apigw-ob-dev.apps.windtre.it

- Wind Tre S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ba:78:58:95:1b:2c:64:86:00:00:00:00:50:fa:d7:cd was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wind Tre S.p.A.

Organization: Wind Tre S.p.A.
State / Province: Milano
Locality: Rho
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ba:78:58:95:1b:2c:64:86:00:00:00:00:50:fa:d7:cd
Serial Number (int): 247861279504469630357666734950028335053
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 22:23:e0:0c:66:f6:89:2a:5b:24:6a:67:a9:c6:87:d6:5c:1e:bb:86
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ee:f4:08:38:cb:36:05:59:5b:84:fa:53:af:ef:13:66:dd:5c:0b:a4
Fingerprint (sha256): 2f:4e:7b:c3:ff:dc:a8:47:03:5e:94:a6:e3:82:7a:18:a1:2a:7f:83:33:69:47:7a:31:2d:b4:c8:c9:94:98:85

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate apigw-ob-dev.apps.windtre.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apigw-ob-dev.apps.windtre.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apigw-ob-dev.apps.windtre.it
www.apigw-ob-dev.apps.windtre.it

Other certificates including the domain name windtre.it

(limited to 100 certificates)
vcloud-rm.windcloud.wind.it
nog.windtre.it
app.windtre.it
appuntamentotecnico.windtre.it
withu.windtre.it
selfcare-ob-bs.apps.windtre.it
static.windtre.it
igp.aws.windtre.it
ologateway-test.windtre.it
cdn-magazine.windtre.it
vcloud-vmrc-rm.windcloud.wind.it
fibra-il-tuo-codice-pre.windtre.it
shopping.windtre.it
b2b.shop.windtre.it
vcloud-mi.windcloud.wind.it
apigw.windtre.it
registrazioneinternet.windtre.it
www.propostediristoro.windtre.it
skype-ext.windtre.it
cw3hubsec.windtre.it
shop.dea.windtre.it
withu.windtre.it
developer.windtre.it
newscms.windtre.it
areaclienti.windtre.it
vcloud-rm.windcloud.wind.it
windtre.it
gateway.shop.wind.it
visual.bs.windtre.it
apigw.windtre.it
fibra-richiedi-codice-professional-pre.windtre.it
attiva.windtre.it
apps.windtre.it
solplus.windtre.it
areaclienti.bs.windtre.it
cvse.windtre.it
www.propostedirimborso.windtre.it
selfcaring.windtre.it
www.windtre.it
fibra-dnsprofessional.windtre.it
clockin.windtre.it
erp-ocp.windtre.it
ilc.dms.windtre.it
www.windtre.it
myaccount.windtre.it
partners.windtre.it
sharepoint.windtre.it
fibra-il-tuo-codice-professional-pre.windtre.it
conversation.windtre.it
api.windtre.it
apigateway-selfcare.apps.windtre.it
travelweb.windtre.it
vse.windtre.it
dea.windtre.it
api.shop.windtre.it
devmagazine.windtre.it
ml-in-2.apps.windtre.it
myaccount.windtre.it
cma-pega-sit.windtre.it
shop.windtre.it
visual.windtre.it
vcse1new.windtre.it
clockin.windtre.it
pre-dea.windtre.it
gateway.shop.wind.it
apigw-ob-dev.apps.windtre.it
mail-rewarding.windtre.it
magazine.windtre.it
controllerlab.epc.windtre.it
agenda.windtre.it
SEC-SDV-SFE-DMZ.WINDTRE.IT
consumer.windtre.it
pd.windtre.it
w3hub.windtre.it
attiva.dea.windtre.it
cma-pega.windtre.it
minio.windtre.it
vcloud-vmrc-mi.windcloud.wind.it
easysales.windtre.it
uat-identity.windtre.it
techystore.windtre.it
mnp.windtre.it
gateway.shop.windtre.it
internet.windtre.it
newscms.windtre.it
gateway.shop.windtre.it
FW-TestPlant-IDR.windtre.it
skype-ext.windtre.it
skype-ext.windtre.it
apigw-ob-bs.apps.windtre.it
smartdesk-api.windtre.it
buy.shop.windtre.it
hcm-test.windtre.it
ilq.dms.windtre.it
next.windtre.it
shiftplanner.windtre.it
selfcaring.windtre.it
devops-bot.windtre.it
fibra-dnsdinamico.windtre.it
selfcare-customer-care.gcp.windtre.it

Certificate

The complete raw certificate details for apigw-ob-dev.apps.windtre.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw4BMlULsIUf2W8FnWYe
RbY2pheUMHJ9ciyWDJe4z2TYd5XVldpowXLEssCn1TdYKsC3wIszbF86AGQ/05jm
yfaaofksmIYUlH7qJ8navlWXXfRGl30LvddTTUQRMd7wUW/WfdnXA1EemhlVXrNN
3pBmLvypPgJ8dtnMfAV+jfK8abDcrNHPJ2naLHk92xAozdMkoaQD3bI4dfpsroz9
ojHXUCSJDQIxhHAdbKD+yXqvIshu6jggU48VLOESwW6xfhlR55waeBYmPqCK+LX2
fDfsI+b6AlMBnId2z9dyLK+N8UFGDmz36j6dCfeE4KqYZt48TTjHfowxISvpznUm
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247861279504469630357666734950028335053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 15:06:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-27 15:36:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rho'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wind Tre S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apigw-ob-dev.apps.windtre.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20078796451868960087574801922860976111797884550571807116641702308821930146919996498859131106494486980115374245484656399905887889446277857419810928138595704082393127641179924158923857039708450073639628512597378009939191373752686866906151956275164568203948587385358443612606848748611686664695773884561162685251042825296700609077777163798128007323416739692874152519157748604489381303570454848446112011244989925910200140756205344660426407315297477601608967041808565187135160687827529503419147420294526025238470509242237297245802482232355712773119007645420936550565924034265421840981441673063159879807678358769115306731033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigw-ob-dev.apps.windtre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apigw-ob-dev.apps.windtre.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2223e00c66f6892a5b246a67a9c687d65c1ebb86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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