*.lumacheria.it

Issued by Actalis Domain Validation Server CA G2

About this certificate

This digital certificate with serial number 0c:d0:bc:cb:5a:f5:30:b5:03:b9:9f:69:0e:ec:ba:38 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lumacheria.it,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d0:bc:cb:5a:f5:30:b5:03:b9:9f:69:0e:ec:ba:38
Serial Number (int): 17034562900466779253727177876314044984
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:b9:b6:2f:1b:42:22:97:9b:6e:5b:13:dd:8f:1e:57:26:ac:26:e1
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd

Fingerprint (sha1): 2a:2a:f9:86:e1:df:56:ad:07:74:1a:ab:0d:7e:22:46:df:6b:5c:14
Fingerprint (sha256): 04:1b:75:9f:01:c5:37:34:aa:ec:3c:25:d8:04:b4:6b:80:78:69:f4:34:d1:b0:7a:ba:10:cf:f2:53:a2:cd:70

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL

Check the revocation status for certificate *.lumacheria.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lumacheria.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lumacheria.it
lumacheria.it

Other certificates including the domain name lumacheria.it

(limited to 100 certificates)
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it

Certificate

The complete raw certificate details for *.lumacheria.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwM1e8+wa0zWi8pfpIAD
0jpjpJkJtgFRGFJw+mBS963lPLnzAT9UUOzrEmpjPrH7daVAkySCJ45MnGYeLbHl
W9M8SC3vnUgLqy9JoOBbDRRSWwHaSbwJVWQC5GmWkfEkI7nTO6GdgeoKQmfMLtSG
5f8+AiP2ZY6pXd39Nj71N0/UhCCEEO1Zdf31bLZ1xLNl2w42rKHQCinnk+9l32uu
idJlbHg58SK1wDkuSDgbJU31Jn1mEqlxXgYMNXN149qTbQgX9StTaYQN3JQBZ2XL
9/SDoHcs6Zp/VZx6AT2KHZ0s8PVK+8skowuOOk29hP2uZuGuQtybpFicY4HNX3Al
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17034562900466779253727177876314044984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 16:32:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 16:32:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lumacheria.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26132911505629127617776475395067271526357363713461391998007122207726087640508939557370115887477694324726570585078258849602610504904700378286262889768605045305647069982664712093931312849335347805073394734415071672616271381321674771962731716009376659766340876012269325976866236783766318479351498271647488338121410899066192998012409300776928245338934965595616345374371737849044979802377958395212585366899730779179785263304359662744997764199720297839209605029853896735230901575986406235411819961045470972453011960923478993158280907313642135018455760796457525157574175131164529300845279820511524193428219838375339718878547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumacheria.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumacheria.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26b9b62f1b4222979b6e5b13dd8f1e5726ac26e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016abc60098800000403004730450221008197a702bddd60b6dabcb16edd2eef57a6789dfb48d1484fed06d2b73849399502203123c0d2240672932a3d88b55f47c11eee9c444062fc1dec495bcb602d6ddbf3007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016abc6007bf00000403004830460221008cd4a07d924cd0fde6b4cfd5b1f45d549e735155d6a55b0fbe2f76dc77baf5cc0221009b0732a9517fd8cacad77069b1b91e5800cc4fc6f0b9c2246d5cd308c4cb10cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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