DV SSL/TLS Certificate for *.cielocubano.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.cielocubano.it DV SSL/TLS Certificate

This certificate with serial number 15:85:27:c3:f6:cf:24:77:8e:16:8e:6a:1a:34:5c:35 for *.cielocubano.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.cielocubano.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 15:85:27:c3:f6:cf:24:77:8e:16:8e:6a:1a:34:5c:35
Serial Number (int): 28605169933518330373572439574899350581
Serial Number Length: 125 bits, 16 octets

Subject Key Identifier: 57:60:c1:d6:0c:20:a1:65:2c:07:e5:e0:5e:7c:39:4f:3c:e9:c7:23
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 7d:89:f1:eb:b8:66:04:bb:5b:ed:cb:23:8c:ce:69:92:3a:4d:cd:6c
Fingerprint (SHA-256): ef:9b:5f:4f:81:8a:da:9a:a6:8f:fd:58:55:57:f6:e9:d5:ab:31:b4:d3:25:f3:cc:d7:a5:f1:d5:c0:8f:74:f6

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.cielocubano.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.cielocubano.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.cielocubano.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL31WoJUcfRJWpAfE1Zz
mw0XRYgaB+vw6a9z9t1INGGUZL2s45d6vyz+WDE9FYx7uO1zSl3UoolDU0bWrECD
LdmY7okAa+39Fk9H3ha33C3eO4A9GjIMQF1pPi6ZikAzixP5OCWqnoWGxxT6EUtn
Oi2SiCJD/sd7NKng+aWec2kUPEchQUjEP5kMOK0dHxGmtalGNPM3TCCpXqFkp/2h
IY6ZOLdGnc0KneGtOa0uOkjc1qvMjIz8mgi40A54oQs6kBPyOk+dtmTHfRKoLki3
T169E7N6U2V7wyX0wyKgV2sFKx/EciU07coqNBADuU2sUtbiYUIaDa/3uzrV7gEL
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28605169933518330373572439574899350581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:13:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:13:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cielocubano.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24331426537795627746597902260429475422856865358309043759488739552900872473842444942774317217276294062418260977526074699039133103162602925055669808303505232447133077482813036756865912460305934155756845025102888052417380045743147632798043802200732936259241998377622964996182358313139505360034294298165670105702634298879664885605471844289916386590191515510882562550984548689318873981268982843460575138646657114539649265004586696443810036868254464916411344086604166127489515286900720577707027893569293036754652119383589743459571985692538205807756421996525371094664622716279370900739976704868145750618045655450389149977367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cielocubano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cielocubano.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5760c1d60c20a1652c07e5e05e7c394f3ce9c723
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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