lyncaccess01.uc.fiatgroup.com

- Fiat Services -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 1f:70:84:ca:f8:ab:70:a0:68:63:af:6e:e7:55:d1:19 was issued on by VeriSign, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Fiat Services

Organization: Fiat Services
Organization unit: ICT Architectures - 2013
State / Province: Torino
Locality: Torino
Country: IT

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:70:84:ca:f8:ab:70:a0:68:63:af:6e:e7:55:d1:19
Serial Number (int): 41790298476604343271200449910524989721
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): c8:b2:cc:54:13:fd:71:af:08:fd:10:02:15:c4:6d:8a:f6:13:2b:d4
Fingerprint (sha256): 0e:8c:d5:5c:79:67:31:4e:57:e3:34:e0:b2:a0:7c:18:9d:c4:bf:0e:2d:d1:fe:aa:68:1b:35:b3:5c:45:b0:36

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate lyncaccess01.uc.fiatgroup.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncaccess01.uc.fiatgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.uc.fiatgroup.com
lyncaccess01.uc.fiatgroup.com
lyncwebconf01.uc.fiatgroup.com

Other certificates including the domain name fiatgroup.com

(limited to 100 certificates)
ADFSEncryption-sts.fiatgroup.com
ADFSSigning-fed01.fiatgroup.com
fiatsaphr.fiatgroup.com
lyncaccess01.emea.fcagroup.com
mail.fiatgroup.com
ucfe.voice.fiatgroup.com
email.fiatgroup.com
www.iam.fiat.com
email.fiatgroup.com
vcse-itsem02d22.video.fiatgroup.com
*.fiatgroup.com
pxhwdsap.fiatgroup.com
fed01.fiatgroup.com
fb.fiatgroup.com
lyncfepool01.emea.fcagroup.com
fiatsaphr.fiatgroup.com
vcse-itsem02d09.video.fiatgroup.com
email.fiatgroup.com
saphr.fiatgroup.com
lyncaccess01.uc.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
email.fcagroup.com
sts.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
saphr.fiatgroup.com
sts.fiatgroup.com
globalaccess.fiatgroup.com
vcs-itsem02d03.video.fiatgroup.com
ucfa.voice.fiatgroup.com
sts.fiatgroup.com
edocma.fiatitem.com
fed-dev.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
tpmonitoring.video.fiatgroup.com
lyncextwebservices01.uc.fiatgroup.com
collaboration.fiatgroup.com
ucfe.voice.fiatgroup.com
customersatisfaction.fiatgroup.com
customersatisfaction.fiatgroup.com
vcs-itsem02d03.video.fiatgroup.com
ADFSEncryption-fed01.fiatgroup.com
fed-dev.fiatgroup.com
email.fiatgroup.com
www.iam.fiat.com
www.iam.fiat.com
lyncextwebservices01.emea.fcagroup.com
saphr.fiatgroup.com
www.autoexpert.it
im.uc.fiatgroup.com
spgec.fiatgroup.com
email.fiatgroup.com
prhwdsap.fiatgroup.com
ucfe.voice.fiatgroup.com
email.fcagroup.com
uc.fiatgroup.com
tpcalendar.video.fcagroup.com
www.iam.fiat.com
www.iam.fiat.com
ADFSSigning-sts.fiatgroup.com
spgec.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
fiatsaphr.fiatgroup.com
outlook.fiatgroup.com
lyncaccess01.emea.fcagroup.com
fed01.fiatgroup.com
collaboration.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
email.fcagroup.com
vcs-itsem02d03.video.fiatgroup.com
lyncaccess01.emea.fcagroup.com
fed01.fiatgroup.com
ADFSEncryption-sts.fiatgroup.com
*.fiatgroup.com
ADFSSigning-sts.fiatgroup.com
ADFSEncryption-sts.fiatgroup.com
tpcalendar.video.fcagroup.com
collaboration.fiatgroup.com
edocma.fiatitem.com
im.uc.fiatgroup.com
purchasing.fiatgroup.com
uds.fiatgroup.com
ADFSSigning-sts.fiatgroup.com
sts.fiatgroup.com
www.iam.fiat.com
netseeker.fiatgroup.com
sts.fiatgroup.com
hrmobile.fiatgroup.com
ucfe.voice.fiatgroup.com
netseeker.fiatgroup.com
hpadsm.fiatgroup.com
customerfeedback.fiatgroup.com
lyncaccess01.emea.fcagroup.com
fed01.fiatgroup.com
saphr.fiatgroup.com
customersatisfaction.fiatgroup.com
lyncextwebservices01.emea.fcagroup.com
tp-exc1.video.fiatgroup.com
lyncfepool01.emea.fcagroup.com
www.iam.fiat.com
fed-dev.fiatgroup.com

Certificate

The complete raw certificate details for lyncaccess01.uc.fiatgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzZimc17d5lTJXQS52el
Bs4dx4BMYH2nPY6cKlQI2d8KwzF9ypuBCfDK686RXRBzOeYtt759JEKTs/006YuE
Y1E4ANUYyUpJzKypr1bbjw115UsXcO5om3+358d+csD0o2dtrdP/ryTCucLwCRu9
xC2xSGQBMzfLNC5fGhe8rbzQlKRzB3rRsstr2M43R2Pksz9DWkHhVbTZqWlNUUHq
cfLrg8KJnRBg/HIt74SZTqBBp6ht0X2gfMzfINe4AHpXUWQFwmfvVYDqvbDBnXMr
zGrmEvOb96xPMsPjtPQbzF64+6LwBjw3hk25Mtai4hjNdNKyfQ2l7kPWeA4eSOd4
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41790298476604343271200449910524989721
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Torino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fiat Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICT Architectures - 2013'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'lyncaccess01.uc.fiatgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21613568470800308883889745993681860729079090766670664618123886305832170259705075531524858804608000308484406889994994856819164083965417274664655270392145791635794404918414823689205303261545655598380204043181105987843924964489133015015796144378083100359658426301604708416013044859779142280250688593427969782386089636537648131810827340311596007998934549847025047025139370017985390927890281878151007699661306591400629452493160104683283796798925814299057271177086575558156626873112545401763332197760940442107800112084344962149583786313134018557730832939792852650062942321633418858907184414994260542145992709131345284528319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.uc.fiatgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncaccess01.uc.fiatgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebconf01.uc.fiatgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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