limited-edition.shopping.wind.it

- Wind Tre S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ac:ed:99:7f:7c:59:d4:90:00:00:00:00:50:e3:6b:52 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wind Tre S.p.A.

Organization: Wind Tre S.p.A.
State / Province: Torino
Locality: Ivrea
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ac:ed:99:7f:7c:59:d4:90:00:00:00:00:50:e3:6b:52
Serial Number (int): 229860902939609021718380285806512401234
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c8:b4:a0:2a:c0:ea:9c:2c:1d:d5:b3:f3:5a:40:eb:55:f3:0e:5e:8b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fb:08:e3:98:55:db:e2:c1:3d:81:8e:b2:3d:33:d7:1b:81:fe:8c:69
Fingerprint (sha256): 0a:66:c3:41:20:b1:5c:1e:df:7a:0c:bc:67:91:f5:b5:fc:6b:3d:ce:16:ce:16:59:cb:2f:8c:88:d4:77:26:66

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate limited-edition.shopping.wind.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for limited-edition.shopping.wind.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

limited-edition.shopping.wind.it
www.limited-edition.shopping.wind.it

Other certificates including the domain name wind.it

(limited to 100 certificates)
olott.wind.it
conciliazioniparitetiche.wind.it
vcloud-rm.windcloud.wind.it
firmabioeasysales.wind.it
easysalesbeta.wind.it
www.wind.it
pam.wind.it
intranet.wind.it
vcloud-vmrc-rm.windcloud.wind.it
webgepos.wind.it
gigaevinci.wind.it
secure08.lithium.com
screenprotection.wind.it
secure08.lithium.com
screenprotection.wind.it
etg.wind.it
partnerportal.wind.it
cloudngpos.wind.it
vcloud-vmrc-rm.windcloud.wind.it
windcloud.wind.it
wfm.wind.it
weg.wind.it
ccdigital.wind.it
b2b.shop.wind.it
antispam.wind.it
limited-edition.shopping.wind.it
rarv.wind.it
dmsrfi.wind.it
shop.wind.it
syweb.wind.it
vcloud-mi.windcloud.wind.it
agenzie.wind.it
partnerportal.wind.it
srm.wind.it
access.mail.wind.it
skype-ext.windtre.it
wegtest.wind.it
secure08.lithium.com
wegtest.wind.it
vcloud-vmrc-rm.windcloud.wind.it
wd-chat.wind.it
partnercare.wind.it
wind.it
devops-bot.wind.it
vcloud-rm.windcloud.wind.it
rewarding.wind.it
ccdigital.wind.it
authproxy.wind.it
gateway.shop.wind.it
visual.wind.it
dmsrfi.wind.it
syweb.wind.it
m.wind.it
cp.wind.it
agenticonsumer.wind.it
conciliazioniparitetiche.wind.it
Agenzie.wind.it
store.wind.it
shop.wind.it
ccdigital.wind.it
wfmdashboard.wind.it
firmabioeasysales.wind.it
dnw.wind.it
ricaricafacebook.wind.it
olo2olo.wind.it
easysales.wind.it
cvp.wind.it
secure08.lithium.com
authproxy.wind.it
www.wind.it
www.analytics.wind.it
www.scopri.wind.it
authproxy.wind.it
visitewind.wind.it
sus.wind.it
wd-chat.wind.it
www.analytics.wind.it
olott.wind.it
ntr.wind.it
ntr.wind.it
uroqgj.wind.it
secure04.stage.lithium.com
pending.wind.it
etg.wind.it
secure08.lithium.com
wmae.wind.it
secure04.stage.lithium.com
screenprotection.wind.it
secure04.stage.lithium.com
www.wind.it
web.pos.wind.it
b2b.shop.wind.it
secure08.lithium.com
secure08.lithium.com
ConciliazioniParitetiche.wind.it
b2b.shop.wind.it
digital-ecare.wind.it
social.wind.it
fsecure.wind.it
dueperuno.wind.it

Certificate

The complete raw certificate details for limited-edition.shopping.wind.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 229860902939609021718380285806512401234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 11:58:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 12:28:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ivrea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wind Tre S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'limited-edition.shopping.wind.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778783313073263710636296795144963240517073577862304784058569622908763207457278890787251026929124309517861991142377021076613905358523897391663256626873899921971137321084506390727235184895605467286721275669575398092768847512441930409100213300232605338550519109600801545587247098455156937684262755344545073038712961942799298212333314515370279936647973990198663560221044579571642767417017910933240086071952703104051064758190190367741891265134184708668543589324097582608740120737471871552045597503242509053829269585471673357866972190711913641086781452370387437862159353961038152086555925068034799983379133348646066208261359021085238370145306592233036046151655356946611676453364961665940870662698592719545467750601053899453911983291038328907190637795122650871252703497344835647418307790913660732795669610183264445998343079830834213851289966486524246827582200070042007134450178238584087754869240855819597450907330404581540555554718842347629680821250948310291716240939788746354372474780648767734511540895333193729713352351652249991251083282740510483226212217240468355665236301923160792060523700425038278916337922033553937161476066820899139810026591624585598520851824929675322993282703109693961254269002366546338058003067786292693610140111941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limited-edition.shopping.wind.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limited-edition.shopping.wind.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8b4a02ac0ea9c2c1dd5b3f35a40eb55f30e5e8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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