gateway.shop.windtre.it

- Wind Tre S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8f:48:17:56:c9:95:e7:10:00:00:00:00:51:00:39:3d was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wind Tre S.p.A.

Organization: Wind Tre S.p.A.
State / Province: Milano
Locality: Rho
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:48:17:56:c9:95:e7:10:00:00:00:00:51:00:39:3d
Serial Number (int): 190453922142488045712669775816820799805
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 10:bf:00:2d:09:54:76:c6:39:fe:59:e1:cb:73:59:a2:80:65:ec:2f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b1:46:3d:d3:f2:b1:a3:cd:e6:21:38:2f:af:39:3a:24:b2:bb:58:b2
Fingerprint (sha256): 39:e8:07:61:d2:33:b3:51:bb:bc:5f:13:87:3f:dc:f9:49:68:d8:ce:d9:b0:e8:1e:02:f4:67:d7:29:6c:a7:8b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate gateway.shop.windtre.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gateway.shop.windtre.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gateway.shop.windtre.it
www.gateway.shop.windtre.it

Other certificates including the domain name windtre.it

(limited to 100 certificates)
vcloud-rm.windcloud.wind.it
nog.windtre.it
app.windtre.it
appuntamentotecnico.windtre.it
withu.windtre.it
selfcare-ob-bs.apps.windtre.it
static.windtre.it
igp.aws.windtre.it
ologateway-test.windtre.it
cdn-magazine.windtre.it
vcloud-vmrc-rm.windcloud.wind.it
fibra-il-tuo-codice-pre.windtre.it
shopping.windtre.it
b2b.shop.windtre.it
vcloud-mi.windcloud.wind.it
apigw.windtre.it
registrazioneinternet.windtre.it
www.propostediristoro.windtre.it
skype-ext.windtre.it
cw3hubsec.windtre.it
shop.dea.windtre.it
withu.windtre.it
developer.windtre.it
newscms.windtre.it
areaclienti.windtre.it
vcloud-rm.windcloud.wind.it
windtre.it
gateway.shop.wind.it
visual.bs.windtre.it
apigw.windtre.it
fibra-richiedi-codice-professional-pre.windtre.it
attiva.windtre.it
apps.windtre.it
solplus.windtre.it
areaclienti.bs.windtre.it
cvse.windtre.it
www.propostedirimborso.windtre.it
selfcaring.windtre.it
www.windtre.it
fibra-dnsprofessional.windtre.it
clockin.windtre.it
erp-ocp.windtre.it
ilc.dms.windtre.it
www.windtre.it
myaccount.windtre.it
partners.windtre.it
sharepoint.windtre.it
fibra-il-tuo-codice-professional-pre.windtre.it
conversation.windtre.it
api.windtre.it
apigateway-selfcare.apps.windtre.it
travelweb.windtre.it
vse.windtre.it
dea.windtre.it
api.shop.windtre.it
devmagazine.windtre.it
ml-in-2.apps.windtre.it
myaccount.windtre.it
cma-pega-sit.windtre.it
shop.windtre.it
visual.windtre.it
vcse1new.windtre.it
clockin.windtre.it
pre-dea.windtre.it
gateway.shop.wind.it
apigw-ob-dev.apps.windtre.it
mail-rewarding.windtre.it
magazine.windtre.it
controllerlab.epc.windtre.it
agenda.windtre.it
SEC-SDV-SFE-DMZ.WINDTRE.IT
consumer.windtre.it
pd.windtre.it
w3hub.windtre.it
attiva.dea.windtre.it
cma-pega.windtre.it
minio.windtre.it
vcloud-vmrc-mi.windcloud.wind.it
easysales.windtre.it
uat-identity.windtre.it
techystore.windtre.it
mnp.windtre.it
gateway.shop.windtre.it
internet.windtre.it
newscms.windtre.it
gateway.shop.windtre.it
FW-TestPlant-IDR.windtre.it
skype-ext.windtre.it
skype-ext.windtre.it
apigw-ob-bs.apps.windtre.it
smartdesk-api.windtre.it
buy.shop.windtre.it
hcm-test.windtre.it
ilq.dms.windtre.it
next.windtre.it
shiftplanner.windtre.it
selfcaring.windtre.it
devops-bot.windtre.it
fibra-dnsdinamico.windtre.it
selfcare-customer-care.gcp.windtre.it

Certificate

The complete raw certificate details for gateway.shop.windtre.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190453922142488045712669775816820799805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 10:58:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-09 11:28:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rho'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wind Tre S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateway.shop.windtre.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662905732750844732358640120823700143153105843580278655996135479427290785700635391697477942638775907163137221759931217739446832344391709943730439478887823861776873787992400413465390010083157886142398730125045906474311020552537482062826563414819723446981182752225196429324077174940981526650285840983994361974751524061977473979207375238444686270361819948437976646210125560569793657853633669103177632285094365488396288180938460994879337944503496082638372335378451231039271891117886976494960078137004513588571141853588330118431491271587462929322691615380017753315394495271791610741255061917078986869922759113156289917047893229376390845076047624570179252542619405110021605530130586220572902171299793795262586386374262449523987533897258011465399138021410615599572922633793410435607970219467394974090812852673705543231966935647371752989281414897358958211273930012733362457222594773925913697709470050589256121620482051380647936069979073584600039246088366244770183549456633698650845580759807558683364100861940460956766317027897928696711972226369557617625442859597463234562111909912182520721471515162898478465142185360889367318943650531262193868071022745915522847024487484797816332471985818650947432376851340217296748619816978849040906128445273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.shop.windtre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gateway.shop.windtre.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10bf002d095476c639fe59e1cb7359a28065ec2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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