www.procura.bergamo.giustizia.it

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:08:f0:f1:e2:8c:73:a8:f9:fc:f2:4b:77:68:d7:9f:b2 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.procura.bergamo.giustizia.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b5:08:f0:f1:e2:8c:73:a8:f9:fc:f2:4b:77:68:d7:9f:b2
Serial Number (int): 410052137020952923093070071300359231872946
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:83:2b:b0:42:2b:8b:18:42:27:89:81:4c:ca:55:cf:89:db:a1:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:8f:f3:40:bd:f8:12:ef:11:68:35:06:59:ef:fa:43:b5:08:99:36
Fingerprint (sha256): 1c:b0:70:d9:e9:b5:05:1a:a4:22:e3:fd:62:e5:cd:77:72:1f:bf:5e:77:c5:27:f3:0c:f3:b3:8c:bf:3c:02:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.procura.bergamo.giustizia.it

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.procura.bergamo.giustizia.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

procurabergamo.it
www.procura.bergamo.giustizia.it
www.procura.bergamo.it
www.procurabergamo.it

Other certificates including the domain name giustizia.it

(limited to 100 certificates)
old.asteannunci.it
www.tribunale.cuneo.giustizia.it
www.tribunale.mantova.giustizia.it
segnalazioni.pensplan.com
www.tribunale.agrigento.giustizia.it
www.tribunale.latina.giustizia.it
postaweb.giustizia.it
procura.pescara.it
www.tribunaleroma.it
whistleblowing.mairetecnimont.com
concorsipersonale.giustizia.it
www.tribunale.teramo.giustizia.it
www.procuraminorenni.salerno.it
www.tribunaleminorenniancona.it
www.tribunale.caltanissetta.giustizia.it
www.tribunale.catania.giustizia.it
www.pg.potenza.giustizia.it
www.tribunale.agrigento.giustizia.it
www.pg.reggiocalabria.giustizia.it
old.asteannunci.it
tirociniformativi73.giustizia.it
www.distretto.torino.giustizia.it
www.tribunale.genova.giustizia.it
www.procuravasto.it
segnalazioni.pensplan.com
www.tribunalesorveglianza.brescia.it
www.pg.sassari.giustizia.it
www.tribunale.tempiopausania.giustizia.it
www.tribunale.pisa.giustizia.it
www.tribunale.livorno.it
pvp.giustizia.it
postaweb.giustizia.it
ufficigiudiziari.genova.it
*.giustizia.it
www.tribunalesorveglianza.brescia.it
www.ca.trieste.giustizia.it
webmail.pec.giustizia.it
www.procura.bergamo.giustizia.it
www.ca.bari.giustizia.it
*.giustizia.it
www.tribunale.siracusa.giustizia.it
*.giustizia.it
www.tribunale.ancona.giustizia.it
www.tribunale.milano.it
www.tribunale.asti.giustizia.it
www.procura.cagliari.giustizia.it
tirociniformativi73coll.giustizia.it
www.tribunale.ivrea.giustizia.it
gestionemobileDAP.giustizia.it
whistleblowing.giustizia.it
www.tribunale.cagliari.giustizia.it
www.ca.salerno.giustizia.it
www.tribunale.livorno.it
www.gnewsonline.it
www.tribunale.trani.giustizia.it
www.pg.ancona.giustizia.it
www.tribunale.ragusa.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.giustizia.it
segnalazioni.pensplan.com
www.procura.brescia.it
www.tribunale.agrigento.giustizia.it
www.tribunale.taranto.giustizia.it
servizimobiliDAP.giustizia.it
concorsipersonaledap.giustizia.it
www.urp.milano.giustizia.it
www.ca.ancona.giustizia.it
www.procura.bari.it
www.tribunale.salerno.giustizia.it
www.procura.bologna.it
tirociniformativi73.giustizia.it
www.ca.milano.giustizia.it
www.ca.trento.giustizia.it
whistleblowing.giustizia.it
www.ca.salerno.giustizia.it
www.procura.bergamo.giustizia.it
www.procurasiracusa.it
postaweb.giustizia.it
www.ca.catania.giustizia.it
old.asteannunci.it
www.procura.lanciano.giustizia.it
www.tribunale.laquila.giustizia.it
www.tribunale.latina.giustizia.it
www.cortedicassazione.it
www.tribunale.genova.giustizia.it
www.tribunale.agrigento.giustizia.it
www.procura.piacenza.giustizia.it
*.giustizia.it
concorsipersonaledog.giustizia.it
www.tribunale.vercelli.giustizia.it
www.procura.teramo.it
www.tribunale.ancona.giustizia.it
www.procura.brescia.it
www.procura.brescia.it
ufficigiudiziari.genova.it
www.tribunale.mantova.giustizia.it
corteappello.milano.it
procedureconcorsuali.giustizia.it
procedureconcorsuali.giustizia.it

Certificate

The complete raw certificate details for www.procura.bergamo.giustizia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHgyS7mJrUPTCElw14PG
RLsjl7zmWK4bGiU9/d381DBiTCu1+xsOnH9hR7Js+SpL4mbOQ9vvwT1jVn944YlM
VKqbfnKcjUUTgDd3tZSWsddATPPz+BhQ8W0ZxQREcZhJipeYsG3IKLmTF+WljhGz
1A81AbQtFPmS++eNe9Vwspl/u/bfA8Hby1xxa3zwxqZI3+u0aV/UMRu5ox/9o90V
V7dCuaVUV4appBZyj195Tf22SRX/T/0cR8x+RNx9BY3J13DNDBL+talG2WO1he9r
E9FZXbV4tN/iuijOKvkYGHAQj8FDBYwtUOi+tzo4tbp1TWXoytlUz9Yx6MSTXZZL
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410052137020952923093070071300359231872946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 20:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 20:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.procura.bergamo.giustizia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20257399881988127185759471553260524627812675172858719146320072657138324345865976427085673937292725412415516770879202647341836584211929522782443074573178058060915962086639415951141882700302915841519758217920976169759026749855447319819981411030022317840896975597739101551400743377081839382421731450501483213008230799593124273005635412703603023386094167746685473342182989494765285102610445590485854077240508347246210518966548534603977968130073114274615896939316594502104002692462274570980194930939773312412456401566228767822838312369645791866552781821670589293088136437185516343986796508441844648207188695058718341352233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8832bb0422b8b18422789814cca55cf89dba182
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurabergamo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procura.bergamo.giustizia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procura.bergamo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procurabergamo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f885b09ee0000040300483046022100ad3614d0a0292c4166e31e18446ed5ab60414b99ea46f10977bcaa38625d6ecc022100f26c375b677479834656a34fa3598024f97d3bdd890ce3f3c57e03e07db682170075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f885b0a540000040300463044022035e3becb01b06c9747ed39d1bb848680a14738acbe0915a50a73be8dea42f5ed022003a39abe0bc8dde733b14dc2c49794b50a5cbfbff79ce9ca41d87fec7bba1bff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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