pacl.impresainungiorno.gov.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 59:b8:b9:6a:c0:93:99:7b:6a:86:b1:2d:2c:c4:d5:b2 was issued on by Actalis S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pacl.impresainungiorno.gov.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 59:b8:b9:6a:c0:93:99:7b:6a:86:b1:2d:2c:c4:d5:b2
Serial Number (int): 119260434950389381823015676074988459442
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f9:a7:7c:87:83:9a:d3:74:cf:8d:01:9c:2b:7d:66:83:b8:68:fc:db
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 04:98:6d:c4:b5:4e:94:b0:ee:35:59:cd:1a:b3:42:51:e7:fc:f8:a4
Fingerprint (sha256): 25:dd:56:19:e7:d7:91:0c:9b:05:8a:ea:fe:2a:ef:09:55:53:2e:bc:e5:a5:54:f0:52:c5:0f:83:8c:e3:10:7a

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate pacl.impresainungiorno.gov.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pacl.impresainungiorno.gov.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pacl.impresainungiorno.gov.it

Other certificates including the domain name impresainungiorno.gov.it

(limited to 100 certificates)
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
pa-demo.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
www.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
pacl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
api.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
subf.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
comunicazionireaws.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
api.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
test.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
test.impresainungiorno.gov.it
pa.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it

Certificate

The complete raw certificate details for pacl.impresainungiorno.gov.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CVznkJvkw3XbkwVFnzb
BquduwW6v9cZzEoRNtW6OqvKq7id7nUTVLgzotZr4B6qLTwhfEkZ17Ulcag8rlUZ
+FM/4p3MNoXDgO+Ss+xDImv6KMW4InyNcAzQU+V2knboymiz8ViWG+hWKLTVlNX0
j8ZeUARxBYUgzHA/GIHEY4TgZkNtZHihyi7m76N5TkDRbNj7lorrjwTbb8SoZ/bD
ZBw2TZsyx2IUWNkuwJT14rDW4H1XMv/2e/rh9LYsxnO35edVuWEBABuP52oNsqhp
UQizTbDIVEHE/p7h059Qle+fp7Z0H2xUqQo6Ps2wVqqcnfCHKRS07L+vLsQ17LFu
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119260434950389381823015676074988459442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-11 07:44:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 07:44:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pacl.impresainungiorno.gov.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26276035521782738929392860476161596333179625689457250834942939721530402220987963796008060439820325838334224306524884516136759979224698419173605251494721457131354046392281844301998611588355427132154512416010904924274225691243831832849676551989310842818864860916542884722449644508971438146222503502179755152083094985522299940852773693464023964636854284768475683304846759699434517252314963043485994408028699019458733032529622425287270478584958441570462677681547661421034322570974350954764955053938977665752755729244681999865541169592846397078283182713997580183678513675608376114792456846387045143491839760179034416311921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacl.impresainungiorno.gov.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9a77c87839ad374cf8d019c2b7d6683b868fcdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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