chiesisg.chiesigroup.com

Issued by GeoTrust DV SSL CA

About this certificate

This digital certificate with serial number 09:05:98 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=i4gQergHA08HPLVZncI/27lWCqMf6jua,CN=chiesisg.chiesigroup.com,OU=GT30118799+OU=See www.geotrust.com/resources/cps (c)14+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:05:98
Serial Number (int): 591256
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 79:4b:64:60:cd:9d:39:df:3a:61:b2:0a:47:48:c9:de:fd:0a:16:a6
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): af:02:04:0b:f7:3b:60:d8:b1:5a:34:c2:02:f6:fc:f5:65:40:73:8e
Fingerprint (sha256): 0d:58:58:8d:59:b8:2d:1d:3a:13:2d:f6:84:bc:78:d7:c5:00:09:08:5b:8c:80:34:43:2d:9c:09:d8:8c:31:b2

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

OCSP Server: http://gtssldv-ocsp.geotrust.com
CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for certificate chiesisg.chiesigroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chiesisg.chiesigroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chiesisg.chiesigroup.com

Other certificates including the domain name chiesigroup.com

(limited to 100 certificates)
itpool.chiesigroup.com
extranet.chiesi.com
chiesisg.chiesigroup.com
chiesisg.chiesigroup.com
MAIL.chiesi.com
mail.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
itpool.chiesigroup.com
itpool.chiesi.com
wifi.chiesigroup.com
sip.chiesi.com
MAIL.chiesi.com
extranet.chiesi.com
extranet.chiesigroup.com
cag.chiesigroup.com
cag.chiesigroup.com
chvpn.chiesigroup.com
wifi.chiesigroup.com
itpool.chiesi.com
itpool.chiesi.com
pem.chiesigroup.com
cargobay.chiesi.com
mail.chiesi.com
extranet.chiesigroup.com
wifi.chiesigroup.com
chiesigroup.com
cargobay.chiesi.com
wifi.chiesigroup.com
chiesicrm.chiesigroup.com
chiesigroup.com
chiesisg.chiesigroup.com
sip.chiesi.com
itpool.chiesi.com
cag.chiesigroup.com
mail.chiesi.com
sip.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
extranet.chiesi.com
chvpn.chiesigroup.com
pem.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
www.chiesigroup.com
ngs.chiesigroup.com
pem.chiesigroup.com
MAIL.chiesi.com
cargobay.chiesi.com
sip.chiesigroup.com
MAIL.chiesi.com
cag.chiesigroup.com
cargobay.chiesigroup.com
sip.chiesigroup.com
itpool.chiesigroup.com
extranet.chiesi.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
chiesisg.chiesigroup.com
chiesigroup.com
extranet.chiesigroup.com
chiesigroup.com
attp.chiesi.com
chiesigroup.com
webconf.chiesigroup.com
chiesicrm.chiesigroup.com
itpool.chiesigroup.com
chiesigroup.com
ngs.chiesigroup.com
chiesigroup.com
sip.chiesi.com
sharefile.chiesi.com
chiesigroup.com

Certificate

The complete raw certificate details for chiesisg.chiesigroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hf6quUDJSmtlGXmK1kZ
LYxpjYJ5v8b8PTgGlLLMwzouS+n0ZTSTK+fASsoan5HmOoxWy0gyPoMXq0LmblRj
w8VC91/K4/RxTvd62nzOJGB8x5KDv8e0AkoZeg3F18mPTJfJ8lkJySvhvrrr/9gI
YFSPz3zQIz2Xq5np9T11ag447+4EK93V/8W3aImdBu73uZMBtZYlxyhMTBRFpySx
tuwZw0+JhJIrzgay/PWETNZuFCFFFgv3GlQIZydNMQaF5D1c4MbkSsu943138ASD
a6l3S9+c41Oj67zeTbasKDNQULbUgjU7OTIvsLlcHo1qsaF6gGafM5CXGKLE5wd3
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 591256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-14 08:01:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 23:47:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'i4gQergHA08HPLVZncI/27lWCqMf6jua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT30118799'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chiesisg.chiesigroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28036728271970927299285113308532364285861754039329618869827268894906295169663403618253411753730428883003480987718782435440078485929537409856691038938909300520176831119512516694375092786699572363399205904044386956178818238370813941646634832208872375252525877794974033061306103641926507171721607488004146706861964810001232401517281119233502859215828069945343221154334815097561975433991753999900355744668842354890440167118419655501311446474226125961520259693510227856120477998120242015844277465250328496915013325754485831864310956726997379643049886975297906239276329305647960675710062197498679600248194057965364801140611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiesisg.chiesigroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							794b6460cd9d39df3a61b20a4748c9defd0a16a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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