posta.unipr.it

- Università degli Studi di Parma -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 08:0e:f7:58:de:59:93:94:2b:b5:bd:c3:24:65:99:5c was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Università degli Studi di Parma

Organization: Università degli Studi di Parma
State / Province: Italy
Locality: Parma
Country: IT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:0e:f7:58:de:59:93:94:2b:b5:bd:c3:24:65:99:5c
Serial Number (int): 10711532918363181287311350794339850588
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:3a:61:3b:3f:fa:bd:47:b1:10:ea:51:80:1b:ba:c0:71:41:7d:ec
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 42:b0:4f:43:ac:25:3b:1e:57:0f:3a:85:1e:83:e2:c4:b2:61:1e:4a
Fingerprint (sha256): 02:4e:4f:5e:1c:37:58:b7:f6:63:83:b7:a9:41:cd:37:82:03:cc:8f:72:52:a9:16:b3:72:c2:35:a6:98:39:78

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate posta.unipr.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for posta.unipr.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

posta.unipr.it

Other certificates including the domain name unipr.it

(limited to 100 certificates)
elly.dmi.unipr.it
messaggi.unipr.it
www.capas.unipr.it
posta.unipr.it
elly.areatest.unipr.it
www.foundationyear.unipr.it
si.unipr.it
3c.unipr.it
netsec.unipr.it
webmail.pec.unipr.it
gestionemail.pec.unipr.it
ldap.hpc.unipr.it
expo.unipr.it
didattica.unipr.it
webmail.pec.unipr.it
attrezzature.unipr.it
cas2.unipr.it
www.unipr.it
testvdi.unipr.it
www.npfp.unipr.it
wifi.unipr.it
opac.unipr.it
www.idem.unipr.it
www.ailab.unipr.it
gestionemail.pec.unipr.it
concilium.unipr.it
elly2020.dia.unipr.it
pbm.edilizia.unipr.it
www.lab-san.unipr.it
elly.bioscienze.unipr.it
netsec.unipr.it
vpn.unipr.it
helpdesk.unipr.it
signin.campusnet.unipr.it
my.unipr.it
webmail.pec.unipr.it
shibidp.unipr.it
lanottedeiricercatori.unipr.it
webmail.pec.unipr.it
www.unipr.it
elly.areatest.unipr.it
srv-asiweb-03.unipr.it
www.alumniamici.unipr.it
shibidp.unipr.it
scvsa-servizi.campusnet.unipr.it
www.alumniamici.unipr.it
posta.unipr.it
www.facciamoconoscenza.unipr.it
netsec.unipr.it
*.unipr.it
www.kennedysix.unipr.it
netlab.fis.unipr.it
elly.lass.unipr.it
netsec.unipr.it
3c.unipr.it
www.europlex.unipr.it
scvsa-servizi.campusnet.unipr.it
hosting.unipr.it
air.unipr.it
sl63web.fis.unipr.it
netlab.fis.unipr.it
gestionemail.pec.unipr.it
pop.unipr.it
ldap.unipr.it
www.cedi.unipr.it
www.cla.unipr.it
sl63web.fis.unipr.it
www.alumniamici.unipr.it
dusic.unipr.it
www.unipr.it
www.madlab.unipr.it
easyacademy.unipr.it
webmail.pec.unipr.it
webgiss.unipr.it
www.b4peace.unipr.it
koala.cce.unipr.it
gestionemail.pec.unipr.it
www.campusnet.unipr.it
bd2decide.unipr.it
personale.unipr.it
gestionemail.pec.unipr.it
sts.unipr.it
hosting.unipr.it
fm.edilizia.unipr.it
moduli.unipr.it
vpn.unipr.it
cdl-bio.unipr.it
noc.unipr.it
www.cs.unipr.it
www.idem2.unipr.it
netsec.unipr.it
cas.unipr.it
easyacademy.unipr.it
koala.cce.unipr.it
www.cedi.unipr.it
gestionemail.pec.unipr.it
sl63web.fis.unipr.it
www.cs.unipr.it
timbrature.unipr.it
netsec.unipr.it

Certificate

The complete raw certificate details for posta.unipr.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6gQPF3Z9RtNjEarpvF2
ULP2Z7s+VcUeKH+SJY0mJYXVmXzVPw4Ox8fjgyAblmpSE1gILqbkYslKUlI9SIIz
VhLLrOTZU5biyQ01llAsX8UDSEDTGDXeLs3jGyNAbVSdK6fAlcZuk/jHw1ODxLev
fp0j0Yc+3Ltp/5e1CqoQ5qeOUwt1yVc6YdFlE9CcJN3lqNJDfa85H0IWJhyS3Tb2
kSK6Z2bwHJFefOYQtUkmxYLcF9gppDo/uZFcHEguWCGtMSm+QIhW6CvLkzYaJS6D
5JTaLKoirN6MNnRfofdQAsd19EluBMMdufupBDZyEt1+UE3YAdW+16rsiGY4JDKN
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10711532918363181287311350794339850588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Italy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Università degli Studi di Parma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'posta.unipr.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21164672091086292639730524348700806579989945823661113870180536793422100816741140677833993191864688563296880276989925902233313419287596682770678403874882926848463756041517830396315746700838972482244969576042657094612905833226373675938861711800358939138811322659562095680700657708462357149526798130110646433123385648293805973488375285623406233745062083155682880143523937788128216886027664350648528403267392486996323362095316723188710389881891950532295838332496740574555567504056358992262502201751920828597193420981858640917360832672294438305324918749446347499245574863253296919912229273564051987946350768329979514228001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e3a613b3ffabd47b110ea51801bbac071417dec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posta.unipr.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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