www.lefrecce.it

- Trenitalia SPA -

Issued by Actalis Authentication CA G3

About this certificate

This digital certificate with serial number 07:58:68:6e:2b:e6:1e:51 was issued on by Actalis S.p.A./03358520967.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Trenitalia SPA

Organization: Trenitalia SPA
Organization unit: Trenitalia S.P.A.
State / Province: Roma
Locality: Roma
Country: IT

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Milano
Locality: Milano
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 07:58:68:6e:2b:e6:1e:51
Serial Number (int): 529287778608225873
Serial Number lenght: 59 bits, 8 octets

SubjectKeyId: 59:f0:cb:8a:06:ef:29:68:08:bd:51:51:ac:31:13:c0:9f:40:b3:80
AuthorityKeyId: aa:aa:fd:ca:8c:1d:4d:f1:2e:83:e1:06:fc:fa:8e:ea:0e:23:ae:3d

Fingerprint (sha1): ae:ff:f4:1c:75:71:ca:0c:d2:74:ec:e9:82:28:ba:0b:d2:de:96:cf
Fingerprint (sha256): 2c:86:a8:e1:af:b9:b4:e3:73:0c:f3:6e:f6:22:87:e9:9c:75:6e:3c:70:78:21:e9:a4:ac:2c:06:0e:8c:31:fc


Revocation information

OCSP Server: http://ocsp03.actalis.it/VA/AUTH-G3
CRL Distribution Point: ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL

Check the revocation status for certificate www.lefrecce.it

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lefrecce.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agenzia.trenitalia.com
biglietteria.trenitalia.it
test.lefrecce.it
affinion.lefrecce.it
www.lefrecce.it
www.thello.fr

Other certificates including the domain name lefrecce.it

(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it

Certificate

The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgIIB1hobivmHlEwDQYJKoZIhvcNAQELBQAwezELMAkGA1UE
BhMCSVQxDzANBgNVBAgMBk1pbGFubzEPMA0GA1UEBwwGTWlsYW5vMSMwIQYDVQQK
DBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzElMCMGA1UEAwwcQWN0YWxpcyBB
dXRoZW50aWNhdGlvbiBDQSBHMzAeFw0xNjA2MjgxMzUzMjJaFw0xODA2MjgxMzUz
MjJaMHoxCzAJBgNVBAYTAklUMQ0wCwYDVQQIDARSb21hMQ0wCwYDVQQHDARSb21h
MRcwFQYDVQQKDA5UcmVuaXRhbGlhIFNQQTEaMBgGA1UECwwRVHJlbml0YWxpYSBT
LlAuQS4xGDAWBgNVBAMMD3d3dy5sZWZyZWNjZS5pdDCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAKDS2kbVW4Uydai1W4Pun5Nv48lwG8HuUQ+/45EDBo34
kmGSuwVrij/kVFsQp/ogkt2QFb9YVvtp0BWRnUTdoHeZ0zHxcYFSxmqtP2gssN7D
TzmHQEgu5ZS3MbTAOmYq+Fo2Ch6hida2L0K27cdH88rnSwdfJ6pL4FrM/ZMcTWar
uwX18IRKe1ZV1u0rl4ou9clCOxkf9yublkf86QR5LscXKdcsUFzgcryNnf3qFI3a
tQwWRZblpYz9DZ6kJjrFdWlw0uApDEDwGNmYf72Cspw0vh1MXY0DWv1aJIBPLRPD
naaQeoiTOHU1GbiOO4gcxu5bFrxdbmDQSVpCXaJXVwsCAwEAAaOCAo4wggKKMD8G
CCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AwMy5hY3RhbGlz
Lml0L1ZBL0FVVEgtRzMwHQYDVR0OBBYEFFnwy4oG7yloCL1RUawxE8CfQLOAMAwG
A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUqqr9yowdTfEug+EG/PqO6g4jrj0wYAYD
VR0gBFkwVzBLBgYrgR8BFAEwQTA/BggrBgEFBQcCARYzaHR0cHM6Ly9wb3J0YWwu
YWN0YWxpcy5pdC9SZXBvc2l0b3J5L1BvbGljeS9TU0wvQ1BTMAgGBmeBDAECAjCB
3wYDVR0fBIHXMIHUMIGUoIGRoIGOhoGLbGRhcDovL2xkYXAwMy5hY3RhbGlzLml0
L2NuJTNkQWN0YWxpcyUyMEF1dGhlbnRpY2F0aW9uJTIwQ0ElMjBHMyxvJTNkQWN0
YWxpcyUyMFMucC5BLiUyZjAzMzU4NTIwOTY3LGMlM2RJVD9jZXJ0aWZpY2F0ZVJl
dm9jYXRpb25MaXN0O2JpbmFyeTA7oDmgN4Y1aHR0cDovL2NybDAzLmFjdGFsaXMu
aXQvUmVwb3NpdG9yeS9BVVRILUczL2dldExhc3RDUkwwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBhQYDVR0RBH4wfIIWYWdl
bnppYS50cmVuaXRhbGlhLmNvbYIaYmlnbGlldHRlcmlhLnRyZW5pdGFsaWEuaXSC
EHRlc3QubGVmcmVjY2UuaXSCFGFmZmluaW9uLmxlZnJlY2NlLml0gg93d3cubGVm
cmVjY2UuaXSCDXd3dy50aGVsbG8uZnIwDQYJKoZIhvcNAQELBQADggEBAAKOnw+C
3EVM95NAxWB5RNap8UPxgInigkVq9YkBPthfGD5FYbKfhl0lY9vQQ81DhpmlMtmm
pClfx7owCxm/6AGUcYhQooQZ0LKK0c+OV0ldbbK3TGiV7BGiPdm26y/sqZhd+vz8
deRsdytm1gJTOCD5bVNgNZMwNApMVoQJ9Bzl5wEvRuvxFM5RAL/TUsiYye1ePYKG
zZjELsZ099D0EtnZMu9WFYM+pN2+lxZ4TKMf2Y9RfkVLp+8xZ26fjRnY3L4Msqv1
w7V+EzKElpFLfRJl6QXU49slcYJEfqRzjoRJba28DDdCmJ929S4UskglRestsbW5
Vof8Iwqvgp10K4M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNLaRtVbhTJ1qLVbg+6f
k2/jyXAbwe5RD7/jkQMGjfiSYZK7BWuKP+RUWxCn+iCS3ZAVv1hW+2nQFZGdRN2g
d5nTMfFxgVLGaq0/aCyw3sNPOYdASC7llLcxtMA6Zir4WjYKHqGJ1rYvQrbtx0fz
yudLB18nqkvgWsz9kxxNZqu7BfXwhEp7VlXW7SuXii71yUI7GR/3K5uWR/zpBHku
xxcp1yxQXOByvI2d/eoUjdq1DBZFluWljP0NnqQmOsV1aXDS4CkMQPAY2Zh/vYKy
nDS+HUxdjQNa/VokgE8tE8OdppB6iJM4dTUZuI47iBzG7lsWvF1uYNBJWkJdoldX
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 529287778608225873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Authentication CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-28 13:53:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-28 13:53:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trenitalia SPA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trenitalia S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lefrecce.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20302104108209561477250902924485272302903492414391511403138874139854268345932480633848110533034797928529942704130265166426234844485781585904783120758692119140997284021004975619018181323145902946555641929943720459082918270892776479848206670066729439826910302850576543393804290539274804711040204982344683302976813786349755739695026950591309134143930066435148178099477230496790075733448859200248013540830557946663111496593556656441651790811491113422432828357700267675437011352279213851043701300390582383851792034513131045180891732076905358751211007952574688564177365307035094129635279588580028790973078986573058716161803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp03.actalis.it/VA/AUTH-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59f0cb8a06ef296808bd5151ac3113c09f40b380
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aaaafdca8c1d4df12e83e106fcfa8eea0e23ae3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://portal.actalis.it/Repository/Policy/SSL/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biglietteria.trenitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinion.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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