www.ovs.it

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 4b:11:74:25:8e:67:59:72:59:13:05:fc:88:25:e1:aa was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.ovs.it

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:11:74:25:8e:67:59:72:59:13:05:fc:88:25:e1:aa
Serial Number (int): 99782724465491632313035803642231644586
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 99:64:4c:07:bf:b9:89:d6:ea:5b:51:71:e0:34:2a:a8:35:ac:b5:75
Fingerprint (sha256): 06:3b:9f:78:e9:36:03:50:b5:70:89:d1:32:e8:dc:0d:10:b8:c4:ab:0d:6d:dd:09:bf:fb:53:d5:a1:d3:2c:02

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.ovs.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ovs.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ovs.it
ovs.it

Other certificates including the domain name ovs.it

(limited to 100 certificates)
ssl763624.cloudflaressl.com
connect-ch.ovs.it
*.gcp.ovs.it
www.strengthflight.com
ovssocialfilm.ovs.it
ovsactive.ovs.it
ovs.it
id.ovs.it
dressipi-staging.themodist.com
kendall-kylie.ovs.it
www.ovs.it
connect-ch.ovs.it
orion-topology.ovo.software
nv.app.qnnre.work
board.gcp.ovs.it
ovssocialfilm.ovs.it
artsofitaly2017.ovs.it
ovsactive.ovs.it
jeanpaulgaultierforovs.ovs.it
artsofitaly.ovs.it
ribbsoftware.com
kidscreativelab.ovs.it
login.weekplanningtest.gcp.ovs.it
user.proptool.adityaworks.com
redthemes.net
ovsfriends.ovs.it
kidscreativelab.ovs.it
remoterx.com
jeanpaulgaultierforovs.ovs.it
kidsactivecamp.ovs.it
connect-ch.ovs.it
jeanpaulgaultierforovs.ovs.it
artsofitaly2017.ovs.it
connect-ch.ovs.it
ksusliderprediction.sqwadhq.com
admin.xcpassport.snareroll.xyz
ovssocialfilm.ovs.it
opswell.co.uk
3829lakepickettct.com
weekplanningtest.gcp.ovs.it
app-dev.salientmotion.com
peutun.com.ar
demo.prodsight.ai
ovskids.ovs.it
coderality.com
www.actors.page
blog.bixbyapps.com
dcms.ovs.it
visualcheckdashboard.gcp.ovs.it
artsofitaly.ovs.it
pay-details.a24group.com
artsofitaly2017.ovs.it
eom.gcp.ovs.it
dcms.ovs.it
login.addressbooktest.gcp.ovs.it
www.ovs.it
*.ovs.it
artsofitaly2017.ovs.it
dashboard.ovs.it
pets.easyrbx.com
ssl763622.cloudflaressl.com
connect-ch.ovs.it
concorsi.ovs.it
ssl763624.cloudflaressl.com
kendall-kylie.ovs.it
ovs.it
dynamiccheck.gcp.ovs.it
dashboard.ovs.it
www.janngo.africa
login.addressbook.gcp.ovs.it
kidscreativelab.ovs.it
canada.monument.nyc
content.ovs.it
ovskids.ovs.it
www.sylox.io
hath.groupcar.com.vn
artsofitaly2017.ovs.it
*.ovs.it
covid19.theorangealliance.org
artsofitaly2017.ovs.it
badge.ovs.it
dev.shuffleme.in
content.ovs.it
social.stratfor.com
www.powerpistons.in
ovs.it
negozi.ovs.it
addressbooktest.gcp.ovs.it
v1.torch.app
concorsi.ovs.it
ovs.it
dressipi-staging.eshoptest.ovs.it
content.ovs.it
concorsi.ovs.it
admin.victory-garage.com
recolor.online
ovskids.ovs.it
kidscreativelab.ovs.it
2016.artsofitaly.ovs.it
arditobirraio.it

Certificate

The complete raw certificate details for www.ovs.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKB0XOUVv1GW4mDtU/NP
kDy0k/zirBjjdd8gmi40hnaUEn+ag2dTvyA7GM4w0Ofdu+JbqyajzgEfkmkh/Hi4
KXKXRS1+zwaNmNEQ1LSyCf5IMQW7F3hXcd05uqxFLkqZVcaOh83/ETPsjTXNw/pZ
qUC5OpM6uykButQpgMGY4uZT09oTVFlsJ/L4coOtVDqp6mkqYi98WEDLMrXXXgQ3
nRyrP/3vY15kZw/bjdg+uM4mobdXwBWKjQlLNdEL5XiYkiBS6tqElqxQTqms9xni
Ith4C1kI73s3AzsAJ3Oo5HMP8LkoUqVwwvO1PSEhm94WAwBYydwLa/F3MHq2E4HY
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99782724465491632313035803642231644586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ovs.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20782205098279898633795185719030458476458733231132725313624125981412635543137904069668369476777307847614373974063295910431438824735928447822484742249924721047958815107286137960289337223736980249350863302099151263233750696764740886668619759741971585536374935087457118483538022610885139427463655535524572981760588027154339475537109033108918495444454599226721754387075471211674306310274493799463551231502111407180718085694894573781867064314217172850013098244209650881557573414064120181852897893488517142218809238354683899915455091468026329632154476393889848356588760129899206977594117423688863407406261544482823647385667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovs.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovs.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015add9bcf2200000403004630440220204fe75147079e98a8ab2710dadb86ac1d52814267b97f2ec4ecf7c0cc4e91c4022054ed5c1a529169cbd91bd9072f7b75a4c1fa798c57f0c00e24deda140cfa954d007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015add9bcf3a0000040300483046022100ed10915d917995fa0eb10f214ba1003960d5286003bc1b44c65709e5641b0c65022100c1dd00b3544279b35f8a3b8cd504986b8511584683b5d76df5a9a4d28d2e5c2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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