tsapp.credem.it

- Credito Emiliano S.p.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:4a:90:82:21:c8:95:03:f0:04:b3:52:4d:55:e6:60 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Credito Emiliano S.p.A.

Organization: Credito Emiliano S.p.A.
State / Province: Emilia-Romagna
Locality: Reggio Emilia
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:90:82:21:c8:95:03:f0:04:b3:52:4d:55:e6:60
Serial Number (int): 4374844931985871751396252010302269024
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 9b:ff:de:27:75:e8:78:1a:a6:27:bd:6f:10:18:bb:3d:44:60:32:41
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d6:5b:d0:47:0a:16:2a:b0:62:42:28:55:41:df:17:40:74:8b:5e:ca
Fingerprint (sha256): 2c:5b:cd:1a:64:20:87:54:22:13:92:b8:75:be:e3:7f:4b:c4:25:6d:f4:0d:31:98:95:d5:38:4b:fc:9f:6a:a7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate tsapp.credem.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tsapp.credem.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tsapp.credem.it
www.tsapp.credem.it

Other certificates including the domain name credem.it

(limited to 100 certificates)
m.credem.it
premia.credem.it
www.credem.it
appscoll.bancadimpresa.credem.it
appscoll.credem.it
webchat.credem.it
image.email.novartis.es
mdm.credem.it
extra-coll.credem.it
valido.credem.it
mybanking.credem.it
www.credem.it
ibxtutti.credem.it
firmadigitale.credem.it
cit-coll.credem.it
m.credem.it
smallweb.credem.it
m.credem.it
sip.gruppocredem.it
telemacoweb.credem.it
meeting.credem.it
telemacoweb.credem.it
image.email.novartis.es
banking.credem.it
apps.credem.it
valido.credem.it
tools.credem.it
tsapp.credem.it
sip.gruppocredem.it
api.credem.it
trading.credem.it
m.credem.it
webchat.credem.it
adfs.credem.it
valido.credem.it
smallweb.credem.it
secure.credem.it
firmadigitale.credem.it
telemacoweb.credem.it
san-2-s50.tlsprovisioning.exacttarget.com
secure.credem.it
telemacoweb.credem.it
new.credem.it
m.bancadimpresa.credem.it
mdm.credem.it
apps.credem.it
www.credem.it
smallweb.credem.it
www.credem.it
m.credem.it
adfs.credem.it
otp.credem.it
mdm.credem.it
new.credem.it
mdm.credem.it
vdidireco.credem.it
tools.credem.it
banking-imprese.credem.it
tsapp.credem.it
secure.credem.it
mybanking.credem.it
meeting.credem.it
www.credem.it
api.credem.it
smallweb.credem.it
valido.credem.it
otp-coll.credem.it
bss.credem.it
mdm.credem.it
bip.credem.it
abacocert.credem.it
secure.credem.it
trading.credem.it
trading-coll.credem.it
newvir-coll.credem.it
smallweb.credem.it
tools.credem.it
appscoll.credem.it
secure.credem.it
smallweb.credem.it
banking.credem.it
traonl.credem.it
firmadigitale.credem.it
new.credem.it
sslvpn.credem.it
new.credem.it
mcoll.credem.it
www.credem.it
tools.credem.it
valido.credem.it
banking.credem.it
myvalido.credem.it
smallweb.credem.it
firmadigitale.credem.it
banking.credem.it
banking-imprese.credem.it
sts.credem.it
abacocert.credem.it
genope-coll.credem.it
banking.credem.it

Certificate

The complete raw certificate details for tsapp.credem.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN50tH1eqPLtGoJUjxoJ
0twu4QgWzAAyeD3XnxNw8x7JG1arJW+3RamDtxOK5Ww4/6i7hy9cRwZjVV+5OtBP
2vCpVqqdlqm7os9ePaojK9o6ih2d/vCC+ZaiuY4Pe0KMtjmLdjnDt02/hOWKfpnJ
1k6p29fuqzRZO9jNug73kYH2OiUd+Poo72n9Obekv0serhedEza97MAfYpcLidut
PTiKr85WMttbDVwNKw/1Ekw0JLHAQKtWdOhkfKwHK/LeQgpgWIbkgvbMx+tQXo0u
Q4UkIeamtPz5fZB0XbIk4T5ClAkWd2FAONHTJnQgL8iqlBJQICjB1m1gcH/aADBl
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4374844931985871751396252010302269024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Emilia-Romagna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reggio Emilia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Credito Emiliano S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tsapp.credem.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20812779096861714675106907285225923375033244803549243848376660115415467577079859896018853074292827947840724842899059173224859931042725079898901434482647450919612672807630744983521097134903607905258762487069899334299481340414063882258020834012342329279238226795949167913299187503677399109158068438178786029785019553559845945735114219000107885651741522093901651327917858459474469027600197515116252943388137676621577243625120240669174929648607659443789005735937805731091187018779517415408044007229096920071187433676951072600080770424543591281476982785725137132558695132027659832593778977745946310215008639048520165254621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bffde2775e8781aa627bd6f1018bb3d44603241
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsapp.credem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsapp.credem.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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