*.marginterhof.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 62:d0:22:7e:f6:ea:f8:85:f9:3b:78:49:da:f3:e0:44 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.marginterhof.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 62:d0:22:7e:f6:ea:f8:85:f9:3b:78:49:da:f3:e0:44
Serial Number (int): 131345040994589375321512889943265108036
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 38:28:9e:9a:cf:08:50:54:a6:45:33:13:ad:17:79:44:7c:7c:52:1a
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 7b:a3:9c:dc:83:3a:ed:36:08:9f:e7:a0:e7:ee:aa:d6:fa:09:b1:fd
Fingerprint (sha256): 08:70:49:47:1a:b9:18:08:9a:25:e7:cc:50:df:f6:25:b1:79:82:49:5c:18:02:0e:c0:4d:e9:9d:b7:cf:ce:ea

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.marginterhof.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.marginterhof.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marginterhof.it
*.marginterhof.it

Other certificates including the domain name marginterhof.it

(limited to 100 certificates)
*.marginterhof.it
*.marginterhof.it
*.marginterhof.it
*.marginterhof.it
*.marginterhof.it
*.marginterhof.it
*.marginterhof.it
*.marginterhof.it

Certificate

The complete raw certificate details for *.marginterhof.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujxxDhBURYAy9y+JwVC6
fIFZW+SPeC0LOjnFZ+RqXa5UHGNO28bQJ4AMao9WTO3ZnLYLsnaGBmdGRegtt4lH
jtEGoRD8nbtrTC3DkgabEqvMi0bqOmaYIaT4f8tazngDL83jswiBL4MznU5vjUtM
0GGznfG4RLBbDbc+BMPFjD3WgeZNtf8qcy/fuvrQ4/6GSPnI1Ic4j0Q8jnuptvEA
SEdYBWM9zyGZaXyMJyalhtqH+IvOJndg90cvClkkoFfSzV+I4GBtjCEVA9SgRuOX
9ZPPwJGzvL/W/wTt7nTfwVtopoJZKGUjb7Rd8ydjhU7mQOh0NcVz+cLk7BKE29+d
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131345040994589375321512889943265108036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 04:55:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 04:55:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.marginterhof.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23510129597769104639864143453750384721700541097260016735545536617409015682728545998161709499598139038553809816311493929848846115507026736463960942752002540896488554377832846656211104774485560209098182102977007586992588018924110165627215682318552650142157809061226055720359028167610335815350557254222797846180976680512872486664552051242671780894819538357177865082530462656562531080666930120532472238985719926477997689059132746064524035713662787854574228333517340282329060141085672603724140885825306732680181151599184803104600776131714607810593111783438069288113273737506426753958941402836347167520911738663149238197571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marginterhof.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marginterhof.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38289e9acf085054a6453313ad1779447c7c521a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004b61ee56311948ff6282bf6b72276c04ea10758f55c45bd52880e76f20b547f1a37c1aa9b65cbfc9fbbd8515e897d8833fc216372301c138377de25572f63dd36a3b06959980880a5251d407fd9bf2560e86f24e3f0e43491b492edb8f6c5da2c4034c1bf1736510aafe635b2e525c8ce3e30968b004975cf5d4dcba00d0360f872220f279d56d96aa8b8077a226941bb5b477a7df52590c3bff069b298370eb84069258dd68524baaaeb84404a4453851836d45dc4ceec6887f96831bd68ab85082f867f3d98af96b5e7350470a5609927997c4d0526ad71f8a487b88fdcf4c381bd7c3060e36ed17781fcc07551c1dd1032d66445cd25103788774fa9c376fc217763928ef3a01b3f73e4aa35f718dedf4ba5cbfe521d46e045c1b591c45a56e5efbbd06af9d591866c23fc398ad58a91321743964dbe8127492e153d6960aab114de7eb31295a2c38f2968c64e10e8e362a1b3b86fc82f35d7cb31df8b11e01088c235c14e76fd33b4ef3aaf52665e048192d6b0201fc2ebc80b2770dd3dd0e4635e7d63887d288e42cbcefba2159a7b31c33440abbd69ae2edb854fd1c06f32038332bfa4f904aa5cd7d6daf4076f4e9d35b4d0b058deaa3f065361f2a605abc035958794b0da4c6d4823b49ada6cb118b0a3356c2584392e71806dabea7a1557fa8831808979ff13cf3f496194c5b029215c43e5254319009677d5e03ae