www.circoloGenova.unicredit.it

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 57:39:ee:af:78:50:21:23:d9:4e:e9:4d:21:e3:98:c5 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 57:39:ee:af:78:50:21:23:d9:4e:e9:4d:21:e3:98:c5
Serial Number (int): 115943637669873346954796696182133594309
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f2:ff:21:3c:27:6e:f6:f6:0b:87:c1:eb:80:5e:ff:a3:d4:88:ab:81
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 29:b4:9e:b4:72:56:de:8f:b7:73:62:70:d9:44:38:0c:a0:5c:82:10
Fingerprint (sha256): 11:9c:06:f2:95:10:31:f4:d7:7e:ff:ac:80:73:02:36:f5:9b:95:c0:d3:85:fb:33:40:10:bc:ff:27:49:43:ca

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate www.circoloGenova.unicredit.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.circoloGenova.unicredit.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

circoloGenova.unicredit.it
www.circoloGenova.unicredit.it

Other certificates including the domain name unicredit.it

(limited to 100 certificates)
www.buddyunicredit.it
gestionedelibere.unicredit.it
www.unicredit.it
processihr.unicredit.it
api.f4p.uat.unicredit.it
res-findata-uj-v3.unicredit.it
content.unicredit.it
www.empbw.unicredit.it
openaccount.unicredit.it
online-smallbusiness.unicredit.it
more.unicredit.it
www.premiocerto.unicredit.it
unica.unicredit.it
tls12.unicredit.it
ebanking.qc.unicreditgroup.de
globe.unicredit.it
akamai-san133.exacttarget.com
assistenza.unicredit.it
ucilearning.unicredit.it
finance.unicredit.it
www.unicredit.it
media.investimenti.unicredit.it
bankingonline-uccmb.unicredit.it
corporateportal.unicreditgroup.eu
mail.unicredit.it
clubgrandiaziende.unicredit.it
msite.unicredit.it
shop.unicredit.it
mbv.unicredit.it
pagamenti.unicredit.it
shop.unicredit.it
m.unicredit.it
trasparenza.unicredit.it
push.unicredit.it
onlineretail.unicredit.it
push2.onemarkets.de
www.circoloUdine.unicredit.it
geb.unicredit.it
unicredit.it
finance.unicredit.it
www.circoloBari.unicredit.it
m-uat.unicredit.it
imprendo.unicredit.it
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
clubgrandiaziende.unicredit.it
lifedesk.unicredit.it
mailing.unicredit.it
www.circoloGenova.unicredit.it
www.landing.unicredit.it
res-findata-m-v2.unicredit.it
guest-wifi-mi.unicredit.it
mlocator.unicredit.it
digital.api.unicredit.it
www.landing.unicredit.it
ebank1.unicredit.it
assistenza.unicredit.it
ucilearning.unicredit.it
dimensionesociale.unicredit.it
mailing.unicredit.it
online-subitobanca.unicredit.it
online-retail.unicredit.it
www.unicredit.it
push2.onemarkets.de
sha2.unicredit.it
www.unicredit.it
corporateportal.unicreditgroup.eu
push.unicredit.it
openaccount-online.unicredit.it
www.gestionedocumenti-online.unicredit.it
trasparenza.unicredit.it
confidi.unicredit.it
www.buddybank.com
more.unicredit.it
ucilearning.unicredit.it
onlineretailbank.unicredit.it
www.unicredit.it
cyberfunds.unicredit.it
www.unicredit.it
unicredit.it
pagamenti.unicredit.it
newrsvp.unicredit.it
likeu.validazione.unicredit.it
mail.unicreditgroup.eu
click.aziende.unicredit.it
processihr.unicredit.it
onlineretailbank.unicredit.it
private.unicredit.it
online-retail.unicredit.it
www.unicredit.it
www.investimenti.unicredit.it
invoicecomm.unicredit.it
oco.api.e01.uat.omnichannel.unicredit.it
www.landing.unicredit.it
ial.unicredit.it
bankingonline-uccmb.unicredit.it
in-formati.unicredit.it
ebanking.unicreditgroup.de
www.circoloAncona.unicredit.it
mailing.unicredit.it

Certificate

The complete raw certificate details for www.circoloGenova.unicredit.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8QnrfdJeIsRwhu5/49U
UN2coUoDdtAkKc4Su8pl1ZlCE+ga46DLteZjtW+iHHiMOq40Wc73Zoh9/rB3q4+r
WLzn35EbswJhwWuHbAQHclSzcBsxPxuKAMMxjMCfBWvtD/c6yQJfHSNMVawgjUvO
evA+dGDxg4i6M23jtsygNNUR7JuE8y3abphcgOnKehTGcPjXW4U1pvFZD4Ennc2i
MSK0zU6+OmDSxdLAsiEbNzbQh00+89sYM+S2WhOPPsOb30DExJQt7rxiWFxsPoMR
CjBLsi59QK7tmbLD2fx0KiIxCaReWKHFp/KZG9QPcGUJ5Zeu2fgfHYra6SZsBUmV
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115943637669873346954796696182133594309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 09:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 09:39:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.circoloGenova.unicredit.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21683477783926327917063600944804571208441980480969618447501714873123046471161018166931977365214152883491491632612585734477637095583556650524892774855019450234840964825485633478701687541744640281106264230493403316256798351543808194602144630311920633606687218046192496273337442969354735551079978985286637588558928673418821496099416206564565640084448865296994169878284785232592633658254487724518014330393870790169717263335538726071530718092318699968982671057124296629607232171557825314304749182437469606531225815181504981710542558717754999823126782281858517361756741489376452538822329811196526226418903247183542286390591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circoloGenova.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circoloGenova.unicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2ff213c276ef6f60b87c1eb805effa3d488ab81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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