www.cortedicassazione.it

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:0b:42:e5:b7:df:65:f7:80:18:60:c6:68:c4:ff:a6 was issued on by DigiCert, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cortedicassazione.it

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:0b:42:e5:b7:df:65:f7:80:18:60:c6:68:c4:ff:a6
Serial Number (int): 19996892041406506753923230568569700262
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:89:49:41:2c:f0:b7:84:4d:5a:9c:fd:df:1e:2f:0b:c5:78:ea:c9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): aa:73:d9:26:70:cd:c0:bd:79:83:93:61:f4:3d:33:a2:27:96:86:e8
Fingerprint (sha256): 22:e3:31:0e:73:a7:c9:7d:2e:31:83:ec:e8:93:7a:4a:a4:da:ea:5e:49:c7:67:5e:35:c6:b3:27:c6:97:c0:d0

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.cortedicassazione.it

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cortedicassazione.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cortedicassazione.it
cortedicassazione.it
www.garantenazionaleprivatiliberta.it
www.gnewsonline.it
www.pg.bologna.giustizia.it
www.procmin.palermo.giustizia.it
www.procuracassazione.it
www.tribunalesuperioreacque.it

Other certificates including the domain name cortedicassazione.it

(limited to 100 certificates)
registri.cortedicassazione.it
registri.cortedicassazione.it
www.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
www.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it
registri.cortedicassazione.it

Certificate

The complete raw certificate details for www.cortedicassazione.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BciQjJDa8JAS0UHptuk
LXd0ufjZo70t+1nt5rzzZtlPV/As69HjESJOCwUTngykPvOJ0n1wGmbLjILQFf7F
rBEW9wIE0o3qEYBGGwla4xVi51JOk240qc+vWI+nYhnX3oDIahZ2JuqACb+AEiuD
kwV8drKjRJtIea/PjrEd26pd9pbBeBtiRBocnlsspGKc13Rt3Ht4wjp/WXN7alSp
DAXGeCNtXzY+CFIF3qJkt0+66hQZmaG7Uxzg4uH0RMygOdRFlKrBX1jR7eS8P8Tw
z+zRcDjgy1nLkFjt/8UIywB6aWl6BiMsPRQDBhuIdwXBeiK5HrpiiepCRmyeiqWD
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19996892041406506753923230568569700262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cortedicassazione.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26773928365887946642282219997563174162708354009712806956781904375861949566917454499887589211794487897717284683269529978404060312706873425541460576612580383383550696635122468293124103410681100565989841611243919811351991484037782822778928738590257983279881569472989532658493511787350836817901625941663559766497487506010780209680256317329019632550359115022684284491276672790300257194394645645191973492125488365709128051090652480029052733694110958756793667301535510206287362675624600331395895905563964623443497789559395881034761663073412122684980772724852381495215022766474703651665775831611154678044805630897805790118761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad8949412cf0b7844d5a9cfddf1e2f0bc578eac9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cortedicassazione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortedicassazione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garantenazionaleprivatiliberta.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnewsonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pg.bologna.giustizia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procmin.palermo.giustizia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procuracassazione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribunalesuperioreacque.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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