www.mairetecnimont.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b3:d9:30:77:4b:26:0c:1b:ca:36:11:df:0a:db:d7:d5:4b was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mairetecnimont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b3:d9:30:77:4b:26:0c:1b:ca:36:11:df:0a:db:d7:d5:4b
Serial Number (int): 409648381530784138054421634074482266592587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:a8:d2:5a:aa:48:ff:a3:9e:47:f4:c7:ed:c2:28:fd:eb:e6:2c:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:c8:b9:aa:01:96:5c:d6:11:f3:ec:d4:9a:d5:f1:6d:0f:bd:19:70
Fingerprint (sha256): 1f:36:a1:62:de:28:12:f7:e2:34:df:ed:64:75:ef:33:ff:07:52:d9:8b:5c:4d:92:ff:ae:a8:0a:a1:57:6b:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mairetecnimont.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mairetecnimont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

docweb.tecnimont.it
docwebkt.tecnimont.it
h0.tecnimont.ru
hrp.tecnimont.it
itmilaps01.tecnimont.it
marportal.mairetecnimont.com
metspmat.mairetecnimont.com
mmsportal.mairetecnimont.com
oammet.mairetecnimont.com
prometeo.mairetecnimont.it
reporting.mairetecnimont.com
www.mairetecnimont.com

Other certificates including the domain name mairetecnimont.com

(limited to 100 certificates)
segnalazioni.pensplan.com
www.mairetecnimont.com
whistleblowing.mairetecnimont.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.mairetecnimont.com
www.mairetecnimont.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
whistleblowing.giustizia.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
www.tecnimont.it
whistleblowing.giustizia.it
*.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
whistleblowing.giustizia.it
performance-commitment.mairetecnimont.com
whistleblowing.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
www.tecnimont.it
segnalazioni.pensplan.com
anywhere.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
marportal.mairetecnimont.com
segnalazioni.pensplan.com
sts.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
sts.qual.mairetecnimont.com
whistleblowing.giustizia.it
wifiportal.mairetecnimont.com
metsmat10.mairetecnimont.com
www.tecnimont.it
whistleblowing.giustizia.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
www.tecnimont.it
www.mairetecnimont.com
segnalazioni.pensplan.com
segnalazioni.pensplan.com
*.mairetecnimont.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
www.tecnimont.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
vdi.mairetecnimont.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
www.tecnimont.it
whistleblowing.giustizia.it
www.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
anywhere.mairetecnimont.com
whistleblowing.giustizia.it
www.mairetecnimont.com
metportal.mairetecnimont.it
*.mairetecnimont.com
*.mairetecnimont.com
whistleblowing.giustizia.it
www.mairetecnimont.com
*.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
www.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.mairetecnimont.com
www.mairetecnimont.com
segnalazioni.pensplan.com

Certificate

The complete raw certificate details for www.mairetecnimont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66WvrNpkAaaibs8pgjm5
gcMXwOeZE+9HYpNGdtV38JGRKmvEZrpFc2hNT/SPZZswe57v2RhBiEC0FGyG7Vtb
LFDQARMABR9rzsTrJ+83C0pHWYr25ZCcnMp2nO6qU6OZ+1+v3SHO9RuIwTqADL0u
ngu7CAgS2WqRER9uOXNSyIxdalTuazZjuMErtO1dluPYdpOcf05G1n9jgYeP2DGU
hMbwOB6XqF47VVFkAbjoQ/mP7TZxFpOvDlJJR7/LSIlvlCeHV7h11xZgmO+zNx9L
RH3JVoyOUe8/3jVsAHDi5xjYd19G3tLPJ3gVissXcOaP68kySTmfUtm2/sdmPqI7
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409648381530784138054421634074482266592587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-13 07:19:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-13 07:19:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mairetecnimont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29747704592777104669586619083240549802438245099962679640063302216897496732452866838612316551558161086829558663254450724899455901403587729975781082876325183413353089914775531708020957349376850870041058194610230293613457275210383350480902004201986334069735709188085115910845086526817638445303992556757009273681642267691377858359191630293584623676541864487708518087573459157571148839389588831676123082773508361643132781735180986341013514556132012176151691742204925910337551949370817773987885303021804056961176233594300679801605476671495806898531542635422533544551976443875881646355979140710318584728191912731086260681537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87a8d25aaa48ffa39e47f4c7edc228fdebe62c78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docweb.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docwebkt.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h0.tecnimont.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrp.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmilaps01.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marportal.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metspmat.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsportal.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oammet.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometeo.mairetecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mairetecnimont.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017db2e0494c0000040300483046022100f8d9215862edc967629a330227f37828f7355fa15eed467e710e54ee2352a6ab022100ba00eb9fd82456ce89e230b1a43e1110f7aa81c48a3c554cba67fc76f68dbbd70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017db2e04aed000004030047304502202f87ab2459d2b977633a42748d9a4c7109cb8ec2445239d0ff1e56f14bb62e6a022100878b7692e69cc4555c4273d8ae27bc266f97064b48df96284bd7c2471ec058dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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