*.lumacheria.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 3e:e3:33:fc:f5:c8:f5:5c:b2:29:1e:42:e3:46:0d:6c was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lumacheria.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 3e:e3:33:fc:f5:c8:f5:5c:b2:29:1e:42:e3:46:0d:6c
Serial Number (int): 83591841570005701081396206289300098412
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: eb:ae:08:f1:0a:17:ea:b7:e0:53:5c:7c:65:a9:e5:8d:6e:00:c4:4c
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): c1:0c:57:63:a3:7b:16:12:1b:f0:1d:81:10:55:a6:75:c7:2b:86:9c
Fingerprint (sha256): 08:bd:7c:31:b5:b2:e1:70:7f:12:f2:8a:d6:4e:04:a3:40:a5:fa:4a:dc:66:ef:91:d9:d3:0c:82:b8:3c:5f:c0

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.lumacheria.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lumacheria.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lumacheria.it
lumacheria.it

Other certificates including the domain name lumacheria.it

(limited to 100 certificates)
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it
*.lumacheria.it

Certificate

The complete raw certificate details for *.lumacheria.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+cIvJ8p/zV81lwJtK2t
7y8KpmM8+SVQLS0U5c/PHfCGIdue5X0/gy3aSJfBXu2nn3neAHSuyldvwEScyBJh
kp0q1ImUSzOogEUNF5i6Y5uTdGnnANAB0Ybk6xUqQNaBN4Th+REzEZ8fcLeeN88J
4tFcyyb4+w9udXtws0D/++cf0WgN9pUekloe8GjUB9XVQ+JljWLb0OEfoFQsBSdQ
5mt0E8LirkZR1j6fNBWA45kBbUDBLNUOyIKf4FIdVWaTdAXriNr1vxv5WeBsWCDD
R7g7ZOo4IO3OXXyFiG4w4vt4ayyqYtu0shT0IIU/WjvECKLwVRhNScmoNwkRL/QU
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83591841570005701081396206289300098412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 04:55:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 04:55:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lumacheria.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28265069182140492394332548428088727336284504480512282928287008565975614923528808432560031788180998161030296436314044808008786946324477136864743919757188529017099237483731617931945400463902978576064059553571420337051035286629753807730685282911243092942879099436268964040516393464457310539616525617669171594625384998002751279935421158538543092716542085827017478587335187367312192980565156479748179479043405494539154223612506025694432680123377263517507607119483208132013246391092780667402089351978758538185662471090215072088206309000651273557781497974347746200744780566998664515042569465469152629855503042048971829941373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumacheria.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumacheria.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebae08f10a17eab7e0535c7c65a9e58d6e00c44c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189e2fbe3d00000040300483046022100975adbadc67d5926a0c1c06991263df1e51342ef8615b0ec6f34cce32b1bc53302210094dda2f719e3b3b28f853ce5b0ebb4a8f08298415b835289d4f95076c42f6ac200750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189e2fbe3760000040300463044022030c7d97663af716f2ff53d0c3ac2a09a0bd4f05506717e5610e150822d1c7ee8022072a0a2e959857499abadc78890bdb44c81a38688d1312d563aa632dfe0e9fa08007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189e2fbe3a90000040300473045022100d2d10cf40c329f4607dee6a5866b3b1636cd40a00200fba4a60bfd19f94588f1022073487ad7d749479a9cd026d7f6bed2b43a344f1432752f271321596b43507a5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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