energy-upload.cert.poste.it

- POSTE ITALIANE S.p.A. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 35:a9:7d:2f:1c:5a:11:22:99:b6:43:fb was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

POSTE ITALIANE S.p.A.

Organization: POSTE ITALIANE S.p.A.
State / Province: Roma
Locality: Roma
Country: IT

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 35:a9:7d:2f:1c:5a:11:22:99:b6:43:fb
Serial Number (int): 16607605148896455364210738171
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 04:3d:ac:86:f6:69:89:1b:9c:32:f0:db:32:d9:7a:0a:87:c8:75:5e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): a4:e2:38:0f:e9:46:ff:e5:3f:e5:db:b5:e5:d1:71:d9:57:86:28:f0
Fingerprint (sha256): 05:00:b8:35:8e:44:4d:c3:a1:38:41:79:47:80:7d:a8:00:cc:f7:43:e7:5b:66:69:e3:41:30:c1:5a:34:9d:81

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate energy-upload.cert.poste.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for energy-upload.cert.poste.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energy-upload.cert.poste.it

Other certificates including the domain name poste.it

(limited to 100 certificates)
bacheca.poste.it
lemiecarte.poste.it
noidiposte.poste.it
spidposte.test.poste.it
portale-fms-be.svil.poste.it
bancopostaclick.poste.it
bolgette.poste.it
seguimi-imprese.poste.it
erecruiting.poste.it
nft.poste.it
pcommerce.sv.poste.it
proxywscorrieritest-api.poste.it
riscocomuni.fiscalitalocale.poste.it
postepay.poste.it
acquistionlinetest.poste.it
seguimi-privati.poste.it
erecruiting.poste.it
energycvm-fe.cert.poste.it
prestitofindomestic.poste.it
sicinf.poste.it
open.bancopostaclick.poste.it
librisociali-fe.poste.it
viviwelfare.poste.it
postecards.poste.it
ipzs.poste.it
sslcertificate1.queue-it.net
gen3mngtazwe.cloud.poste.it
postecards.poste.it
ep-svc-ws-deviceregistration.poste.it
myposteonline.poste.it
pcommerce.sv.poste.it
fondi.test.poste.it
bancopostaclick.poste.it
risparmiopostale.poste.it
certitelcatasto.poste.it
raccomandata-ce.poste.it
upload.poste.it
postedoc.poste.it
www.poste.it
postecert.poste.it
widget.poste.it
postecasa-ultraveloce.poste.it
paccoweb.poste.it
posteagcds.poste.it
infodeliverylight.poste.it
energy-upload.cert.poste.it
noidipostespcoll.poste.it
start.prenotazionevaccinicovid.coll.lombardia.poste.it
noidipostesp.poste.it
fea-online.test.poste.it
postedeliveryweb.poste.it
xolClient.cloudapp.poste.it
companywelfarecert.poste.it
profilocommercialeimprese.poste.it
crmucampcert-be.poste.it
gestionepec2.poste.it
apppaycodice.mobile.poste.it
piafapp.poste.it
corrispondenza.poste.it
postecert.poste.it
ELOQUATST01.poste.it
myposteonline.poste.it
energy-voltura.poste.it
e-filatelia.poste.it
sonarqube.alm.poste.it
bancopostaonline.poste.it
postedeliveryweb-retail.poste.it
corrispondenza.poste.it
idp-poste.poste.it
ftps.monitoraggioerendicontazione.poste.it
cartadigitale2e-webview.poste.it
aggiornadati-privati.poste.it
cas-business.poste.it
postecards.poste.it
ep-svc-ws-deviceregistration.poste.it
telegramma-ce.poste.it
postecert.poste.it
francobollofacile.poste.it
noidipostespcoll.poste.it
postel-be.poste.it
open.bancopostaclick.poste.it
noidiposteapp.mobile.poste.it
amministrazione-pto.poste.it
jms-vassist-bs.mobile.poste.it
acquistionlinevas.poste.it
comunicazionionline.poste.it
posta-online.poste.it
seguimi-privati.poste.it
aisyn.poste.it
bancopostafondi.poste.it
postepay.poste.it
unep.poste.it
sslcertificate1.queue-it.net
registrazione-pa.poste.it
calendarizzazionevisitemediche-be.poste.it
energyocr-fe.svil.poste.it
*.mlkfreshandfood.test.poste.it
registrazioneprivati.poste.it
INFOPAL.POSTE.IT
carrello.poste.it

Certificate

The complete raw certificate details for energy-upload.cert.poste.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA231rJP4BERMXwbfQjnvX
r8Ic0G/bpgeuBf4sgGYv+fs1MBxhWU4e4PIJdZJUyz0xArCitopwHDFPLJTbMjSU
VAwRbBUjpj0ukfAu7V3/uInrrfQDBsphDimiV9DXoisyXvm6dlgHuSzhVk6BK87R
k0J9Nv9AqEU2JB5LwfCFKdf6LEpiAUQOt3atgJ7QqliPpZq+fndsdQmJ7GoTEKpU
WxGryWumcTGfU3VhdFS8+DBYXsSeKeNP82uDsCGfxrFE74tlM89/J2a2MGpGUPJb
B8vHg2Y4neLPgdCJZLY1ioMVXvgOaxrkQiepZgDjAsw+/PxxrXnMvQ2DFQu/BXec
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16607605148896455364210738171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 13:41:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 13:41:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'POSTE ITALIANE S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'energy-upload.cert.poste.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27708034971329667831906859952850496156166771175461695459489754346546724547895587570838014559793787702672930276328088711883399506873900251807710295150724047509742111273236314560544172683483099326381683773405620605181498638773561989668072566656820711807341988366404893221957100224703141655437399074328602798119358376265716613350390645374351207590357513608701511552469665985906862280628974332629775638840453357166975785347120989125833834899263319136909098530567185313335353490139555489785467331628638000958569298958715205660126334974524423828257820581132198395240989933641509278520332942291927622289418483894291531275429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy-upload.cert.poste.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							043dac86f669891b9c32f0db32d97a0a87c8755e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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