mobile.gruppohera.it

- mobile.gruppohera.it -

Issued by Thawte DV SSL CA

About this certificate

This digital certificate with serial number 43:39:1e:e9:bb:fd:48:54:3a:6c:6b:dd:8f:ee:dd:bc was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

mobile.gruppohera.it

Organization: mobile.gruppohera.it
Organization unit: Go to https://www.thawte.com/repository/index.html
Organization unit: Thawte SSL123 certificate
Organization unit: Domain Validated

Thawte, Inc.

Organization: Thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:39:1e:e9:bb:fd:48:54:3a:6c:6b:dd:8f:ee:dd:bc
Serial Number (int): 89354863629155720666161845232651394492
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): c3:3d:a1:f0:02:f4:37:e6:ab:84:b8:dd:57:27:99:c3:71:89:70:30
Fingerprint (sha256): 25:80:86:23:af:94:7f:89:78:81:4a:01:71:b8:98:87:da:f6:65:5a:f5:32:72:0b:44:31:94:ee:1f:e7:ab:ad


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-dv-crl.thawte.com/ThawteDV.crl

Check the revocation status for certificate mobile.gruppohera.it

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobile.gruppohera.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gruppohera.it

(limited to 100 certificates)
heureka.gruppohera.it
*.gruppohera.it
gepeweb.gruppohera.it
heureka.gruppohera.it
incapsula.com
*.mobility.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
incapsula.com
incapsula.com
heureka.gruppohera.it
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
heureka.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
webmail.gruppohera.it
heureka.gruppohera.it
heraricarica.gruppohera.it
offerte-heracomm.gruppohera.it
akamai-san122.exacttarget.com
ragazzi.gruppohera.it
indicienergetici.gruppohera.it
www.gruppohera.it
incapsula.com
incapsula.com
pasemplice-tst.gruppohera.it
incapsula.com
incapsula.com
mobile.gruppohera.it
incapsula.com
sts.gruppohera.it
eng.gruppohera.it
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
eng.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
www.gruppohera.it
incapsula.com
www.minidot.be
heureka.gruppohera.it
servizionline.gruppohera.it
www.gruppohera.it
heracomm.gruppohera.it
incapsula.com
offerte-heracomm.gruppohera.it
*.gruppohera.it
akamai-san122.exacttarget.com
sip.gruppohera.it
www.admin.k-9access.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
heracomm2.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
servizionline.gruppohera.it
incapsula.com
click.contatti.gruppohera.it
incapsula.com
*.gruppohera.it
www.gruppohera.it
servizionline.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
ragazzi.gruppohera.it
app.paymytable.com
incapsula.com
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
*.mobility.gruppohera.it
sts.gruppohera.it
heracomm2.gruppohera.it
*.gruppohera.it
incapsula.com
heraricarica.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
beam.gruppohera.it
heracomm.gruppohera.it
incapsula.com
games.gruppohera.it
beam.gruppohera.it

Certificate

The complete raw certificate details for mobile.gruppohera.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9bqIlNcaoPnnGmdV961
RG6fwv9RivBRkByG/NVjVcRVZxMwfzS/dhlGfy6VkZWLeXzPB7Wo2RoIej+qq60A
pD9kJxuUeXXfwrDbtJ+vznFeheWljFmiM5EWcT23PlOm6vRT9E0AsJUWro05Q5z+
izfuzlHG4lsxgkxTvPDrZeZ0i6FkfJNksi6T2icgp6c7FT0OhYbvVU16vp3Aj8c8
rCqd+PH+gGVKY+fp3ty+PrKT0R4ihwaOo3M3tGPs9dYUXZnQiHVnnByeESFW6a1x
DHS1rGET1xddJeg3OPZzlB+7jUaCTpege4L4QoLWXdeIZ88AK7PU7ZC1GmBMHedz
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89354863629155720666161845232651394492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mobile.gruppohera.it'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Go to https://www.thawte.com/repository/index.html'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte SSL123 certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mobile.gruppohera.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21187775261686848062172117248156683274866622070686841865738041731825646578441515629927040610451027545643302732778416320137272327360739154081559650435212483878025472187240466223852893300843228189432585963474945092931300701419662873311732020157480345366079100822001438526453428323738432853799926390982458778368887771465475862901856803074184339020313919811677316493524388591603413092318757377318436851864512956105437993422771521233977041538610319093818654287902697270669516580817852533091476776597781886253459065605128608161376389292347952837583439439979782540275633853321763075127005101920066544521828401565039856153491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-crl.thawte.com/ThawteDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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