*.professionisanitarie.com

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 0b:0b:e7:85:79:d5:f4:ad:6c:01:ef:d0:f6:1e:6e:c8 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.professionisanitarie.com

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:0b:e7:85:79:d5:f4:ad:6c:01:ef:d0:f6:1e:6e:c8
Serial Number (int): 14683319030748358483332524466027523784
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:72:0f:ba:e8:24:3a:06:78:2f:83:72:0c:30:e5:d4:2c:29:16:65
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): a8:65:1b:72:0b:80:94:80:c4:6a:dd:57:02:4d:06:9c:c2:34:45:c0
Fingerprint (sha256): 0c:5e:60:99:13:7b:55:7d:22:37:e2:74:68:61:52:f1:28:34:7c:c6:00:34:72:86:54:c5:96:c9:85:57:71:67

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.professionisanitarie.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.professionisanitarie.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.professionisanitarie.com
professionisanitarie.com

Other certificates including the domain name professionisanitarie.com

(limited to 100 certificates)
*.professionisanitarie.com
app.professionisanitarie.com
*.professionisanitarie.com
blog.reversepp.com
robotcontrolparty.com
actionnaire-dev.capbloc.com
*.professionisanitarie.com
www.peblet.be
*.professionisanitarie.com
*.professionisanitarie.com
us.production.gfc.avisi-apps.com
phi.studentnode.com
*.professionisanitarie.com
sppl.decoderesolvency.com
*.professionisanitarie.com

Certificate

The complete raw certificate details for *.professionisanitarie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot8dJnv7XlhWURJtOpMC
s0+IPuvUbYyOxYAXPDtG2o2hJ3KBaFaNQCXsBAVh4gHWVO1LprjHrYiDOIXzdUBN
Wyl6ysXMccFjyRtVib5qN6CEXg3KWRyFV5Qfbug7CpD1HbICzOQ3Mt75FHgpRWBJ
uUiH3cZ79qxm4MpBStCcWPF3m82/57INK5fpYj4eZArorm4yl2Smz2HYaI8GMOfa
4KGOfXSGcT1DDabJnpaPEKQmXZf2kaLFLlbt8Ulo5/prFBb8PqUHm3wo730dDHnI
aLAFuF/4jo/YySEfbFhIGHsGkj8vS1QNODH3voLBTakODstiGGghqocwG2favsMB
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14683319030748358483332524466027523784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 07:30:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-14 07:30:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.professionisanitarie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20560626953605258549171730714483841278673185421781841011017184560538287611909160473506298777707360010137468175976926794371129147269572837365628865645345201490133427748504203316886831629365840158346239786157508741863879523729276838441211742732666845371923042046262057888801511877742043911721066454339187942234450330087446512976161164682641605018232109425241651405929713430678581558190933667996051284457950117249385257173922870846625303314069170089198429268204112833316397561645149783009191056515301155524537257076067938542877229264546722766436705446268939605048330601297116814628616996130040270111695621062249165291881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.professionisanitarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionisanitarie.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c720fbae8243a06782f83720c30e5d42c291665
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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