www2.autostrade.it

- Autostrade per l'Italia S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3d:cf:6d:3f:58:d2:e8:76:00:00:00:00:50:f0:37:66 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Autostrade per l'Italia S.p.A.

Organization: Autostrade per l'Italia S.p.A.
State / Province: Roma
Locality: Rome
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:cf:6d:3f:58:d2:e8:76:00:00:00:00:50:f0:37:66
Serial Number (int): 82159928994107267049104786692152244070
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 78:7e:54:55:0b:41:67:4f:e1:12:db:14:e6:3d:56:81:39:60:56:14
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6f:35:99:24:41:6a:fb:e0:4e:d7:50:e0:9f:fa:6d:f7:ff:ca:31:9c
Fingerprint (sha256): 04:9e:1e:69:86:dc:a9:c7:5c:57:4d:74:31:f2:57:c2:58:fe:2f:24:9f:50:27:72:f3:ea:e0:e7:a5:1e:e3:4f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www2.autostrade.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.autostrade.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.autostrade.it

Other certificates including the domain name autostrade.it

(limited to 100 certificates)
www2.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
www5.autostrade.it
mailbox.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
teonline.autostrade.it
daw.autostrade.it
logos.autostrade.it
logos.autostrade.it
aesr-dn.autostrade.it
supplierregistration.autostrade.it
portal.ncw.autostrade.it
gmc.autostrade.it
www2.autostrade.it
www3.autostrade.it
cdn.autostrade.it
portal.ncw.autostrade.it
www5.autostrade.it
dad.autostrade.it
*.autostrade.it
supplierregistration.gruppo.autostrade.it
supplierportal.gruppo.autostrade.it
www2.autostrade.it
www.autostrade.it
supplierregistration.gruppo.autostrade.it
nga.autostrade.it
nga.autostrade.it
servizitps.autostrade.it
servizi.autostrade.it
fbt.autostrade.it
servizi.autostrade.it
ca.autostrade.it
aesr.autostrade.it
logos.autostrade.it
dpn.autostrade.it
www2.autostrade.it
www5.autostrade.it
cxsrv.autostrade.it
cxsrv.autostrade.it
www3.autostrade.it
meeting.autostrade.it
www.autostrade.it
www2.autostrade.it
filetransfer.autostrade.it
video.autostrade.it
teonline.autostrade.it
brm.ncw.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
cxsrv.autostrade.it
servizi.autostrade.it
www.autostrade.it
servizi.autostrade.it
servizi.autostrade.it
video.autostrade.it
filetransfer.autostrade.it
supplierportal.autostrade.it
sbce-b1-3.autostrade.it
eserv.autostrade.it
*.autostrade.it
www.autostrade.it
www2.autostrade.it
www.autostrade.it
servizi.autostrade.it
*.autostrade.it
nga.autostrade.it
cxsrv.autostrade.it
eserv.autostrade.it
teonline.autostrade.it
www3.autostrade.it
supplierregistration.autostrade.it
aspi-salesforce.autostrade.it
logos.autostrade.it
www2.autostrade.it
teonline.autostrade.it
serviceserp.autostrade.it
aesr-dn.autostrade.it
dad.autostrade.it
*.autostrade.it
logos.autostrade.it
daw.autostrade.it
cxsrv.autostrade.it
eqnx-edge.autostrade.it
servizi.autostrade.it
dpn.autostrade.it
cdn.autostrade.it
AspiWiFi.autostrade.it
logos.autostrade.it
dad.autostrade.it
teonline.autostrade.it
www.autostrade.it
serviceserp.autostrade.it
www5.autostrade.it
AspiWiFi.autostrade.it

Certificate

The complete raw certificate details for www2.autostrade.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82159928994107267049104786692152244070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 09:51:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 10:21:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autostrade per l'Italia S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.autostrade.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862020198469620688281581481824338226699588042192493630863865799339248932936334396741855702433545612969371980258875505737342594095922165777143210661894651182475125641836548206896309414086130394162021455714604243851352003293699764795440887578247713741298642527058896995465768954682399368945175011010434524949423806676146190599782844178359330271535594377736520042071485662560151974467794127065776705538037252153392491232116447282572203028088147767743397594172412659453082021857319153704343945603873941661393181931542956404319754161769427664285940218905046455289780851763257824982581640864000835068326498447775920930822938687273764409478208894468599656965042397103423942965329009318068457928478459164933904469248142608447724283729221557682747500125992651863560129722248875095261609077020807873892837753024473093105600662165603453986697907354563324419967102078057989973639011755602732901997755388931026587722298351618271294540342615662126837290440646631863864560717113131965028692406319305488751350463778428073540297746961716163703852842674479812506536757976629447287201111074730936778430033314020208541505893069201849906274994706612592569692685591914423855733488376086951506056194542741217990058978915903355199808805567544444335457315773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.autostrade.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							787e54550b41674fe112db14e63d568139605614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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