www.rfi.it

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:fb:93:0a:3a:38:90:9a:84:9f:d5:2b:2e:47:f1:73:65 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.rfi.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:fb:93:0a:3a:38:90:9a:84:9f:d5:2b:2e:47:f1:73:65
Serial Number (int): 345721002126769594356988457487438173008741
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:3c:f3:6c:61:f7:34:4b:42:6c:b0:12:3a:d6:b7:2e:bb:4b:78:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:4e:74:70:df:12:e9:4c:a9:cb:16:7a:6d:3e:ff:85:bd:19:6e:d7
Fingerprint (sha256): 31:1d:ae:50:16:36:24:13:06:4a:45:3e:0a:f2:94:02:ca:f5:e8:b9:ff:21:96:a5:62:d8:70:a5:be:10:9e:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.rfi.it

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rfi.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.viaggiatreno.com
m.viaggiatreno.it
mail1.viaggiatreno.com
mail1.viaggiatreno.it
mobile.viaggiatreno.com
mobile.viaggiatreno.it
viaggiaimpara.trenitalia.com
viaggiatreno.com
viaggiatreno.eu
viaggiatreno.it
viaggiatreno.trenitalia.it
www.ferservizi.it
www.fsbusitalia.it
www.fsbusitaliarailservice.it
www.grandistazioni.com
www.grandistazioni.it
www.italferr.it
www.m.viaggiatreno.it
www.metropark.it
www.mobile.viaggiatreno.it
www.rfi.it
www.viaggiaimpara.trenitalia.com
www.viaggiatreno.com
www.viaggiatreno.eu
www.viaggiatreno.it
www.viaggiatreno.trenitalia.it

Other certificates including the domain name rfi.it

(limited to 100 certificates)
asterqap.rfi.it
asterppc.rfi.it
donet.rfi.it
rinf.rfi.it
stazionevirtuale.rfi.it
PICWEB.RFI.IT
PRM.RFI.IT
eap.fs.eu
portalerfi.rfi.it
gisnw.rfi.it
stazionevirtuale.rfi.it
picweb.rfi.it
NORMATIVAESERCIZIO.RFI.IT
picbi.rfi.it
epodweb.rfi.it
asterppc.rfi.it
salabluonline.rfi.it
giamp.rfi.it
portalerfi.rfi.it
itinere.rfi.it
direzionesanita.rfi.it
donet.rfi.it
stazionevirtuale.rfi.it
portalerfi.rfi.it
pir.rfi.it
app.optima-cert.rfi.it
picweb.rfi.it
PRM.RFI.IT
mobile.reteblu.rfi.it
mobile.reteblu.rfi.it
AstroIF.rfi.it
PICWEB.RFI.IT
salabluonline.rfi.it
m3m40if.rfi.it
ps2.rfi.it
inreteese-wd.rfi.it
NORMATIVAESERCIZIO.RFI.IT
portalerfi.rfi.it
giamp.rfi.it
PRM.RFI.IT
donet.rfi.it
www.rfi.it
muif.rfi.it
PRM.RFI.IT
NORMATIVAESERCIZIO.RFI.IT
gisnw.rfi.it
m3m40if.rfi.it
muif.rfi.it
reteblu.rfi.it
muif.rfi.it
portalerfiapp.rfi.it
messagenius.rfi.it
dwrfipro.rfi.it
salabluonline.rfi.it
AstroIF.rfi.it
aster.rfi.it
reteblu.rfi.it
portalerfi.rfi.it
NORMATIVAESERCIZIO.RFI.IT
logistica.rfi.it
stazionevirtuale.rfi.it
giamp.rfi.it
xre-wd.rfi.it
aster.rfi.it
BusinessIntelligence.RFI.it
resetpassword.rfi.it
picbi.rfi.it
asterppc.rfi.it
epod.rfi.it
adfs.pic.rfi.it
normativaesercizio.rfi.it
rfi.it
iman.form.rfi.it
picweb.rfi.it
retebluws.rfi.it
picweb.rfi.it
portalerfiapp.rfi.it
portalerfi.rfi.it
aster.rfi.it
adfs.pic.rfi.it
normativaesercizio.rfi.it
stazionevirtuale.rfi.it
m3m40if.rfi.it
ewp-wd.rfi.it
mobile.reteblu.rfi.it
sbc2accvip-a.rfi.it
ps2.rfi.it
M3M40.RFI.IT
pir.rfi.it
reteblu.rfi.it
picbi.rfi.it
retebluws.rfi.it
dls-b.rfi.it
mobile.reteblu.rfi.it
condivisione.rfi.it
M3M40.RFI.IT
NORMATIVAESERCIZIO.RFI.IT
logistica.rfi.it
ASTERMOBILE.RFI.IT
iman.rfi.it

Certificate

The complete raw certificate details for www.rfi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPE1yieKWlM6beTfImdH
sf2u+19sYTzQi9o5nyWAVTUvLSQ9mYBL8MymzCAkd/lMoLzPyhNw6R9hDhcETycy
oEzCpW18spvMnnwGg03KCv5QKXDdW9dtIhHzxsUMeHQcrVim+7m5zJm88mdWXGol
hqC8vAfKsvvGdFsJZ16NEEDHtM3R8wAsSyIsJ1OxNHW9HBaGwBNuGGag/ZeK4pcx
7W4RRx9ErzMv9ZDoELbVaC+7D88uQuNp8RgH9xpKtgJyme5STPZfNmjlGl+Kmr41
iy7JJuX+GJHNvu35th4d0Rd39UgG5CKhzgZJMO0Ll6xryI86uMceZH3/22nTWoZ2
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345721002126769594356988457487438173008741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 13:57:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 13:57:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rfi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24356699694770886544551420178603002987835097647380416106771029061784720970158855936939561523268215087546188306952284511633043743600698944442390542399295356031673827597937362477897985673682173616621791031257605032333951989714459926840567781395690229756767595241707613980869693201131954825661727439990101147491605977720194383433646672356814695235261532632614656457203306616311286025569018274210265100998189332039441393709476322724587833848764573516518488260287245654820637181147264414529011184825406347531893111373935525896871447529487694492315849429070912023741479195468906531993011709863909192523101067153395146979071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e3cf36c61f7344b426cb0123ad6b72ebb4b78eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (594 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.viaggiatreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.viaggiatreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.viaggiatreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaggiaimpara.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaggiatreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaggiatreno.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaggiatreno.trenitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferservizi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsbusitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsbusitaliarailservice.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandistazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandistazioni.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italferr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metropark.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobile.viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rfi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaggiaimpara.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaggiatreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaggiatreno.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaggiatreno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viaggiatreno.trenitalia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d087a80580000040300483046022100ebc59bb0a1a05a7e15d7aad95cd6b1823011103fc8cc2ae0506d197950903d7902210097af5b1c59eec8654384ff9e9740a2c080a86a91834497bb06f13292421bf4ad00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d087a81ff0000040300473045022061c979037b52f2ad76fd89f79d9ec704d2ed12b17854d6b5faf1a318603208cd022100f6c7c0376b6cca6a0db58eb226e18b00348b7ebe33a16f7cdc0c31cf005162a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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