ramagency.trenitalia.it

- AlmavivA – The Italian Innovation Company S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:e0:ac:6e:4b:86:bd:07:24:b6:71:b4:78:af:b8:99 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AlmavivA – The Italian Innovation Company S.p.A.

Organization: AlmavivA – The Italian Innovation Company S.p.A.
Organization unit: Web24
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:e0:ac:6e:4b:86:bd:07:24:b6:71:b4:78:af:b8:99
Serial Number (int): 7812711788160349865167058889943791769
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 85:1c:11:0e:d5:dd:43:a7:6c:1e:f4:b4:e3:3a:ec:28:97:bb:7f:e8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 11:b2:a6:3d:e0:fe:cc:ab:56:de:7f:3a:42:c2:33:ee:77:bd:92:fb
Fingerprint (sha256): 08:8f:91:49:20:a3:69:f3:9b:06:a5:d8:4e:63:f0:2b:59:ef:9f:5d:f4:d2:12:56:e4:4e:a3:78:31:da:c3:a1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ramagency.trenitalia.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ramagency.trenitalia.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ramagency.trenitalia.it

Other certificates including the domain name trenitalia.it

(limited to 100 certificates)
service62.trenitalia.it
s3rbackoffice.trenitalia.it
sso.trenitalia.it
ccsc-tper.cert.trenitalia.it
monitoraggio.mir.trenitalia.it
eap.fs.eu
www.lefrecce.it
areariservata.cargo.trenitalia.it
t4p-wd.trenitalia.it
super2016.trenitalia.it
fnidv.trenitalia.it
gw71.mplat.trenitalia.it
trenitaliaforagents.trenitalia.it
gestionemail.cert.trenitalia.it
oeng.trenitalia.it
smp.trenitalia.it
voc.trenitalia.it
infobi.trenitalia.it
ramagency.trenitalia.it
www.lefrecce.it
epmbi.trenitalia.it
cert.extendedexperience.trenitalia.it
pmt.trenitalia.it
pmt.trenitalia.it
gw71.mplat.trenitalia.it
consolecriticita.trenitalia.it
super2016.trenitalia.it
reporting.sirev2.trenitalia.it
sirinterface.mir.trenitalia.it
monitoraggio.mir.trenitalia.it
www.webcrew.trenitalia.it
areariservata.cargo.trenitalia.it
www.lefrecce.it
ramagency.trenitalia.it
service62.trenitalia.it
*.trenitalia.it
reporting.sirev2.trenitalia.it
pisa.trenitalia.it
www.acquistionline.trenitalia.it
rambackofficexml.trenitalia.it
gw71.mplat.trenitalia.it
documentale.trenitalia.it
reporting.sirev2.trenitalia.it
epmbi-test.trenitalia.it
sibo.trenitalia.it
sirev2.trenitalia.it
super2016.trenitalia.it
oiminternal.trenitalia.it
oiminternal.trenitalia.it
rbm.trenitalia.it
sirinterface.mir.trenitalia.it
areariservata.cargo.trenitalia.it
cert.extendedexperience.cc.trenitalia.it
sirev2.trenitalia.it
mastersts.trenitalia.it
ramamadeus.trenitalia.it
pmt.trenitalia.it
sbpax.trenitalia.it
pmt.trenitalia.it
www.webcrew.trenitalia.it
monitoraggio.mir.trenitalia.it
sso.trenitalia.it
reporting.sirev2.trenitalia.it
rambackofficexml.trenitalia.it
rbm.trenitalia.it
smp.form.trenitalia.it
voc.trenitalia.it
ramamadeus.trenitalia.it
sginet.trenitalia.it
ramagency.trenitalia.it
ccsc-tper.trenitalia.it
oeng.trenitalia.it
rambackofficexml.trenitalia.it
cxi.social-monitoring.trenitalia.it
ramagency.trenitalia.it
sirinterface.mir.trenitalia.it
gwcert71.mplat.trenitalia.it
www.webcrew.trenitalia.it
infobi.trenitalia.it
fp.trenitalia.it
reporting.sirev2.trenitalia.it
sginet.trenitalia.it
gwcert71.mplat.trenitalia.it
sirev2.trenitalia.it
LSWebext.fs.eu
infoboard.trenitalia.it
www.lefrecce.it
fnidv.trenitalia.it
infoboard.trenitalia.it
cxi.social-monitoring.trenitalia.it
sirev2.trenitalia.it
gw71.mplat.trenitalia.it
areariservata.cargo.trenitalia.it
rambackofficexml.trenitalia.it
www.webcrew.trenitalia.it
www.rfi.it
ramamadeus.trenitalia.it
super2016.trenitalia.it
pmt.trenitalia.it
gw71.mplat.trenitalia.it

Certificate

The complete raw certificate details for ramagency.trenitalia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8KXMZadeUfRI8lOWPo7
3qgRbKwRYYhIKdoUkB44qI031qIp1udkDDZDrTohSgzR0jylbwS41teCkmAB+7J3
a1aaD0qS5c3zJZJZ74pIWubQa30NE7kBobwARr90iPJTPwa1FEtUtKYt39CEgnwA
g8zivDCe3F66JBg2UUy40jmA0A7y/qwr/7AufRDe/FNz0vuRM5aqzNcySavD3X3B
Kg6bLY6a0g5I0YVTS+rWnnRz4aMJs8egB0S2k3bZ86HNgGbHzOaDGoa30NHiN5G2
KR8RsOkesO7nLzipSCuMKpfUkoqXG8WsKY7NATTjnAQzzEIGjx9nsL9UBzxN6cu3
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7812711788160349865167058889943791769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AlmavivA – The Italian Innovation Company S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web24'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ramagency.trenitalia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21177753130729589815978052876862024192996891510391344919782907280020433622792843060283534992630175421957944234579268873997960734169962951299243393104797117546944117709158552412955806234114514700605054084619351905604793115235495646998826941685325766568611982497487097961554216125873694068588742280751353907026838431586498805768329828544684106148916687985577985436822828285193772177073489178777724389275872118472413733242765091856640282879936067143162546642410690336159988127861540238169053804228369873977179835454580745020479362559233052092830130954313556112895691105425448122954952393843724033095205211284244437645237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							851c110ed5dd43a76c1ef4b4e33aec2897bb7fe8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramagency.trenitalia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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