*.icdesimone.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 59:19:0a:e6:ac:8a:cb:af:36:4a:e2:a5:0b:79:43:50 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.icdesimone.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 59:19:0a:e6:ac:8a:cb:af:36:4a:e2:a5:0b:79:43:50
Serial Number (int): 118431320146293513501520571269538988880
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7b:7a:84:f5:d2:af:07:4d:84:7e:e6:5b:f6:58:4e:6c:55:93:bb:fa
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 07:42:60:b6:93:62:51:ff:24:f3:21:96:c7:7c:dc:2a:42:34:78:78
Fingerprint (sha256): 11:cf:c6:d1:66:cf:70:3f:d8:18:4f:27:c7:52:f6:b0:18:0d:c0:b9:69:e9:9d:17:36:8d:7a:08:ec:32:7d:07

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.icdesimone.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.icdesimone.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.icdesimone.it
icdesimone.it

Other certificates including the domain name icdesimone.it

(limited to 100 certificates)
*.icdesimone.it
*.icdesimone.it
*.icdesimone.it
*.icdesimone.it
*.icdesimone.it
*.icdesimone.it
*.icdesimone.it
*.icdesimone.it

Certificate

The complete raw certificate details for *.icdesimone.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ4qankS5yRO3JF47r1e
hdsIEBe8Sj/IQZdvqCJbNqSfnCLhJkWJkyLVJHNviKoVWB8HaJ1wro9IQcsbV9UQ
0pZk4qlkul0IaFWGtrZU4dd3pvVXMFVk6ZfNqgsGdS8tFFJ4xGboEe6m/iObotLr
4qqVKrdgXynkSQZ0MjkL+HsTFpputXvCaQCRSmgxv7CpO5LnF9TCXGyXfxZAEhHN
KztFhk7JHWXLua2amyAeGFyVjs8YMzUVSQ+GIlLAdlfJdZoUsdyuhwbqpCDdDdII
r0NVfWVa76XKZGhOSpi2lnDZ0VmSgy2Jt8ooPf//rCHdlySIMvSsZmGWAsQQt4R0
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118431320146293513501520571269538988880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 04:21:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 04:21:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.icdesimone.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21790982861386228234386829354283561538456376696009929734580392346569985989399694023253543948923841615629594975224306264804959219324284850291172811109427723114747545166907441763366388016609458874257400986122722809462443911993394868549014668788957172515374978517691568626503068989364392495508789535060795912087432480194934326836810399220241806051137168426846388782934627506624172617181358245210815560453903790294423172116413123540506036906985222510112610723282943984798528765695641477290394192111635772623224531903943247159583382441498905901949690961520159180423728608400403451941300772649529587313485295179047282963653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icdesimone.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdesimone.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b7a84f5d2af074d847ee65bf6584e6c5593bbfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [28 229 49 216 141 128 210 97 43 98 224 121 39 0 0 118 0 118 255 136 63 10 182 251 149 81 194 97 204 245 135 186 52 180 164 205 187 41 220 104 66 10 159 230 103 76 90 58 116 0 0 1 137 226 221 96 31 0 0 4 3 0 71]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 78688827098588623399296925723241007350457051991338153267603695733270548658290
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18714987169990186392537138468691528656522595287254528227622661018568082900322
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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