concorsigelmini.unich.it

- Università degli Studi "G. d'Annunzio" di Chieti-Pescara -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:e4:e9:74:6d:35:b4:28:20:86:ae:36:8d:3b:8a:ba was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Università degli Studi "G. d'Annunzio" di Chieti-Pescara

Organization: Università degli Studi "G. d'Annunzio" di Chieti-Pescara
Organization unit: Area Reti e Sistemi
Locality: Chieti
Country: IT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e4:e9:74:6d:35:b4:28:20:86:ae:36:8d:3b:8a:ba
Serial Number (int): 3847034701019064844131127371465722554
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 94:c7:44:c0:29:c8:6b:a1:bf:52:d0:ff:ac:7e:dd:2b:ea:2c:52:eb
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): e8:76:98:3a:7a:26:43:61:7e:1e:a3:cb:54:4e:8a:ad:5b:44:4e:1b
Fingerprint (sha256): 24:d5:81:27:c0:db:75:27:03:ff:da:47:d0:48:38:ae:35:67:72:84:e6:4d:00:3f:66:86:4a:cb:f6:b1:8f:93

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate concorsigelmini.unich.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concorsigelmini.unich.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

concorsigelmini.unich.it

Other certificates including the domain name unich.it

(limited to 100 certificates)
concorsigelmini2018.unich.it
segnalazioni.pensplan.com
fad.unich.it
amministrazionetrasparente.unich.it
mail.studenti.unich.it
fad.unich.it
amministrazionetrasparente.unich.it
whistleblowing.mairetecnimont.com
*.unich.it
www-thch.unich.it
core.unich.it
servizipersonale.unich.it
servizipersonale.unich.it
webmail-prev.unich.it
whistleblowing.unich.it
amministrazionetrasparente.unich.it
fmlab.unich.it
fmlab.unich.it
fad.unich.it
www.sci.unich.it
helpstation.unich.it
economia.unich.it
fad.unich.it
core.unich.it
clei.unich.it
helpstation.unich.it
sviluppo.core.unich.it
www.sci.unich.it
core.unich.it
helpstation.unich.it
mail.unich.it
economia.unich.it
whistleblowing.giustizia.it
decsrv-35.unich.it
www3.unich.it
zeus.unich.it
whistleblowing.giustizia.it
owncloud.unich.it
whistleblowing.giustizia.it
zeus.unich.it
segnalazioni.pensplan.com
gitlab.dec.unich.it
fmlab.unich.it
*.unich.it
www.sci.unich.it
www.atmo.unich.it
amministrazionetrasparente.unich.it
decsrv-35.unich.it
economia.unich.it
fad.unich.it
whistleblowing.giustizia.it
economia.unich.it
ricerca.unich.it
fad.unich.it
economia.unich.it
webmail.unich.it
clei.unich.it
fad.unich.it
www-thch.unich.it
www.sci.unich.it
economia.unich.it
helpstation.unich.it
www.atmo.unich.it
qr.unich.it
concorsigelmini.unich.it
webmail.unich.it
clei.unich.it
segi.unich.it
helpstation.unich.it
decsrv-35.unich.it
www.sci.unich.it
economia.unich.it
elearning.unich.it
helpstation.unich.it
www-thch.unich.it
core.unich.it
whistleblowing.giustizia.it
economia.unich.it
segnalazioni.pensplan.com
zeus.unich.it
fmlab.unich.it
gasl.unich.it
nottedellaricerca.unich.it
whistleblowing.giustizia.it
whistleblowing.unich.it
whistleblowing.unich.it
nottedellaricerca.unich.it
amministrazionetrasparente.unich.it
core.unich.it
amministrazionetrasparente.unich.it
fmlab.unich.it
whistleblowing.giustizia.it
segi.unich.it
decsrv-35.unich.it
helpdesk.unich.it
whistleblowing.giustizia.it
zeus.unich.it
helpstation.unich.it
economia.unich.it
whistleblowing.giustizia.it

Certificate

The complete raw certificate details for concorsigelmini.unich.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrUsUMILHC5l7bEPaX4Z
YbmvHW4QQXW9DULSb5IqxTgfpCDaAGGyjB+aO3StsAS6TZk2FV/+XvBMYnaw6YTi
QxVorQLZVdiu/tA1qB+ybttv1cjY6RNijq1Idbw9rtLi2A9XZ1NitYctxW++D+S0
WejJ+YuC9JBi1vIS/mX6isNBiiwJmSy13OyxlfsGltE2ok6umX0O0RijaC1DMMMS
J5UkAyB2e2tCbTZQDSDhH/QwNVFuwE/69HSkPNbv6vUmQIY+FmJ58QeuxcX1xn7H
kz3mbtX3zlOZeIXDY75zzdl5WXMm1RCfrnSy/LU4A5Xg62l+kxj/OlTG4uJwhLvx
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3847034701019064844131127371465722554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-20 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chieti'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Università degli Studi "G. d'Annunzio" di Chieti-Pescara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Area Reti e Sistemi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concorsigelmini.unich.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25084524172213490400038922767637540112784959363068597088129899838710634088191233088494507735349602247939961106917584818068681708364760829594626293140785885264563390228169537111626269774360352757085964479210777807058144699337682853203420898401955045759836818055635207671182755501510475213902839832040045283007887690844574585615597894036116644267092301733404885578871185070457342999073279549565433649196974766593200392314193846196400526260859755956110249858048548274073307408814206505979809549467042967432224886090935658513669844358686479520385998688621770489937316199912057528983067050309419010988211011018597297025491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94c744c029c86ba1bf52d0ffac7edd2bea2c52eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concorsigelmini.unich.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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