gw71.mplat.trenitalia.it

- AlmavivA – The Italian Innovation Company S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:44:c3:1f:25:6a:37:b8:20:03:ed:e8:ad:2a:bc:c8 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AlmavivA – The Italian Innovation Company S.p.A.

Organization: AlmavivA – The Italian Innovation Company S.p.A.
Organization unit: web2
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:44:c3:1f:25:6a:37:b8:20:03:ed:e8:ad:2a:bc:c8
Serial Number (int): 10990857690184799906830999992610241736
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:3a:99:e9:f1:f5:c0:43:a7:82:e2:c2:ab:08:a3:b0:a2:49:57:31
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 36:e5:06:93:40:58:af:9f:43:83:b5:fe:41:e7:6e:df:de:f4:a2:51
Fingerprint (sha256): 0f:07:42:7b:9b:fd:b4:17:60:a4:02:92:7a:57:e9:37:80:c2:18:84:53:2b:38:04:c8:a5:79:88:01:87:87:f8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate gw71.mplat.trenitalia.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw71.mplat.trenitalia.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gw71.mplat.trenitalia.it

Other certificates including the domain name trenitalia.it

(limited to 100 certificates)
service62.trenitalia.it
s3rbackoffice.trenitalia.it
sso.trenitalia.it
ccsc-tper.cert.trenitalia.it
monitoraggio.mir.trenitalia.it
eap.fs.eu
www.lefrecce.it
areariservata.cargo.trenitalia.it
t4p-wd.trenitalia.it
super2016.trenitalia.it
fnidv.trenitalia.it
gw71.mplat.trenitalia.it
trenitaliaforagents.trenitalia.it
gestionemail.cert.trenitalia.it
oeng.trenitalia.it
smp.trenitalia.it
voc.trenitalia.it
infobi.trenitalia.it
ramagency.trenitalia.it
www.lefrecce.it
epmbi.trenitalia.it
cert.extendedexperience.trenitalia.it
pmt.trenitalia.it
pmt.trenitalia.it
gw71.mplat.trenitalia.it
consolecriticita.trenitalia.it
super2016.trenitalia.it
reporting.sirev2.trenitalia.it
sirinterface.mir.trenitalia.it
monitoraggio.mir.trenitalia.it
www.webcrew.trenitalia.it
areariservata.cargo.trenitalia.it
www.lefrecce.it
ramagency.trenitalia.it
service62.trenitalia.it
*.trenitalia.it
reporting.sirev2.trenitalia.it
pisa.trenitalia.it
www.acquistionline.trenitalia.it
rambackofficexml.trenitalia.it
gw71.mplat.trenitalia.it
documentale.trenitalia.it
reporting.sirev2.trenitalia.it
epmbi-test.trenitalia.it
sibo.trenitalia.it
sirev2.trenitalia.it
super2016.trenitalia.it
oiminternal.trenitalia.it
oiminternal.trenitalia.it
rbm.trenitalia.it
sirinterface.mir.trenitalia.it
areariservata.cargo.trenitalia.it
cert.extendedexperience.cc.trenitalia.it
sirev2.trenitalia.it
mastersts.trenitalia.it
ramamadeus.trenitalia.it
pmt.trenitalia.it
sbpax.trenitalia.it
pmt.trenitalia.it
www.webcrew.trenitalia.it
monitoraggio.mir.trenitalia.it
sso.trenitalia.it
reporting.sirev2.trenitalia.it
rambackofficexml.trenitalia.it
rbm.trenitalia.it
smp.form.trenitalia.it
voc.trenitalia.it
ramamadeus.trenitalia.it
sginet.trenitalia.it
ramagency.trenitalia.it
ccsc-tper.trenitalia.it
oeng.trenitalia.it
rambackofficexml.trenitalia.it
cxi.social-monitoring.trenitalia.it
ramagency.trenitalia.it
sirinterface.mir.trenitalia.it
gwcert71.mplat.trenitalia.it
www.webcrew.trenitalia.it
infobi.trenitalia.it
fp.trenitalia.it
reporting.sirev2.trenitalia.it
sginet.trenitalia.it
gwcert71.mplat.trenitalia.it
sirev2.trenitalia.it
LSWebext.fs.eu
infoboard.trenitalia.it
www.lefrecce.it
fnidv.trenitalia.it
infoboard.trenitalia.it
cxi.social-monitoring.trenitalia.it
sirev2.trenitalia.it
gw71.mplat.trenitalia.it
areariservata.cargo.trenitalia.it
rambackofficexml.trenitalia.it
www.webcrew.trenitalia.it
www.rfi.it
ramamadeus.trenitalia.it
super2016.trenitalia.it
pmt.trenitalia.it
gw71.mplat.trenitalia.it

Certificate

The complete raw certificate details for gw71.mplat.trenitalia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10990857690184799906830999992610241736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AlmavivA – The Italian Innovation Company S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gw71.mplat.trenitalia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674031281997232820611548928638374894676878346027884927761104984650930848848323930812545302655751836154263264908433072049356024918169500692829641615467804774149099269004567171977137228177848068605758396185990004055512584855959836191414638520634695363001968742696615694620507329966889453328348206428107803407024699526566903920159851986382689201516365105957525950889722054035059401248987037213348750618382176912329110605199572618601338922568010683395849532485186283648641254932754339290999339981953707550204594884025560759341532042305072395421766297192362168752449448180166339513306575810294565749179847896387864798641658571489181684107651767601792269661862873789346594636564273151458978317622345293749024353488706204895477816764394968001956418689088688306515282907725694394664862242329407775891726607400762802547477745300933469236042899371087882680828021772269911712248708517262733697703617128055837092203805825577796013640085798205409240341087461286860621005652165363134367053049250807620190944233632666663601411306347038096744388307707152591051136431755210868752253828564630436394359848682851492523228376482890783344367050572670740025777246596935404355655922335521947714319290487232039318249873320461254731524288618087507907378026863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							083a99e9f1f5c043a782e2c2ab08a3b0a2495731
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw71.mplat.trenitalia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016436a66b220000040300483046022100f55af63849734cd33e89ad79e52be9e6785af82c76bf0382a6e59cad899d7c78022100a182be1084b6aa3f677171757fba21ca1d3a7688785975b946817bad07af15810077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016436a66bf0000004030048304602210081892f11d5e2a440f7ba2078e381427bfb7fdfe983f98b1cd6907704a8bdac2a022100cbd8fd1320d8327d5312f93583688a4bedcb5e4d4d305b7d1fa28f34b85a8105
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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