zzeta.pointersoft.it

Issued by R3

About this certificate

This digital certificate with serial number 04:83:00:df:56:b6:17:b2:b8:e7:74:95:23:70:de:ae:86:1d was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zzeta.pointersoft.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:83:00:df:56:b6:17:b2:b8:e7:74:95:23:70:de:ae:86:1d
Serial Number (int): 393027293434597464275605413515125312095773
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:3e:79:7f:c5:10:ad:7b:a9:81:7c:5e:93:9d:1f:e0:e3:eb:1e:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:eb:d9:08:89:f4:b4:24:d7:9b:c5:9b:ff:dd:e8:37:65:f0:9b:e5
Fingerprint (sha256): 0e:ae:b1:b9:af:7e:04:cb:2e:7e:73:0a:1a:83:61:e0:ff:84:bd:5c:4a:56:59:fc:a1:99:62:6b:d2:98:63:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zzeta.pointersoft.it

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zzeta.pointersoft.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbonamenti.stampamedia.net
abbonamentidigitali.com
abbonamentidigitali.it
areaabbonati.ratio.it
astebusiness.news
biplano.it
catalogoarredamento.com
cogest.info
directjob.it
edicola.ratio.it
edicoladigitale.it
eventi.ratio.it
idrogeno.info
ilpoligrafico.it
login.ratio.it
primapagina.info
print4pack.it
ratioquotidiano.it
relatori.ratio.it
southern-european-print-congress.com
tettodilegno.it
veicolielettrici.com
videolavoro.it
webaziende.net
xplor.it
zusieditore.com
zzeta.pointersoft.it

Other certificates including the domain name pointersoft.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for zzeta.pointersoft.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmckx4Csn5WH+aMRRaZMw
mW1J9PUJ7fTqbfXcIQaiMlWH3/MxBgrrG8Mb8j2OdJB9jbgUuUk7biyYudHw2Nkq
SPOBXByBN4vY2IBXGdFegPxpBQdUmdnn77gwaPjHOQMfP6UbAXg4GrgJE1cydkoH
VaFdC9fX+5yDN7HCOkUlv2B4omJw8JHKIiCUxA+G3XhZxN7T5TyH3gUL2QJkRKQ/
ZsoyhV60QrVbFEZfyCxT3ETZ4qRBP1VhbOIof1FWiPIAgwgI34SEgfO020jgj0sN
YkYI7mgTtfbywceG5YojG2dCIW8n8GywQgREmyACbdxQD3/TvBnP6zRQV/hO1QDi
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393027293434597464275605413515125312095773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:41:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 10:41:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zzeta.pointersoft.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19413673526611814872990138101428513346930629876122474507364318809220183261240827302380816083536543226469593072056255937770460939078789256932301665027357610873718063810163130506277006394131212182426312489706051463705298256220888615055098176649458082422574450417145729956489019557078412424181914711649805780974512285356133824222553248306428409528899095597850207465699666282565496313209136155825423761728534242655340003949600991368703112652026740958895049216066189619068167958661556034700835840993366460444117232521812725880964043064669675677244171822093871018958287481774689146740861043566310419484602703159295458992881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a63e797fc510ad7ba9817c5e939d1fe0e3eb1e41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (522 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamenti.stampamedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamentidigitali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamentidigitali.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areaabbonati.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astebusiness.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biplano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogoarredamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogest.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directjob.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicola.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicoladigitale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventi.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrogeno.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilpoligrafico.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primapagina.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print4pack.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratioquotidiano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relatori.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southern-european-print-congress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tettodilegno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veicolielettrici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videolavoro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaziende.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xplor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zusieditore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzeta.pointersoft.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7e39735d0000040300483046022100bcde022f4582921993bd7e78abc9089333a780d74d8a24c539b314476f06f08f022100fe5e69d679c79ce61c009a9abb5c9db9ded6ac87a735de128e0f23ad5b61f40d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7e3973490000040300473045022100b51aa4884dfa55af7ce9bdc6499f3557bc7ab845ce0c6ff8b265b00287dd2e9a0220731cecbbd0301ee53027cc10efcdb8ced35b580504c13be4e03c79154c4492a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b55bd711f394fea56d7aa7beee2c268c3f19f4a70e6d86d0e3ddab64f95f5ef8f13a807a8ae1a227506476c78d8e0d975dc392dc0dc80145857da4a89cee6c79b3dffd06f7dfe68ce637df96227e2499572939dd1e094a4bcb776499e7062928075838b9c41ca1e8142f7d09b3b4bf1b6b4b588c7a21bf0f7daf63ed7fe5f91758b934f14e9de3b282e87a1a2dc8aabea314c3c498cb69bfd0e8937a26f25b8b4d56335b43ed54cbd3ad52a85d89b0a571ced0bd89b3474399d58c2edd1a74a93df35e283f7a902f4604f91d46ab9e36a413def9e3b94d84de467eced819f01b649d072f4a3f736840bfac191daf571066789610a6cc6ecdbb451186dc0b069