mdm.operaduomo.firenze.it

- OPERA DI SANTA MARIA DEL FIORE -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number c1:3b:47:c4:a3:93:12:fb:cf:8b:39:25:9b:3b:0e:9d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OPERA DI SANTA MARIA DEL FIORE

Company registration number: 00538420480
Organization: OPERA DI SANTA MARIA DEL FIORE
Organization unit: Desktopcentral
Organization unit: COMODO EV SSL
Address: 1 via della Canonica 1
Postal code: 50122
State / Province: Firenze
Locality: Firenze
Country: IT

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c1:3b:47:c4:a3:93:12:fb:cf:8b:39:25:9b:3b:0e:9d
Serial Number (int): 256848804331567888708975491173813259933
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d5:93:e6:3a:e9:cf:12:27:f4:49:69:dd:51:67:3a:cb:f9:11:88:16
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 8f:d9:b6:86:c8:c8:cc:39:5c:67:8d:06:25:a0:19:49:f7:d3:3d:c9
Fingerprint (sha256): 2b:cb:7d:86:7e:78:6f:01:8c:dd:e6:50:d0:ac:0f:3a:6e:7b:fe:61:2d:4d:8e:ed:13:07:e9:83:b1:8f:c1:bd

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate mdm.operaduomo.firenze.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mdm.operaduomo.firenze.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mdm.operaduomo.firenze.it
www.mdm.operaduomo.firenze.it

Other certificates including the domain name operaduomo.firenze.it

(limited to 100 certificates)
codicicorali.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
preview.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
sni.cloudflaressl.com
museology.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
operaduomo.firenze.it
preview.operaduomo.firenze.it
autography.operaduomo.firenze.it
preview.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.codicicorali.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
*.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it

Certificate

The complete raw certificate details for mdm.operaduomo.firenze.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx2vdEH8Oxt1p6u1sbKy
HzSisqpck3yiZpNb8royVxW7XK+ZxM54Krn2wWfry5k+pUIwE9YeK9+BAVUx5aZy
ql2WZkirMk2uaSB01XtFyHVun7lbAYj6y+UKeh35Nn2BVjAZQRhMnrftsx9RZYGq
Kw9qNUHpwnngKbrOu9QLNeFaeUW50jWsQjgGOqCUwBYQ9w2aFMAJqqnoChXCQj8l
u64ZwIda+g6mqjK4L640cV1o7mLa0UALyLJ4WPHfTtQ8bJ/cb6AW/gl5thiNYj+9
5MkgnmpWwxDx4ELO8DXDccAFMEibv2RTSUrfjagUt+b8xmaNRy73Ai3xycedZsOn
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 256848804331567888708975491173813259933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00538420480'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '50122'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Firenze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Firenze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 via della Canonica 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OPERA DI SANTA MARIA DEL FIORE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Desktopcentral'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO EV SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mdm.operaduomo.firenze.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22611294989319280052543625618752881821032314309168391561125459141985078710462828497855869244248144274136082848989693429909881257781399343774603381703827859629921005827732755952531368882765900561660304731321541700747139108497765633198887534685032829892805948946480099703795694608718239339073701388359746035358300354074091204278902735361053702483069491059375447554253143199505248053743641634144601268284107315615105088891826800816112072977444627847799174963421320513484526538384978010310575809670667738594278418011071365630790286805920127031473038773157216154973232555654341266825959009433948544761365312465551396939569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d593e63ae9cf1227f44969dd51673acbf9118816
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdm.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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