certitelcatasto.poste.it

- Poste Italiane S.p.A. -

Issued by Postecom CS3

About this certificate

This digital certificate with serial number ec:1e:f0:a7:4d:68:3d:d1:69:50:dd:ae:29:63:06:e4:cf:2a:a3:03 was issued on by Postecom S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • KeyUsage [DataEncipherment DigitalSignature KeyAgreement KeyEncipherment] (00011101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • The DER encoded certificate serial number is 21 octets long. If this is surprising to you, note that DER integers are signed and that SNs that are 20 octets long with an MSB of 1 will be automatically prefixed with 0x00, thus bumping it up to 21 octets long. SN: 00EC1EF0A74D683DD16950DDAE296306E4CF2AA303 Certificates must not have a DER encoded serial number longer than 20 octets (RFC 5280: 4.1.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Poste Italiane S.p.A.

Organization: Poste Italiane S.p.A.
Organization unit: Postecom S.p.A.
Country: IT

Postecom S.p.A.

Organization: Postecom S.p.A.
Organization unit: Servizi di Certificazione
State / Province: IT
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): ec:1e:f0:a7:4d:68:3d:d1:69:50:dd:ae:29:63:06:e4:cf:2a:a3:03
Serial Number (int): 1348011808149052753036178234300564462152714986243
Serial Number lenght: 160 bits, 20 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 6b:a3:0a:87:f7:92:7f:2c:8f:a9:11:5a:75:b3:76:eb:d7:f8:14:93
Fingerprint (sha256): 03:85:82:55:cd:55:89:9d:b2:0d:89:03:ec:15:bf:bb:38:c4:10:3c:fb:40:a9:76:67:41:66:46:9a:96:61:f4


Revocation information

OCSP Server: http://postecert.poste.it/ocsp
CRL Distribution Point: http://postecert.poste.it/postecomcs3/crl.crl

Check the revocation status for certificate certitelcatasto.poste.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certitelcatasto.poste.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certitelcatasto.poste.it

Other certificates including the domain name poste.it

(limited to 100 certificates)
bacheca.poste.it
lemiecarte.poste.it
noidiposte.poste.it
spidposte.test.poste.it
bancopostaclick.poste.it
bolgette.poste.it
seguimi-imprese.poste.it
erecruiting.poste.it
pcommerce.sv.poste.it
proxywscorrieritest-api.poste.it
riscocomuni.fiscalitalocale.poste.it
postepay.poste.it
acquistionlinetest.poste.it
seguimi-privati.poste.it
erecruiting.poste.it
energycvm-fe.cert.poste.it
prestitofindomestic.poste.it
sicinf.poste.it
open.bancopostaclick.poste.it
viviwelfare.poste.it
postecards.poste.it
ipzs.poste.it
sslcertificate1.queue-it.net
ep-svc-ws-deviceregistration.poste.it
myposteonline.poste.it
pcommerce.sv.poste.it
fondi.test.poste.it
bancopostaclick.poste.it
risparmiopostale.poste.it
certitelcatasto.poste.it
raccomandata-ce.poste.it
upload.poste.it
postedoc.poste.it
www.poste.it
postecert.poste.it
widget.poste.it
postecasa-ultraveloce.poste.it
paccoweb.poste.it
posteagcds.poste.it
infodeliverylight.poste.it
noidipostespcoll.poste.it
fea-online.test.poste.it
postedeliveryweb.poste.it
xolClient.cloudapp.poste.it
profilocommercialeimprese.poste.it
crmucampcert-be.poste.it
gestionepec2.poste.it
piafapp.poste.it
corrispondenza.poste.it
postecert.poste.it
ELOQUATST01.poste.it
myposteonline.poste.it
energy-voltura.poste.it
e-filatelia.poste.it
sonarqube.alm.poste.it
bancopostaonline.poste.it
corrispondenza.poste.it
idp-poste.poste.it
ftps.monitoraggioerendicontazione.poste.it
cartadigitale2e-webview.poste.it
aggiornadati-privati.poste.it
cas-business.poste.it
postecards.poste.it
ep-svc-ws-deviceregistration.poste.it
telegramma-ce.poste.it
postecert.poste.it
francobollofacile.poste.it
noidipostespcoll.poste.it
open.bancopostaclick.poste.it
noidiposteapp.mobile.poste.it
amministrazione-pto.poste.it
jms-vassist-bs.mobile.poste.it
acquistionlinevas.poste.it
comunicazionionline.poste.it
posta-online.poste.it
seguimi-privati.poste.it
aisyn.poste.it
bancopostafondi.poste.it
postepay.poste.it
unep.poste.it
sslcertificate1.queue-it.net
registrazione-pa.poste.it
energyocr-fe.svil.poste.it
registrazioneprivati.poste.it
INFOPAL.POSTE.IT
carrello.poste.it
pec.cloudapp.poste.it
postecards.poste.it
patrimonio.poste.it
feabancoposta.poste.it
ppoefunc02azwe-prod.poste.it
registrazioneprivati.poste.it
business.poste.it
securelogin.bp.poste.it
risparmiopostaleonline.poste.it
ccs-stssvil.poste.it
ttoolobfunct01azne-test.poste.it
fdr.poste.it
bancopostaonline.poste.it
e-filatelia.poste.it

Certificate

The complete raw certificate details for certitelcatasto.poste.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fCH5wiRaOXMOvXlTBx9
aiody8W1X2ezPwfCPvCGwhHyGBIvPLie0r1FUVG5Vw9mgzBrZTOV0L1x8UBb12ov
3q3pNOffPNRY2UEFGSlYvu0G3T7kkNOjVbjl2kSB/2KEbHxMNpwnDYEkxOxlyvkY
Q6MQFd4ZA7TeHK4NkR7x59W19Vpve5FpeiWOdPO6GXcCoO28/EPcqew4aCq9L9BP
gqycwwuxeUcaFe9tBZjjLiuWZZMzWdlkMi83Fc3NXvC4pYuZo5SsjPJB9sTaMhWe
qtJvxO51UzFpKVlQtIWkwFTamZAEv+xNd2UL84horHQcEIEajO7WxIibbOv/ULhq
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1348011808149052753036178234300564462152714986243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Postecom S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servizi di Certificazione'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Postecom CS3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-09 09:08:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-09 09:08:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Poste Italiane S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Postecom S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'certitelcatasto.poste.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26502415930092754515934360033059931645836277934630338899359897233715784696454909463710636585445374021766120206830045228504049080848502279179412835008280994821742898344948513195089577633414766847743280910422230391249553524072269287675597266765007868828471917010267968431946332449337780199044805985201592373804460649398559720797172295958003691552420678184241395514554489314143991439821702176075833505355886599968960968879834653104386313251707865159758886167562325372366499628396826580371744888342495725666379272074929852893174808907373906366718763457463547295426742583583943743208528028465925263833329065365394429602451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.76.11.1.1.4.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://postecert.poste.it/manualioperativi/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postecert.poste.it/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certitelcatasto.poste.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CyberTrust'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore CyberTrust Root'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String ''Rb'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postecert.poste.it/postecomcs3/crl.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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