preowned.ferrari.com

- Ferrari S.p.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:09:90:c3:2d:e2:53:31:11:5c:bb:57:ae:de:05:b7 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ferrari S.p.A.

Organization: Ferrari S.p.A.
Organization unit: Sistemi Informativi
State / Province: Modena
Locality: Maranello
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:09:90:c3:2d:e2:53:31:11:5c:bb:57:ae:de:05:b7
Serial Number (int): 12012718764466107965630970014933583287
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:93:2d:3a:8d:43:db:54:fb:62:62:a5:9c:b0:dc:30:50:37:9c:25
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 71:44:6e:99:88:e0:9c:84:49:6a:a4:fa:8d:f8:b7:d6:7f:5b:40:98
Fingerprint (sha256): 0b:92:88:21:fc:82:32:e8:34:35:7b:ec:fd:7b:31:3c:5f:54:92:ed:a7:8f:ae:65:eb:6e:31:fb:0a:e2:e6:72

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate preowned.ferrari.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preowned.ferrari.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preowned.ferrari.com

Other certificates including the domain name ferrari.com

(limited to 100 certificates)
ferrari.com
cdn.test.ferrari.com
magazine.ferrari.com
www.f1club.ferrari.com
registration.test.ferrari.com
static.fda.test.ferrari.com
sme-test.ferrari.com
track.ferrari.com
events.ferrari.com
races.dev.ferrari.com
hr.ferrari.com
api.ferrarinetwork.ferrari.com
gateway-new.dev.ferrari.com
factorytour.ferrari.com
ferlyn01-ext.ferrari.com
api.ferrarinetwork.ferrari.com
f142mvs.test.ferrari.com
statisticheintranet.ferrari.com
factorycollection.ferrari.com
static.ferrarinetwork.ferrari.com
store.yoox.cn
factorytour.ferrari.com
techinfo.ferrari.com
api.ferrarinetwork.ferrari.com
email.ferrari.com
booking.ferrari.com
media.test.ferrari.com
factorycollection.test.ferrari.com
classicheoperations.ferrari.com
services.dms.ferrari.com
gateway-refactoring.dev.ferrari.com
store.ferrari.com
magazine.ferrari.com
academy.ferrari.com
fcd.services.ferrari.com
weracecomic.test.ferrari.com
geolocation.test.ferrari.com
fnaleads.ferrari.com
sip.ferrari.com
weracecomic.test.ferrari.com
api.carconfigurator.ferrari.com
auto.test.ferrari.com
fnaevents.ferrari.com
www.f1club.ferrari.com
crm-extended.ferrari.com
booking.ferrari.com
carconfigurator.test.ferrari.com
gateway-new.test.ferrari.com
my-ntw.test.ferrari.com
backend-classiche.ferrari.com
static.apps.ferrarinetwork.ferrari.com
login.test.ferrari.com
races.ferrari.com
privateview.ferrari.com
ferlyn01-ext.ferrari.com
corsipilota.ferrari.com
races.test.ferrari.com
Ferrari S.p.A.
gateway-new.dev.ferrari.com
webcc.test.ferrari.com
static.ferrarinetwork.ferrari.com
preowned.ferrari.com
webcc.test.ferrari.com
museum.test.ferrari.com
cdn.ferrari.com
webcc.test.ferrari.com
preowned.ferrari.com
micollab.ferrari.com
ccpords-pre.ferrari.com
www.sf70h.ferrari.com
static.portofino.dev.ferrari.com
corsipilota.test.ferrari.com
f12015.test.ferrari.com
gifts.ferrari.com
atmm.ferrari.com
static.portofino.ferrari.com
guestwifistore.ferrari.com
news.ferrari.com
crm.ferrari.com
email.ferrari.com
geolocation.test.ferrari.com
academy.ferrari.com
login.test.ferrari.com
static.formula1.ferrari.com
www.f1club.ferrari.com
crm.ferrari.com
fnaevents.ferrari.com
micollab.ferrari.com
f142fl.test.ferrari.com
academy-test.ferrari.com
bookingsvc.ferrari.com
cms-refactoring.test.ferrari.com
aftersales.test.ferrari.com
mystore.ferrari.com
login.ferrari.com
tailormade.test.ferrari.com
ccpords-pre.ferrari.com
carconfigurator.ferrari.com
werace.ferrari.com
poscc.ferrari.com

Certificate

The complete raw certificate details for preowned.ferrari.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf4Wd3jL2tQ29SQp70cL
tDwJ607mzEKHoBowbPHFF3f0fdEWGuEkUeFWdMxDIcmN9sxZrq+mezsSi34aEOsS
gEzt7/xFYZhzm49HA8GR/kIk1y+sCrJFhjh78W5yPtvJbDTEJ0vZmUhsUgrWAC6p
CP3bQULlMuUcCh4f8zNh5yqW3DKk4hFsIHkp+DldILDNlkQzYX5M77LaXAU4SqP2
2RxygjrkB3KoEKFswkCKoQTlCcwg8wLppMzo+rNJoPQuk3lME9fhbVsnsbZ4UQ2P
nlfDiX3SGZ6Wow7FvPEo1aBj+N/QOsNXf/ogrPcV6V/CyR+wSRTXazAQXQpvk3A/
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12012718764466107965630970014933583287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Modena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maranello'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ferrari S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sistemi Informativi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preowned.ferrari.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26004147862563997028926748176547222023496651474304189910367450079519808348406685578077298584962892258614181549393347072032246479429435711446596358277824287465589651514399681612622501345302202902606877207683242255408284969898557649855979652257934273145453610156363009649323042297603054616983833200226092091157274879300336225792398460983768687573062759321595334749377081140211081919790493805349569069666953441347206741594788145503954891045683160427412521224157179523089318858935822881724143478014579783919512985005252014494279107269373390566479848710358217718072695153987518050565406948187720648730697354747802618445747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1932d3a8d43db54fb6262a59cb0dc3050379c25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preowned.ferrari.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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