www.tecnimont.it

Issued by R3

About this certificate

This digital certificate with serial number 03:61:f8:b3:e2:2d:62:09:bb:b0:d9:d2:ba:74:f4:02:f0:0f was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tecnimont.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:f8:b3:e2:2d:62:09:bb:b0:d9:d2:ba:74:f4:02:f0:0f
Serial Number (int): 294674829938124286802503820956717176516623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:77:e7:a8:0a:d2:23:56:e5:96:0e:ab:53:2b:6d:dd:de:6d:49:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:c9:24:20:3f:30:16:cd:c6:70:bc:56:cd:31:d7:b4:2d:92:50:2a
Fingerprint (sha256): 19:23:62:1f:94:f6:64:0d:c0:7a:ba:6a:dd:2c:ed:97:57:59:a6:d8:ef:86:c0:e5:09:19:45:eb:62:3f:41:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.tecnimont.it

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tecnimont.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kt-met.com
mairetecnimont.com
met-development.com
mta-sts.external.kt-met.it
mta-sts.external.met-development.com
mta-sts.external.neosiarenewables.it
mta-sts.external.tecnimont.it
mta-sts.kt-met.it
mta-sts.mairetecnimont.com
mta-sts.mairetecnimont.it
mta-sts.met-development.com
mta-sts.neosiarenewables.it
mta-sts.resident.kt-met.it
mta-sts.resident.tecnimont.it
mta-sts.sap.tecnimont.it
mta-sts.tecnimont.it
tecnimont.it
www.kt-met.com
www.mairetecnimont.com
www.met-development.com
www.tecnimont.it

Other certificates including the domain name tecnimont.it

(limited to 100 certificates)
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it

Certificate

The complete raw certificate details for www.tecnimont.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Gr9lWggXnnWF/yPIPFF
ZoHmFh8QQXvsLeuze4RyMJl8Jcj9iSNNZqbAyI93HdfVWufLbpBDYvVRf/zzpDIh
YrWaTmfCnoIwU52odOFPQLFoJezP2Ip5tN71/wb/nsWpFaZgA6KwW7QN51LAJWwv
JzHruPmByUWJuT4SaPMKrppLpauVAQU2AeQXfYxa+hyhGhBEP1Mcy6YVOI1FUD1v
LkYlRB6j+QyFd5NGIzBj3D0WZmg/JFY4S9br/Qw5mJ5ucLRrdK+AHhjn8hPELy50
87bplqE/EpXdOXWW1yBCo8ntILQqp7JECUqfZPjEoBLXMzIsgta2zG9dsgGGTcMn
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294674829938124286802503820956717176516623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 08:13:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 08:13:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnimont.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30854905423710593804912779567958446402992678286955596270716376360438379123159216105210312132398293019903792522602844771096904233264860473433085015476220855137089297418974674130220152189744867188148087862914633632525347701113246330711058111751222932291994608459651231107446327722153346539350474511447485997238066647735075246018818178406467714189603004168117390621252692079020312889476816398322041868681160558889314802857326318302183450150140270748508358884935524521733167463259556751521681784230720944551897358941311793879572716652532719337988756732342602629628965894611168865483461751996111824902632160645816432928663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a77e7a80ad22356e5960eab532b6dddde6d4987
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (528 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kt-met.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.neosiarenewables.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.neosiarenewables.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.resident.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.resident.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.sap.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kt-met.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnimont.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001841391114d0000040300473045022044141abe2232b8983f75173ac9727167d365fb6ddee04662dd32168201d6ba5402210080fec8075130d356d399ee22cefab71779d9ab87c4d69f2dfe092e0c8cb582110076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001841391132d00000403004730450220318b732d5f088b49cce30dfd4a228bfe365419d4a326f5f14e435ae8675af2e3022100dd5a65a683bafe74b1a2a8e2a36c04f56effa27a5e6979fc3d37bfb857e66f91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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