vidmqa.unicredit.eu

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 2c:97:fa:0b:95:21:e6:96:1a:94:86:f6:40:f3:34:11 was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:97:fa:0b:95:21:e6:96:1a:94:86:f6:40:f3:34:11
Serial Number (int): 59275140160240007882834989151190987793
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 28:ad:4a:78:8e:d5:6e:9d:84:c2:4f:b5:48:ea:4d:94:e0:f2:fe:b6
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 39:ec:cb:e6:17:ad:37:72:5c:82:e9:b5:2d:91:7f:60:99:06:9f:f7
Fingerprint (sha256): 0d:86:47:ff:2c:39:0b:fe:0f:62:8a:6d:80:0b:1a:9c:cb:7a:cb:4b:bc:17:54:1f:da:5a:ab:d7:70:43:12:7d

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate vidmqa.unicredit.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vidmqa.unicredit.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vidmqa.unicredit.eu

Other certificates including the domain name unicredit.eu

(limited to 100 certificates)
uagqa.unicredit.eu
payfits.unicredit.eu
globaltrade.it.hypovereinsbank.de
ucremanutenzione.unicredit.eu
mx13.unicredit.eu
changehub.unicredit.eu
www.qc.research.unicredit.eu
mx19.unicredit.eu
resetvc.unicredit.eu
san-005.ceros.com
seguc.unicredit.eu
mx05.unicredit.eu
ebanking.it-v.unicreditgroup.de
authorization.internal.api.unicredit.eu
convene.unicredit.eu
nra.unicredit.eu
mobileqa5.unicredit.eu
ccnp-de.unicredit.eu
jobs.unicredit.eu
mx04.unicredit.eu
vidm.unicredit.eu
*.extranet.unicredit.eu
ensqa.unicredit.eu
resetmb.unicredit.eu
*.extranet.unicredit.eu
esg-survey-eu-hvb.unicredit.eu
*.rasqa.unicredit.eu
mobira.unicredit.eu
authorization.api.unicredit.eu
ebanking.qc.unicreditgroup.de
mobileqa1.unicredit.eu
mitrab.internal.unicredit.eu
qnra.unicredit.eu
ilibrary.unicredit.eu
mx17.unicredit.eu
ra.internal.unicredit.eu
mx07.unicredit.eu
convene.unicredit.eu
mdm.unicredit.eu
api.payfx.unicredit.eu
vrrab.unicredit.eu
san-005.ceros.com
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
reset.unicredit.eu
www.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
mobileqa3.unicredit.eu
ial.unicredit.it
segdev.unicredit.eu
ensqa.unicredit.eu
sipedge.unicreditgroup.eu
globaltrade.it.hypovereinsbank.de
mobileqa5.unicredit.eu
be-part-of-it.unicredit.eu
mx07.unicredit.eu
www.unicreditgroup.eu
san-005.ceros.com
authorization.openbanking.unicredit.eu
mobileqa3.unicredit.eu
mx04.unicredit.eu
sso.unicredit.eu
vrtrab.internal.unicredit.eu
ideasharing.unicredit.eu
mdmqa.unicredit.eu
uspg.unicredit.eu
nra.unicredit.eu
vidmqa.unicredit.eu
mx05.unicredit.eu
vtra.internal.unicredit.eu
www.qc.research.unicreditgroup.eu
UCRECensimentoQA.unicredit.eu
processihrpe2.unicredit.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
authorization.api.unicredit.eu
tls10.unicredit.eu
*.extranet.unicredit.eu
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
san-005.ceros.com
developer.unicredit.eu
payfits.unicredit.eu
ens.unicredit.eu
UCREManutenzioneQA.unicredit.eu
feedback.unicredit.eu
globaltrade.it-v.unicredit.eu
hrprostaffm.unicredit.eu
ebanking.it.unicreditgroup.de
mobileAT.unicredit.eu
uspg.unicredit.eu
segat.unicredit.eu
san-005.ceros.com
mx17.unicredit.eu
sftpfgi.unicredit.eu
uagqa.unicredit.eu
lp-00.buddybankmessaging.unicredit.eu
segatqa.unicredit.eu
uctradefinancegate-1.unicredit.eu
segatqa.unicredit.eu

Certificate

The complete raw certificate details for vidmqa.unicredit.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHvjCCBaagAwIBAgIQLJf6C5Uh5pYalIb2QPM0ETANBgkqhkiG9w0BAQsFADCB
iTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMTQwMgYDVQQDDCtB
Y3RhbGlzIE9yZ2FuaXphdGlvbiBWYWxpZGF0ZWQgU2VydmVyIENBIEczMB4XDTI0
MDMyNjEyNTI1NFoXDTI1MDMyNjEyNTI1NFowaDELMAkGA1UEBhMCSVQxDzANBgNV
BAgMBk1pbGFubzEPMA0GA1UEBwwGTWlsYW5vMRkwFwYDVQQKDBBVbmlDcmVkaXQg
Uy5wLkEuMRwwGgYDVQQDDBN2aWRtcWEudW5pY3JlZGl0LmV1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiNaWJrhxjdco6s7aZZG7mXZw9nALQ2Hx3l
tOA7dfRFrMOPe6lRcq5T06KxVgyAmunPHxKPTZ6s7vKn83ic8mlKVvv+0JezdlHV
k9j6n18V1GPdW3cxrtkKFGlgOiKA6jZThH+KwRqC462pufT/VPIarEjN0AGZOe8D
lxT6we1952/NE0jbxHxMlemuUYK+FSTCYYtW/WSiROw90WMnmI5LomTEOG15fMts
1o+0e7jGOPSsrQJ6BIyMecokulQpU6icYarIBr9P2ZlUZYvLzCvlaCUVWxhi8SDE
vX2VSIdKl95+rIHNoOt+42LH5qtH0GuBPCwosi3SHLHxgkAuawIDAQABo4IDQDCC
AzwwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBSfirG18bHegvQnfL6Izd6pQ4Gj
SzB+BggrBgEFBQcBAQRyMHAwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jYWNlcnQuYWN0
YWxpcy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGhvdmczMDEGCCsGAQUFBzABhiVodHRw
Oi8vb2NzcDA5LmFjdGFsaXMuaXQvVkEvQVVUSE9WLUczMB4GA1UdEQQXMBWCE3Zp
ZG1xYS51bmljcmVkaXQuZXUwUQYDVR0gBEowSDA8BgYrgR8BFAEwMjAwBggrBgEF
BQcCARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVhLWRvd25sb2FkMAgGBmeB
DAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwSAYDVR0fBEEwPzA9
oDugOYY3aHR0cDovL2NybDA5LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9BVVRIT1Yt
RzMvZ2V0TGFzdENSTDAdBgNVHQ4EFgQUKK1KeI7Vbp2Ewk+1SOpNlODy/rYwDgYD
VR0PAQH/BAQDAgWgMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDPEVbu1S58
r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY5620hsAAAEAwBHMEUCIBxdGP4v
M94XfvWbNk1wmVL5n0PvVzSFxiP8ExI8ke5SAiEA93gD1cOoP2HX4r7zrQiq6jrP
ycfxyhKackdlz5hFxMEAdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeO
UAAAAY5620mgAAAEAwBGMEQCIF6I61dwmP4qVBPBN36O63FyxpoWA9B5CUU0X4P1
4goaAiALxa/reh+oYuUGaekLaM6wY0UD14PprJZrtrNL0RxjpAB3AMz7D2qFcQll
/pWbU87psnwi6YVcDZeNtql+VMD+TA2wAAABjnrbSN4AAAQDAEgwRgIhAO7+7cCQ
68Hx03+jzfmfCsi4cykIiUozZMn7lcOL9dsLAiEAvszx1d0OW+Hla6yvCryL38qP
fM2LlFFvwsphALwtv7swDQYJKoZIhvcNAQELBQADggIBACFSn70XcQi6pptQBq+/
b9UEhkLJhnTVjPb1VSILNCJq0+oaV1S1tx0S/yDdVsANHX31290xsEcR0ITL5stP
2j9oKaZ1e/kDj3sqi1EQoIlX50lsHMq2I2aP8Fg0ghi63ebdCtwPyrG6ldoizduG
znKQWRXobZjaBf3zIc1YjqAuflqeXJUk1Dcjr8ZVwz+WD4kSSOnVNchHyJv/ulEO
EqOUXi2GDGBzakXu4vL1nlBwwc8n+YW91Cm1f04fjx26FoFOvpUjM6rJjsuQByKJ
APTvCj/H6IcEMth6Fl4ZK+A8kw6iFrorypDojblpu+iZjRRFfzwd9EHBVGKkuuTB
qGkA2i+uDd+Or/qsngWeiSQaaIpJnuitt1+ONCpCHLYDsJ6ywo41gd9J/rxfyT2f
0qE/f6aK8xunauyq7ae+o7qhKSact1dMDtDU39KJXjdMTJebT/ZGj8pqh5Hkb+y4
xhnNI4DUaloh20whIh5kKqbovarUfT0bdTbJCs9D0ezuVpJnBuIKRKrUldHxAzzR
0PSSQwxYk+9uQEfoViqHGcFu+DTED8dIYb8nSvFvzFfOzildVPoz8RneP1U+279B
/oYAyMMCkiFZHwCKCEXT2dhoJfWNX+BYMd3KQdAqPEI8i1mjCBm4bduhhd1IhxVs
KnoCa8Y+iM0bbPcngTeY+550
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiNaWJrhxjdco6s7aZZ
G7mXZw9nALQ2Hx3ltOA7dfRFrMOPe6lRcq5T06KxVgyAmunPHxKPTZ6s7vKn83ic
8mlKVvv+0JezdlHVk9j6n18V1GPdW3cxrtkKFGlgOiKA6jZThH+KwRqC462pufT/
VPIarEjN0AGZOe8DlxT6we1952/NE0jbxHxMlemuUYK+FSTCYYtW/WSiROw90WMn
mI5LomTEOG15fMts1o+0e7jGOPSsrQJ6BIyMecokulQpU6icYarIBr9P2ZlUZYvL
zCvlaCUVWxhi8SDEvX2VSIdKl95+rIHNoOt+42LH5qtH0GuBPCwosi3SHLHxgkAu
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59275140160240007882834989151190987793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 12:52:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-26 12:52:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vidmqa.unicredit.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22900689903559785833319926392198195907108716276756636013987061773686788537698255179080707783585470247346811255190243841222932925956861304764686349241158760456227636723660571296044057869239711251120745743638304122929042896468395684779849142473618825404400315154411370857683674538628378550772135404793803026034452137171903730848086908873245703228943574748880867258803762309394634443399002057727619373149394892238339900697380649709445172810069294984623895599422764378998974412419842984780145029461434027147705978260798198979800136519112385483040459485445698142066201790582355668032985241202266008193163246467464915070571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidmqa.unicredit.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28ad4a788ed56e9d84c24fb548ea4d94e0f2feb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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