serdv.recordati.com

- Recordati Industria Chimica e Farmaceutica S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:01:c8:5d:00:0a:af:4b:62:b2:55:fd:4e:50:50:c5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Recordati Industria Chimica e Farmaceutica S.p.A.

Organization: Recordati Industria Chimica e Farmaceutica S.p.A.
Locality: Milano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:01:c8:5d:00:0a:af:4b:62:b2:55:fd:4e:50:50:c5
Serial Number (int): 17289220092215202398994503245694521541
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:58:df:16:81:88:d3:8f:e6:b6:88:c9:ac:07:55:61:64:48:d0:39
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c0:03:f5:42:5a:e2:3b:ff:67:74:c8:6c:78:18:b2:d2:9a:91:8b:ff
Fingerprint (sha256): 2e:a8:e2:90:89:dc:1d:8c:72:c4:8d:63:f4:73:68:8b:44:eb:84:2e:71:be:fe:d1:ab:84:a8:62:3b:f5:b7:f4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate serdv.recordati.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for serdv.recordati.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

serdv.recordati.com

Other certificates including the domain name recordati.com

(limited to 100 certificates)
ser.recordati.com
access.recordati.com
webmail.recordati.com
minext.recordati.com
serdv.recordati.com
recordati.com
www.recordati.com
adfs.recordati.com
www.recordati.com
www.recordati.com
citrix.recordati.com
www.recordati.com
smtponprem.recordati.com
www.recordati.com
recordati.com
ser.recordati.com
ser.recordati.com
sip.video.recordati.com
skype-sip.recordati.com
schedetecniche.recordati.com
*.recordati.com
serdv.recordati.com
webmail.recordati.com
*.recordati.com
schedetecniche.recordati.com
sip.video.recordati.com
schedetecniche.recordati.com
reportBI.recordati.com
www.recordati.com
recordati.com
www.recordati.com
recordati.com
sip.video.recordati.com
sip.video.recordati.com
*.recordati.com

Certificate

The complete raw certificate details for serdv.recordati.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17289220092215202398994503245694521541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Recordati Industria Chimica e Farmaceutica S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'serdv.recordati.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769304761744878774958063009236693950587320294331186603112771052626462788436660903769884560773515944471861773370778053392296366371356565096279457526432814920220710841905761099820812385050957334576165094418163396514604682394147724790765780404061013778018673096039497776317902826270228083942205586395968602217032962759503780168554475273135402079328607804207640594042018924170085283779874823929838332795008099945731386238647050561556969652366107919130547538156283153581019469654389012256501679734310439964689381540745759579523630138757513706648409086844303069861982147417266185163467045892466914736069404778899787684635719136448817326654145330729333828787290889578265989392159476785527195682553801939294001620311859969157860960556136493668760715581985804751275895198872776845120458957188566254178781827381638245147688974078954101482852373348154196401594525371670045664386903757519515535196475070718992746069687624128723781027566732230489353206239172139366741467866460011962365908022092654250387567619958227503722209862729736400520936762029978364138556415113778091746880872113531201863986093663642397748163488861631813446489493452880401624532785230439049823691526581160589485580530130430907522377868920678376858507849966790924408363589207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7958df168188d38fe6b688c9ac0755616448d039
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serdv.recordati.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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