DV SSL/TLS Certificate for *.ceopar.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.ceopar.it DV SSL/TLS Certificate

This certificate with serial number 64:d5:66:7d:83:31:3c:1a:c5:4a:70:34:cd:14:7e:29 for *.ceopar.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.ceopar.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 64:d5:66:7d:83:31:3c:1a:c5:4a:70:34:cd:14:7e:29
Serial Number (int): 134030837559261449816261081032281062953
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 14:14:5d:a0:50:7d:9d:90:3a:c2:9a:d6:76:02:ad:10:44:13:d5:d2
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 9e:1b:3b:86:7a:56:c6:57:98:46:7b:7e:1f:59:52:19:0f:5b:2e:a7
Fingerprint (SHA-256): 4f:81:d6:85:7c:a0:9b:98:a3:b1:dd:15:47:75:38:dd:5c:3e:d1:b4:ce:ce:d2:40:11:f6:af:ac:5a:80:67:3d

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.ceopar.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.ceopar.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.ceopar.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDmrNfVJJQXTresXAMvE
ibsU87WOi/dcVU6z2q68RCDAsoLksDkTiI3GnmeT3A45FFzr2q4mLwJyNwypBxDA
m1Lxu5R8R8qdpYOvpb2E7/NsFOLkj9BYA2p5BhoIFtni4eHXzvx4+ATmVyrLm2Ry
usoFINk/y0fH3aQsiXuxiU6sH94EWW2G2eR60oZSroIHmz7dOp84Ux6CqQ6sg1zU
qcGXKIkyhMUtyQ35djWtjQgsyDXzxC4IH9U9E7kxI1nAMrpeYdT0KvRp9bBqabOz
lgYOwZAkH6wcEzIrmAZtL2DyHSfTC9wmxmZhPsfBc5/t5jvAEKA+xTNmkHwmwzzy
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134030837559261449816261081032281062953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:01:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:01:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ceopar.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24266192094742533818427027998023833344418978918382625393227824783463517627720333132228351934389885217158167890675747682961802381110422013140876088967470108693096961984129988000274657872225705572080674300804997806389852670863128640384049542067162007478213119439225492342245832961493495669874170031572243919169135285484476245391565848558290254413038312277513485652789077712266453721421148353049978279161044266081873445278356801604261224562627004360766372640603815248510783626170188928654820608970635923619053553837188121185751692892397966976684614442942691383444506256730982752822103614151678086639899294629125664076303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceopar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceopar.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14145da0507d9d903ac29ad67602ad104413d5d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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