*.regione.puglia.it

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 72:e4:e1:57:82:b3:16:ee:e0:2f:60:0b:62:e0:b1:04 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.regione.puglia.it

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 72:e4:e1:57:82:b3:16:ee:e0:2f:60:0b:62:e0:b1:04
Serial Number (int): 152720405678686867874209543026867482884
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 6b:83:71:f3:b9:cd:f4:33:9b:e1:7e:15:ab:d6:dd:64:e1:da:ec:59
Fingerprint (sha256): 0c:f8:b9:20:62:db:c6:19:e4:8d:bf:8d:a0:d5:fb:2c:8d:08:87:c9:11:28:49:ed:81:62:93:86:35:d4:2a:9d

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.regione.puglia.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.regione.puglia.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.regione.puglia.it
regione.puglia.it

Other certificates including the domain name regione.puglia.it

(limited to 100 certificates)
lavoropertetest.regione.puglia.it
ssd.regione.puglia.it
catalogo.istsvc.regione.puglia.it
sigeaweb.dev.ect.regione.puglia.it
sslcertificate1.queue-it.net
sigea.dev.ect.regione.puglia.it
notizie.ect.regione.puglia.it
annostatistico.test.ect.regione.puglia.it
ssd-dev.regione.puglia.it
spid.test.istsvc.regione.puglia.it
image.client.generali.ro
api-gw.test.ect.regione.puglia.it
san-3-s50.tlsprovisioning.exacttarget.com
arpal.regione.puglia.it
catalogo.test.istsvc.regione.puglia.it
demo.ammtra.dev.istsvc.regione.puglia.it
catalogo.test.istsvc.regione.puglia.it
spotweb.dev.ect.regione.puglia.it
*.ect.regione.puglia.it
www.osservatoriofitosanitario.regione.puglia.it
www.elezioni.regione.puglia.it
stradaperstrada.regione.puglia.it
formazione.sarpulia.regione.puglia.it
c2s.istsvc.regione.puglia.it
webmail.regione.puglia.it
ciakinpugliadoc.regione.puglia.it
sslcertificate1.queue-it.net
custodiamoturismocultura.regione.puglia.it
vdc.regione.puglia.it
sitra.test.istsvc.regione.puglia.it
ssd.regione.puglia.it
*.regione.puglia.it
www.studioinpuglia.regione.puglia.it
bacheca.ect.regione.puglia.it
spid.test.istsvc.regione.puglia.it
monitoraggio.dev.ect.regione.puglia.it
sslcertificate1.queue-it.net
amq.ect.regione.puglia.it
image.client.generali.ro
sslcertificate1.queue-it.net
ariadimasseria.regione.puglia.it
c2s.dev.istsvc.regione.puglia.it
bacheca.ect.regione.puglia.it
buypuglia365.ect.regione.puglia.it
amq.ect.regione.puglia.it
spotweb.ect.regione.puglia.it
webmail.regione.puglia.it
www.studioinpuglia.regione.puglia.it
vip.test.ect.regione.puglia.it
albo.dev.ect.regione.puglia.it
sslcertificate1.queue-it.net
www.polizialocale.regione.puglia.it
formazione.sarpulia.regione.puglia.it
www.fornitorissr.regione.puglia.it
www.accompagnamento-pingiovani.regione.puglia.it
sslcertificate1.queue-it.net
refin.regione.puglia.it
www.presenze.regione.puglia.it
san-3-s50.tlsprovisioning.exacttarget.com
webmail.regione.puglia.it
ariadimasseria.regione.puglia.it
api-gw.ect.regione.puglia.it
idp.regione.puglia.it
sigea.test.ect.regione.puglia.it
sistemacorolla.regione.puglia.it
webmail.regione.puglia.it
aret.test.ect.regione.puglia.it
api-gw-rupar.test.istsvc.regione.puglia.it
c2s.dev.istsvc.regione.puglia.it
datiistat.ect.regione.puglia.it
www.luoghicomuni.regione.puglia.it
statistica.test.ect.regione.puglia.it
www.beniculturali.regione.puglia.it
refin.regione.puglia.it
spotweb.dev.ect.regione.puglia.it
*.istsvc.regione.puglia.it
webmail.regione.puglia.it
limesurvey-ist.dev.istsvc.regione.puglia.it
valore.regione.puglia.it
delegati.ect.regione.puglia.it
backoffice.ect.regione.puglia.it
backoffice.dev.ect.regione.puglia.it
www.studioinpuglia.regione.puglia.it
amq.test.ect.regione.puglia.it
amq.dev.ect.regione.puglia.it
designsystem.ect.regione.puglia.it
notizie.dev.ect.regione.puglia.it
notizie.dev.ect.regione.puglia.it
image.client.generali.ro
webmail.regione.puglia.it
arpal.regione.puglia.it
vip-universal.test.ect.regione.puglia.it
*.regione.puglia.it
polr.regione.puglia.it
stampa.elezioni.regione.puglia.it
luoghicomuni.regione.puglia.it
monitoraggio.ect.regione.puglia.it
api-gw.ect.regione.puglia.it
spid.test.ect.regione.puglia.it
refin.regione.puglia.it

Certificate

The complete raw certificate details for *.regione.puglia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIFatJR+tKi1/EGR4HOp
dGxWTHu+2papIdxx698Lf/wMd0tCZ1XhG0N52QIfjbkaL40+dop7aBjb4V8pHfgS
USm/YxgsYZlWhm3yC93inx9NbhG84x4weIgEvzHPcvir33xoN4gDAuIgWK9VoiIN
DdVOMsQol21iH9Ept83b8mkA2jOCt9NWtK51M9tT5NaPlKnpgd0EaDZ5M98Vmf6m
t0EQqE72qVFNE8KlznLlXXvEBnihTTe4tzoks6rbMYM8rikVBHbMn7o4woqDkNEF
avJJcMrMvE72yQWZH3uoUjgOwkke3SMW8PxQ8wp37VC91y39XneRUvqMxtYcezl5
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152720405678686867874209543026867482884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.regione.puglia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16727243247066242201589955052946995125923676366486739002330802651618173078579828293237387247201945450561257233903841078301173278072408791828710093063166756140628638819230241874473414339536177673300673001542774234442323231718318250103567772001335529548409859680673427070142528736966246944730813645169871743590064718511967309726047343206448732529363253677053891408988134565894340898678695139089259934088330033899625037071698693265389015161430246543276395471962591893588467428556883209839939378323709350268478981029560007614616193340005334145851462258127116916910993021500670891218884725082175077154969681786653801806139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regione.puglia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regione.puglia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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