www.ubipramerica.it

- Unione di Banche Italiane spa -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 42:b4:8b:97:13:db:e0:1b:1a:70:0b:88 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Unione di Banche Italiane spa

Company registration number: 03053920165
Organization: Unione di Banche Italiane spa
Organization unit: Sistemi Informativi - Operations
Address: Piazza Vittorio Veneto, 8
State / Province: Bergamo
Locality: Bergamo
Country: IT

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 42:b4:8b:97:13:db:e0:1b:1a:70:0b:88
Serial Number (int): 20644276491569865511742213000
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e5:21:72:85:a0:b9:18:f7:6d:bb:2e:06:20:49:87:ce:ac:8f:e8:de
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 7e:ad:c4:3c:fe:62:71:75:33:d3:ca:e0:f4:ba:22:f7:de:2e:34:ab
Fingerprint (sha256): 2a:d1:b4:bd:47:19:a6:c3:08:94:8a:d6:68:9d:e6:ff:9e:be:fb:b5:4f:f2:6f:2e:28:98:eb:7d:9c:6f:ae:75

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3

Check the revocation status for certificate www.ubipramerica.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ubipramerica.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ubipramerica.it
ubipramerica.it

Other certificates including the domain name ubipramerica.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ubipramerica.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo87a0sPL65Tj8ie9iM0N
trQuhWzz+64guuvd2/jedRlPviiE/1YQ0srslLfnAIKb3w6DVV9yVM4/VDHPaUWS
QjihqcTtfZyu7pIAiA2laoXcoWWcmCMlqPft0eS2nSFiBIoT10pXJ8T4uLR37TGm
7Fgg8ALmxzG8ZoETJBBBc70pwPFl1VZQBkt0zsOs667ppDa/eIpZ5uQmQlWIk060
5A4JKOoky8ajnrBY/8NM6nIBgUvP6nBMS6tDN5bCZlviT22AiGv6HJv0fiQmcpL1
5H93Ciat0wM1cc5p0Ttqr0lIAmzVXB1i3GtiPzZQH7P448TNGy5GEv1afJ/DR9qL
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20644276491569865511742213000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-06 07:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 07:51:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '03053920165'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Piazza Vittorio Veneto, 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sistemi Informativi - Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unione di Banche Italiane spa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ubipramerica.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20678847602490994472671680023152108454822559565611385760421540797391425303413140865064720281540152041435545709543515330964469100371377950898527410320968775712145121197359093530624568927634288063648708669418683820699191616617140151976745001117511985140791638085906189044710882180059336951094838913218310980897495285568563246334909122837747049027622194612790740986772411935729354721362577926669063913614009845678719126300303926195447930413330446748180263420460882323693837415425108141021765730353532513040494628372201289818669749893483588526114450729147489464119718829782774781983044428707697569136442286022078974561261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubipramerica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubipramerica.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5217285a0b918f76dbb2e06204987ceac8fe8de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c7c62b8ed000004030047304502201b2e90fbdcbef533dfac5e5818135bbf4d6a0317573ba2f12122d09486baabaa0221009aefd56a2767596a464cd261604e6973cd88fb87164e878d6bdadc1a7f70310d0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015c7c62b902000004030046304402202b408f979186a1e8e9db664b3f7803d18d3e422cc754b2524f6d882a7e58a9a3022010f3ac01c15d5642356caa771bf88bae5403213b20d18ca2aafaffa2d923c2b6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c7c62bbf60000040300473045022100bddf472f8190a488e793584d6198dee8111ef38d1155cd595dbe3b84317782e60220688e6d7f9a52024c7754092c4139b2afadc5b62812638b559d76eac9bd415683007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015c7c62beef0000040300483046022100ff1a8bef8fc460497cd6a01b169977fd24a748e8851bd1fb8100c8cf82164fe50221009769dd843325dda9e407fabb19aec90705125d3169e5ba9d891f14c0c419a9aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0093a7c14ec3575a3062d347ae31848a701d9ccf7f1261a20f216bb9023e90636103cdcff71a46100756839b06039bd26fdf434926736d900d95597f76f5d2a2eee1bcbb1d715a8ac98d860293aff1d8ffbfa853a5ea0fecd4576463519b1ef2262b06a03efeacb9b9a2f5dd8f3bffbfe38955e9f8587eb853a664aa595168cbcad2c9f00706a6aee4d914d578ede26eca35f96b7c4c613c77524d65107d7942f8856baeb4b17b6217f8ec143ddddb07c959677b1ff1c38ec145636b672b017e374b63e8795bb85f90479d135ef3dc76a27a8060a7c13cd3b9966b027358573a6cea078c7024e8cd9e44964f62b7e10d898e4a0987adcec1f300df529a086524be