api.impresainungiorno.gov.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 2b:01:87:8d:9a:24:70:56:86:ea:b5:60:98:69:7f:a1 was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.impresainungiorno.gov.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 2b:01:87:8d:9a:24:70:56:86:ea:b5:60:98:69:7f:a1
Serial Number (int): 57164745459782068192452188802306899873
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: aa:b8:62:89:df:87:69:98:48:39:82:15:86:3b:61:29:86:ff:55:b8
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 3e:ef:91:8a:2e:54:c9:fc:c4:92:1f:e2:08:13:a0:3a:55:59:8a:aa
Fingerprint (sha256): 2a:f0:34:2b:51:8d:e4:5e:a2:40:49:f0:ca:86:03:c7:7f:80:12:e1:a1:97:fe:e2:70:7a:9f:43:de:3d:f3:09

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate api.impresainungiorno.gov.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.impresainungiorno.gov.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.impresainungiorno.gov.it

Other certificates including the domain name impresainungiorno.gov.it

(limited to 100 certificates)
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
pa-demo.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
www.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
pacl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
api.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
subf.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
comunicazionireaws.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
api.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
test.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
test.impresainungiorno.gov.it
pa.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it

Certificate

The complete raw certificate details for api.impresainungiorno.gov.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z4Spw3Mj6mE93t0E1uH
YdRJIk4LNZ3KsAlHK0wG6XXQ8RWKHtroAykUkHpsRerbUW3js1M+6xDlbZkwHGL0
LkY8O81aoVs+H9ekU4bCmzHJQtXBljaPJsUTU/a8K6zcgzdX18YmbrRI6fEkjxrU
pX64xh8YVfmviOzDele0USFH/75G8tyH66iVO5xLu7/OICceOc7W9ibsuqQXscOm
6B7aoPRTjpPP6AQBbR7vmL5yIMfHp3YvijhUwjG69oUF1sE6KE/hKLdYzfJWexVy
j52WLoO3RwhzhpKwbelJLKpRsXSOrTXVCDsxNS2sMTcHjE3Sno24hq54J4fykMob
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57164745459782068192452188802306899873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 09:44:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 09:44:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.impresainungiorno.gov.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26666891616686945536800608653768152288699572909219070990157904519526205738119419280058009462110479401497348295299434997374898422424442870547683486446613151787986148502110097291444305071482611433388754143511613856347916679737557339789219139288647258214294326424217826583569412609533493255630735194361222541789609361962686452535473248376773313595817018348398971994420308092571121061715975767426698770138201545156810911292789213064052320906652439681846056881717905311752149842983136260164807429364650636523339686429421857994888731502076160309730823573501003496127486914097141815366564494993263978874463908200912842791809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.impresainungiorno.gov.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aab86289df87699848398215863b612986ff55b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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