westnile.izs.it

- IZSAM Teramo -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 08:ce:f8:12:be:47:5d:f7:55:be:f6:61:c8:9b:29:3f was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IZSAM Teramo

Organization: IZSAM Teramo
Organization unit: CED
Locality: Teramo
Country: IT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ce:f8:12:be:47:5d:f7:55:be:f6:61:c8:9b:29:3f
Serial Number (int): 11708468641714561687586495779185568063
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:89:15:67:0c:98:03:79:bc:87:32:0b:27:45:47:84:51:ac:58:5e
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 9c:90:33:f0:d2:0a:7b:cd:2d:c4:44:3c:30:26:24:b8:45:21:a8:b5
Fingerprint (sha256): 0a:38:d1:18:b8:58:66:12:96:bf:57:33:b6:24:6c:90:58:ed:6a:fe:d5:3e:a7:7c:e8:7b:e1:c3:8d:3f:98:62

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate westnile.izs.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for westnile.izs.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

westnile.izs.it

Other certificates including the domain name izs.it

(limited to 100 certificates)
biblioteca.izs.it
protocollo.izs.it
sptest.izs.it
redmine.izs.it
silabsicilia.izs.it
brucellosis2020.izs.it
*.izs.it
westnile.izs.it
lnr.izs.it
silabsicilia.izs.it
bdrizsam.izs.it
wstest.izs.it
ctxstorefront.izs.it
ucc.izs.it
auth.izs.it
csa.izs.it
demetra.izs.it
xapp.izs.it
cartaittica.izs.it
demetra.izs.it
xapp.izs.it
msrc0818.izs.it
sharelock.izs.it
bluetongue.izs.it
genpat.izs.it
epiexplorer.izs.it
bluetongue.izs.it
easyvista.izs.it
epiexplorer.izs.it
silabsicilia.izs.it
portale.izs.it
izsbox.izs.it
zmail.izs.it
wstest.izs.it
cohesive.izs.it
bdrizsam.izs.it
portaledeldipendente.izs.it
sptest.izs.it
bancabioreagenti.izs.it
attivitadiagnostica.izs.it
bibliotecadelmare.izs.it
anagrafe.izs.it
lnr.izs.it
attivitadiagnostica.izs.it
biblioteca.izs.it
ctx.izs.it
wstestmef.izs.it
geoportale.izs.it
webgis.izs.it
bluetongue.izs.it
easyvista.izs.it
silabsicilia.izs.it
talk.izs.it
veterinariaitaliana.izs.it
silabsicilia.izs.it
www.izs.it
servizi.izs.it
biblioteca.izs.it
onlyoffice.izs.it
www.izs.it
geovet2023.izs.it
zmail.izs.it
hermesproject.izs.it
bioinfoweb.izs.it
portaledeldipendente.izs.it
bancabioreagenti.izs.it
www.demetra.izs.it
intranet.izs.it
portale.izs.it
demo.izs.it
izsboxsicilia.izs.it
portale.izs.it
authtest.izs.it
anagrafe.izs.it
demetra.izs.it
opac.izs.it
servizi.izs.it
biblioteca.izs.it
test.cloud.izs.it
fad.izs.it
ctx.izs.it
geoportale.izs.it
proveinterlaboratorio.izs.it
silabsiciliab.izs.it
te-1.cloud.izs.it
westnile.izs.it
wsmef.izs.it
geoportale.izs.it
auth.izs.it
sptest.izs.it
proveinterlaboratorio.izs.it
fad.izs.it
mobile.izs.it
farmaco.izs.it
farmaco.izs.it
dr-1.cloud.izs.it
www.demetra.izs.it
api.cloud.izs.it
zmail.izs.it
bioinfoweb.izs.it

Certificate

The complete raw certificate details for westnile.izs.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM+P7PUx57lzJJq5gB4R
ItbfCLCtX5meq9tzZkHZC0cae6EnJ2IGoHra5LYVTw8nppQS0D6ApLFPLahON7WJ
WWTqdxTDYKzaV/GFZTxp6yMyGZCWMbjVbVFswQIRazyHP0sNQIczQHJNrXJejmo6
2NYis8paP+MM8y1Yg3yGEiKVrVZ5+t93xi02dw3eyf4tUeZTBFF60gQzUeQos1/O
HmBnYUOKTWEvcHnN8GdryLcS9jmJHib1I5E/RQ6xUnOoDjTCi7vXNAZAJD5Tsiu8
XLAa6p77tq98mfHpb8ShoxAgPXKE1qYGHnz2hQ/bku/AEbhNIipZP1W7TCZuKlHC
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11708468641714561687586495779185568063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Teramo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IZSAM Teramo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'westnile.izs.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21310387974511076688523046272242671061045194600865771918285698194191245882310421774265453404228605859586468687838188280190694600080870372105343368376830124975732508439898426488233503641334872385934933337220154991068894402738523612055469380982844862052168086606347937710531689340060235935542788411799580528425624505886929847147320841532346172907580785828486527009140394739421563407273465563806006745611340852861149093242348992988225476255769927531090352104850516585408618877118699719400774941429852678913599140843392905343192148245295518343973433139738454204026705985501353153256305239802459266168860359233186273804869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							238915670c980379bc87320b2745478451ac585e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westnile.izs.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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