*.mmrisarcimenti.it

Issued by Actalis Domain Validation Server CA G2

About this certificate

This digital certificate with serial number 1f:82:1f:af:59:85:8b:d2:02:ea:c2:89:95:c6:ea:61 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.mmrisarcimenti.it,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:82:1f:af:59:85:8b:d2:02:ea:c2:89:95:c6:ea:61
Serial Number (int): 41881709108273686140845230011707746913
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 88:b4:e3:6a:d1:ad:b4:ef:4c:a3:8e:3a:7f:e4:cd:19:4c:4b:d5:58
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd

Fingerprint (sha1): 88:59:74:d3:6a:3e:00:eb:f2:05:7e:62:cd:9e:a6:57:0e:d0:36:1f
Fingerprint (sha256): 30:b8:d5:11:55:fb:c1:05:c8:bc:15:f2:36:d0:17:6d:4a:9c:ae:1f:2d:2e:ea:8c:e0:cf:b0:62:98:34:42:8a

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL

Check the revocation status for certificate *.mmrisarcimenti.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mmrisarcimenti.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mmrisarcimenti.it
*.mmrisarcimenti.it

Other certificates including the domain name mmrisarcimenti.it

(limited to 100 certificates)
*.mmrisarcimenti.it
*.mmrisarcimenti.it
*.mmrisarcimenti.it
*.mmrisarcimenti.it
*.mmrisarcimenti.it
*.mmrisarcimenti.it
*.mmrisarcimenti.it

Certificate

The complete raw certificate details for *.mmrisarcimenti.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSk4/KL4AigEeYr6E7T+
s79LnryhVju2V4KVryDSS5CkZgTvomCmfmMZDmR4k3KXfhRRxP4zupUlF3ibDbVe
aIuKy+sNTVsMaWPPEVhfHaE3xXrkb8FWctUJ8zqmKpgMJ93fb631IyWwNkX8Va/u
lEMZdrhkvTQVAk6gw6g4KBshP1hKEalsQPJlFgDh3U5DBp8ko0DWDhqydlUlU5+f
md43SAdQbQf81ICd8G/rxPVGJMWFOuKQfiikQBRWrlUSJkAaFJ9dl3zNoQ4wd9TS
KszqtM9qtr5wXes4G7nVETZGgEjj/hgIPQi+vMqigJPii2VuL/cxI9mQG1RI3mDF
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41881709108273686140845230011707746913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 04:37:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-01 04:37:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mmrisarcimenti.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22364507603103565221483542820884027325262324720443604044952000587905202868160148308799071929752561100220483599188250711920506765488908377934213961610099471575843562830348983667122669623077673014468482820283479929843065544174114394267546741766326567988767635473740775429725050447190133216914564330837053098258847143834172092933046004996466138053906314045505058793910781153667252811237408548092049651711735713931413774766719080730545336579098609500181264005261582922486985819197278473826708661942946325433059716929414301238068463359385173091634185835407924219675917515494505109698483218626898131217278568007379135284703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmrisarcimenti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmrisarcimenti.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88b4e36ad1adb4ef4ca38e3a7fe4cd194c4bd558
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016ff4c6edd0000004030047304502202ccc140c7388c50a838208b6c59ec1af936d73d389eb8f74c81f25f3e9f0953f022100a76fab6972a7a9982f9e2d34c79c213a187e812065eec2a8d57ab63251a9f3b70076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ff4c6edc900000403004730450220082b6d774700f7a1bb9573d808f6cd22597e33bdb5cfb7a06c90f84c1fcfaefe022100b6594edff9f34204766b591c28e2bc35de2961135c72bd76e8017e589195a4bf007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ff4c6eda9000004030046304402201ea9a9dea2a87e9b64607f74bb62dcf67694db36bd027a6b9f601690a027fe1902207723242feddc2edd58bf37c36eb8011d39c3438c31b35511daa74e2d13bf5d98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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