nga.autostrade.it

- Autostrade per l'Italia S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a3:ca:52:5e:d5:7f:8e:82:00:00:00:00:50:e7:12:3e was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Autostrade per l'Italia S.p.A.

Organization: Autostrade per l'Italia S.p.A.
State / Province: Roma
Locality: Rome
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a3:ca:52:5e:d5:7f:8e:82:00:00:00:00:50:e7:12:3e
Serial Number (int): 217714677949474611887261063168720835134
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 01:e8:1f:d4:63:56:35:63:84:71:da:7e:ed:1f:10:d4:3a:03:37:ea
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a7:c9:fc:c1:c7:99:90:25:54:94:29:a9:22:47:24:6a:01:91:99:dc
Fingerprint (sha256): 2b:0a:3c:a6:4c:3a:43:29:37:d6:2b:90:f0:d3:0d:b8:92:9d:4d:a0:4c:74:62:75:95:1c:e3:a8:5c:27:7a:57

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate nga.autostrade.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nga.autostrade.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nga.autostrade.it
www.nga.autostrade.it

Other certificates including the domain name autostrade.it

(limited to 100 certificates)
www2.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
www5.autostrade.it
mailbox.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
teonline.autostrade.it
daw.autostrade.it
logos.autostrade.it
logos.autostrade.it
aesr-dn.autostrade.it
supplierregistration.autostrade.it
portal.ncw.autostrade.it
gmc.autostrade.it
www2.autostrade.it
www3.autostrade.it
cdn.autostrade.it
portal.ncw.autostrade.it
www5.autostrade.it
dad.autostrade.it
*.autostrade.it
supplierregistration.gruppo.autostrade.it
supplierportal.gruppo.autostrade.it
www2.autostrade.it
www.autostrade.it
supplierregistration.gruppo.autostrade.it
nga.autostrade.it
nga.autostrade.it
servizitps.autostrade.it
servizi.autostrade.it
fbt.autostrade.it
servizi.autostrade.it
ca.autostrade.it
aesr.autostrade.it
logos.autostrade.it
dpn.autostrade.it
www2.autostrade.it
www5.autostrade.it
cxsrv.autostrade.it
cxsrv.autostrade.it
www3.autostrade.it
meeting.autostrade.it
www.autostrade.it
www2.autostrade.it
filetransfer.autostrade.it
video.autostrade.it
teonline.autostrade.it
brm.ncw.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
cxsrv.autostrade.it
servizi.autostrade.it
www.autostrade.it
servizi.autostrade.it
servizi.autostrade.it
video.autostrade.it
filetransfer.autostrade.it
supplierportal.autostrade.it
sbce-b1-3.autostrade.it
eserv.autostrade.it
*.autostrade.it
www.autostrade.it
www2.autostrade.it
www.autostrade.it
servizi.autostrade.it
*.autostrade.it
nga.autostrade.it
cxsrv.autostrade.it
eserv.autostrade.it
teonline.autostrade.it
www3.autostrade.it
supplierregistration.autostrade.it
aspi-salesforce.autostrade.it
logos.autostrade.it
www2.autostrade.it
teonline.autostrade.it
serviceserp.autostrade.it
aesr-dn.autostrade.it
dad.autostrade.it
*.autostrade.it
logos.autostrade.it
daw.autostrade.it
cxsrv.autostrade.it
eqnx-edge.autostrade.it
servizi.autostrade.it
dpn.autostrade.it
cdn.autostrade.it
AspiWiFi.autostrade.it
logos.autostrade.it
dad.autostrade.it
teonline.autostrade.it
www.autostrade.it
serviceserp.autostrade.it
www5.autostrade.it
AspiWiFi.autostrade.it

Certificate

The complete raw certificate details for nga.autostrade.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMZw/U6TYgiNZF2T7taV
zYvFg+dn5DUDfx2xeKG7aquCi/+BdvVeEu8SCsnEzwvFj/2qeW6X3U79Ub238p9J
9uXS3WRYdjsMHcFdYVu0PyaPy0ov3qnBmFfCVZ6d6HBRj7a4zcWlNphhdmnWlQht
FgWN3fy/TndqKtXgvv2P7Ey+rcQewvksCiT0MJO6kF14I1mIzIusWZ2bJfWRFiEz
1CZFHd8GuuHMkY7xoECgqL16zXqccu0FQ6jyUv7Iz28H5Ik3sKzUvV05zCX87rxT
FGq3gjxGYiBpCQhtow94n+75nyy7blfOgnhLPMxRYqvV78bXY7HN1nubEYGVyx0M
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 217714677949474611887261063168720835134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 13:28:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 13:58:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autostrade per l'Italia S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nga.autostrade.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23325703198022693913532223370487446924341857209404335640217487874970617258623764768756951850795061257659552617038975956079918801116118316642382275382301765913545297639930972243337936931375054424474748290639476307751078133892120968147486340292908701535322058009040612746738060166837438658107391522464891877778029508342048771526449647609555719107031677124688318099664075573667896340783532247918727514026563395299720088410821896809414323249729673448917494434173978385889000686709997246365765087815365131773080785355952358283480236135479937218802240719753623652688126442806348493881381623635626693539110716949618931600551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nga.autostrade.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nga.autostrade.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01e81fd4635635638471da7eed1f10d43a0337ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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