DV SSL/TLS Certificate for *.contradedeimercanti.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.contradedeimercanti.it DV SSL/TLS Certificate

This certificate with serial number 2b:01:8a:cd:c8:73:a9:e6:88:38:4b:76:b8:b2:bc:c4 for *.contradedeimercanti.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.contradedeimercanti.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 2b:01:8a:cd:c8:73:a9:e6:88:38:4b:76:b8:b2:bc:c4
Serial Number (int): 57164811391945367483227061869987675332
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 68:03:d3:fb:20:93:cd:69:e6:50:05:85:66:c3:79:0f:c8:e0:d6:28
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 68:ef:d4:6f:cc:4a:c6:cc:4f:d6:18:50:ed:93:cb:11:57:15:c6:27
Fingerprint (SHA-256): c9:58:13:0a:49:8e:08:b3:5d:df:fe:1b:c5:65:63:37:a9:3a:54:17:b1:cf:3f:25:a8:e8:37:f6:ae:d1:7f:b6

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.contradedeimercanti.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.contradedeimercanti.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.contradedeimercanti.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXiu2WWgwu+4ENx0OwzD
cq/zqQ/Jy5Fks09nQV1kmyHwqEgj0IvUzgfnwmGX8O2+8DenByBWy/l5Q81plmoG
DnleMRI9XqzWGaddbTF6QEAOicNb2pKE0pw2yN3dWOauLdYSmyZ/b2vEHROZXTFP
CRZkDHg5xfMOPpSn7YO5ta0WSUPsqHOr2jCjWrF1ZfFOX5GjMgPWxm8qtwZTJ7l6
hG1C+IZVDLo8cyQm3/A+S251uZDiLZeeTXPBl65fbAitbcqWSaUM5yAKnCzUvBBz
zA+FxR/sd1K7xK9HjBDm0l2/rMXN+gNss3RY074nEWXsQM+JDCjZtGL0jgZPOwNh
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57164811391945367483227061869987675332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:01:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:01:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.contradedeimercanti.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22403690986622836517923249511265450346682227973764194106160095155499669485552450789371422893035945708922841012020895979198963689394496372931149633206436398760804756497086528665334328783542460893203894579307958435049269013006363989878790966591704189676561331012724587018565391269013593108807281807073036869913082523835245637210614200284136102640490544932684308760260041078959521006112491876085199759825809305114395553041347435121585438909258310878173258914571072681861304800152481271095656451993019622568079151253510851352368742965530284931007213406759106676805768253748220194224906978162166330826232601565002547290373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contradedeimercanti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contradedeimercanti.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6803d3fb2093cd69e650058566c3790fc8e0d628
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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