*.gsp.bl.it

- BIM Gestione Servizi Pubblici SPA -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:a9:62:7a:96:71:d0:29:c8:99:60:b9:8c:9f:45:7b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BIM Gestione Servizi Pubblici SPA

Organization: BIM Gestione Servizi Pubblici SPA
Organization unit: CED
State / Province: Belluno
Locality: Belluno
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a9:62:7a:96:71:d0:29:c8:99:60:b9:8c:9f:45:7b
Serial Number (int): 18159459502833619934739727049092449659
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: da:f9:19:36:70:0d:5b:ef:61:01:1d:87:a6:b7:27:25:a9:7d:ec:b9
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 23:21:22:4d:8a:44:f5:37:b1:bf:5a:b1:b9:42:c0:97:0b:15:9d:bc
Fingerprint (sha256): 2f:37:b5:16:7d:d4:8e:4c:1e:3b:c9:cc:46:ff:c3:c2:18:c6:b1:74:2a:77:81:3a:a1:fd:b7:ac:bb:46:54:85

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.gsp.bl.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gsp.bl.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gsp.bl.it
gsp.bl.it

Other certificates including the domain name gsp.bl.it

(limited to 100 certificates)
helpdesk.ejplastics.com
cfbhelpdesk.cityfirstbank.com
ithelp.newhopechurch.tv
ticket.gsp.bl.it
ticket.gsp.bl.it
servicedesk.towermsa.com
atendimento.escrimig.com.br
hd.gsp.bl.it
helpdesk.americanassets.com
helpdesk.worldvision.org.uk
helpdesk.maruservices.com
hd.gsp.bl.it
hd.gsp.bl.it
desk.kavasa.in
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.riversidecc.org
gurus.hornblower.com
helpdesk.charlesignatius.co.in
helpdesk.endemolshine.com.au
hd.gsp.bl.it
hd.gsp.bl.it
support.axelliant.com
servicedesk.gourmetegypt.com
*.gsp.bl.it
hd.gsp.bl.it
hd.thehackettgroup.com
hd.gsp.bl.it
servicedesk.towermsa.com
hd.gsp.bl.it
servicedesk.ibsagroup.com
*.gsp.bl.it
helpdesk.endemolshine.com.au
hd.gsp.bl.it
cfbhelpdesk.cityfirstbank.com
helpdesk.maruservices.com
hd.gsp.bl.it
agee.gsp.bl.it
hd.gsp.bl.it
helpdesk.charlesignatius.co.in
hd.gsp.bl.it
cfbhelpdesk.cityfirstbank.com
support.axelliant.com
ticket.gsp.bl.it
helpdesk.americanassets.com
helpdesk.riversidecc.org
mesadeayuda.pffsa.com
support.cortacgroup.com
agee.gsp.bl.it
hd.gsp.bl.it
helpdesk.worldvision.org.uk
esupport.infimedia.co.id
helpdesk.ejplastics.com
*.gsp.bl.it
servicedesk.auspaynet.com.au
sos.olanet.mx
sos.olanet.mx
desk.kavasa.in
servicedesk.zip.co
hd.gsp.bl.it
hd.gsp.bl.it
esupport.infimedia.co.id
hd.gsp.bl.it
cfbhelpdesk.cityfirstbank.com
hd.thehackettgroup.com
servicedesk.ibsagroup.com
helpdesk.ejplastics.com
help.truno.com
hd.gsp.bl.it
helpdesk.americanassets.com
hd.gsp.bl.it
mesadeayuda.pffsa.com
servicedesk.zip.co
servicedesk.etlsystems.com
hd.gsp.bl.it
servicedesk.gourmetegypt.com
esupport.infimedia.co.id
cfbhelpdesk.cityfirstbank.com
*.gsp.bl.it
ssc-sd.oshco.com
helpdesk.maruservices.com
servicedesk.etlsystems.com
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.americanassets.com
cfbhelpdesk.cityfirstbank.com
mesadeayuda.pffsa.com
hd.gsp.bl.it
hd.gsp.bl.it
*.gsp.bl.it
desk.kavasa.in
desk.kavasa.in
helpdesk.endemolshine.com.au
esupport.infimedia.co.id
hd.gsp.bl.it
helpdesk.charlesignatius.co.in
servicedesk.etlsystems.com

Certificate

The complete raw certificate details for *.gsp.bl.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotzTSFgY9i0xRDEj4eBL
60iExqsX7d5DsMSkMvo5z485CKZjnX3saEMgJHvRZQo3HsbSsPH41RABHJT3ht+U
M+VzRJWeT4Q54hzBwSv95f5wfu2L12bc4XR1m//L3/G30laP5ZjcJd3ChUKihA4h
WWBvPJQB7kwj0KqqVNsRVXWfmLxVWUJotwnSZlu4kIJUUMeXhsQKtUuFhlAPb9Pu
d/RXhQN9yz3vaaswNEjcWoJIhxxjJMypOqbKY9lNagaISll4ykjsRC30QkfniVsF
2dI/DwC3AttO8DTCem8e94Y9p1hK5j2ryaOFXQFONdw/wf54Qe1rHf2qSj1ZrIVs
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18159459502833619934739727049092449659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Belluno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Belluno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIM Gestione Servizi Pubblici SPA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gsp.bl.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20559498429590864412818571816541119886929407972804238853476736941788981890356658385871113446265242031160632305772672768739835194160325544268022747187565655365062321428674071422965593660845384160389571131427868383522003499092780689543533667718839546438551822660078677841994032782332081037833197857262835007072807074052616934516574317064074401717258294815380879743597603741091665485530748373286367351914781368626087535879204342066305892156174037462751692586830175645535662956405731928321020809394455802756397793040758736246637235862189462968740317429331997785836438947770949272290860710730175155457447326409218335272011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daf91936700d5bef61011d87a6b72725a97decb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsp.bl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp.bl.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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