailevents.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de
ebics.qc.hypovereinsbank.de
my.qc.hypovereinsbank.de
produkte.hypovereinsbank.de
globaltrade.hypovereinsbank.de
ilwebdav.hypovereinsbank.de
my-mobile.qc.hypovereinsbank.de

Certificate

The complete raw certificate details for globaltrade.it.hypovereinsbank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhDCCBWygAwIBAgIIFa4Ore5NOucwDQYJKoZIhvcNAQELBQAwgZUxCzAJBgNV
BAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGll
dHJvMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzE0MDIGA1UE
AwwrQWN0YWxpcyBPcmdhbml6YXRpb24gVmFsaWRhdGVkIFNlcnZlciBDQSBHMTAe
Fw0xOTAyMTExNTA5MzZaFw0yMDAyMTExNTA5MzZaMHsxCzAJBgNVBAYTAkRFMREw
DwYDVQQIDAhNw7xuY2hlbjERMA8GA1UEBwwITcO8bmNoZW4xGjAYBgNVBAoMEVVu
aUNyZWRpdCBCYW5rIEFHMSowKAYDVQQDDCFnbG9iYWx0cmFkZS5pdC5oeXBvdmVy
ZWluc2JhbmsuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZpeOV
XZX/DtV23iNyexLu+OD64PrhnOJ7dUVYzLUK/27ZOSDP3yK+OWFbMnqQ7IhqXZML
uwSJio3RnW7K4Y+o24ij5HS4Dpq1505h0jNQNwCFeqMUbqBEYAgjvF7v4sNWcw3e
GDWPQuylD+R6q2Z58/qsM39aPFOKF6B0lS3zw9AHn0ES0dR3levOcqqwdqUAoNkx
xfSYKEA4cVGNb6hKQc98r7rwgqtCnvmMXIJ4Vp73tVb/54E5lbKXKQpUJeHohccP
XNtt0u+G80FUJKZMQMfn50xAfEs+IGz5qgHpv5NtPcxL//B7Nch/zTMPp8/S4X15
1DfRnFd6xdwuMlx9AgMBAAGjggLvMIIC6zAMBgNVHRMBAf8EAjAAMB8GA1UdIwQY
MBaAFCO0zI6+IPkk1amQpQomOY7VlQWWMHwGCCsGAQUFBwEBBHAwbjA5BggrBgEF
BQcwAoYtaHR0cDovL2NhY2VydC5hY3RhbGlzLml0L2NlcnRzL2FjdGFsaXMtYXV0
aG92MDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA5LmFjdGFsaXMuaXQvVkEvQVVU
SE9WLUcxMEkGA1UdEQRCMECCG2dsb2JhbHRyYWRlLml0LnVuaWNyZWRpdC5ldYIh
Z2xvYmFsdHJhZGUuaXQuaHlwb3ZlcmVpbnNiYW5rLmRlMFEGA1UdIARKMEgwPAYG
K4EfARQBMDIwMAYIKwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJl
YS1kb3dubG9hZDAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF
BwMBMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwwOS5hY3RhbGlzLml0L1Jl
cG9zaXRvcnkvQVVUSE9WLUcxL2dldExhc3RDUkwwHQYDVR0OBBYEFE97rRx2Ai9i
br33fGJfM0ni5ZIzMA4GA1UdDwEB/wQEAwIFoDCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABaN0kZa4A
AAQDAEcwRQIhANM5DQx1GkfHsi6YdfIuGPNoyM4uQic2v+aJOvDLOT47AiByFsgC
cdkTnoDvz21lWsIY8hEl/spJa5GqVd8IypOO4AB2AO5Lvbd1zmC64UJpH6vhnmaj
D35fsHLYgwDEe4l6qP3LAAABaN0kZG0AAAQDAEcwRQIgFoqQbAO88BNqa5VnLQvf
2H84b03C1i2Ub99UM0cwACACIQCcyHRqG8wVvxh46i6JndHZ1R7q+dCRF73/GRfS
JUc3sDANBgkqhkiG9w0BAQsFAAOCAQEAniG31NDTbZMi4NRHzsvoEwnDseJXPksv
kDrfeEvTiaa/vJ6cZNj88CSEjOUN5Ms9yknxKfMntq8Vo8TV64X/YIffuAvUdq1K
LI+OqmqIT/F4lzj29z2+PCGMgCsYrPB49jws0d9vkWN/iXz2HCmMjr0+/2qKuTiZ
BGI33+4zJ7StJ2AGPajGKAkrh44bEjI9ncS75zC5TyzDHCK6ehnit0LLwZxr9dd8
Qb3ytw6kaPuD3lbSVQQks1N9SOxBLhd6nA3HMzIbtmwheqGk52rabJG0jwVYvblw
Gn1yILceU32v3zWVKGg4wSC9Ks4AHNUpjPmr2zDWQpHi/D5M+0ORFg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaXjlV2V/w7Vdt4jcnsS
7vjg+uD64Zzie3VFWMy1Cv9u2Tkgz98ivjlhWzJ6kOyIal2TC7sEiYqN0Z1uyuGP
qNuIo+R0uA6atedOYdIzUDcAhXqjFG6gRGAII7xe7+LDVnMN3hg1j0LspQ/keqtm
efP6rDN/WjxTihegdJUt88PQB59BEtHUd5XrznKqsHalAKDZMcX0mChAOHFRjW+o
SkHPfK+68IKrQp75jFyCeFae97VW/+eBOZWylykKVCXh6IXHD1zbbdLvhvNBVCSm
TEDH5+dMQHxLPiBs+aoB6b+TbT3MS//wezXIf80zD6fP0uF9edQ30ZxXesXcLjJc
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1562202260934310631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 15:09:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 15:09:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'globaltrade.it.hypovereinsbank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19396263573501752845628472643044035728447349541438950424018579812188549036436916982676831729562080902815508373050460274639275088765743397010898057989169492159742534410860720141165908639316656344184108098466129152601049953731324627235031753652456493045840329757750740996125746034509053054397098806439687343167363411184599329450483801058974223985390695240677094804232900283075578308440598639451337514734460533395366478182435093506623267910374530037139024188982681472611663529885161758522878698527087922691376371196660719986274580194704322272006841739827214111845031655761393195512435814788124244434595979169890626067581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 23b4cc8ebe20f924d5a990a50a26398ed5950596
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G1'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltrade.it.unicredit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltrade.it.hypovereinsbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G1/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f7bad1c76022f626ebdf77c625f3349e2e59233
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168dd2465ae0000040300473045022100d3390d0c751a47c7b22e9875f22e18f368c8ce2e422736bfe6893af0cb393e3b02207216c80271d9139e80efcf6d655ac218f21125feca496b91aa55df08ca938ee0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168dd24646d00000403004730450220168a906c03bcf0136a6b95672d0bdfd87f386f4dc2d62d946fdf5433473000200221009cc8746a1bcc15bf1878ea2e899dd1d9d51eeaf9d09117bdff1917d2254737b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009e21b7d4d0d36d9322e0d447cecbe81309c3b1e2573e4b2f903adf784bd389a6bfbc9e9c64d8fcf024848ce50de4cb3dca49f129f327b6af15a3c4d5eb85ff6087dfb80bd476ad4a2c8f8eaa6a884ff1789738f6f73dbe3c218c802b18acf078f63c2cd1df6f91637f897cf61c298c8ebd3eff6a8ab93899046237dfee3327b4ad2760063da8c628092b878e1b12323d9dc4bbe730b94f2cc31c22ba7a19e2b742cbc19c6bf5d77c41bdf2b70ea468fb83de56d2550424b3537d48ec412e177a9c0dc733321bb66c217aa1a4e76ada6c91b48f0558bdb9701a7d7220b71e537dafdf3595286838c120bd2ace001cd5298cf9abdb30d64291e2fc3e4cfb439116