app.compassonline.it

- Compass S.p.A. -

Issued by GlobalTrust Certification Authority

About this certificate

This digital certificate with serial number dc:f8:1b:a2:69:8b:3f:a6:c8:62:6a:d8:f7:3e:6c:98 was issued on by GlobalTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Compass S.p.A.

Organization: Compass S.p.A.
Organization unit: Provided by Mediobanca Innovation Services S.C.P.A
Organization unit: Real Web Identity
Address: Foro Buonaparte 10
Postal code: 20121
State / Province: Milano
Locality: Milano
Country: IT

GlobalTrust

Organization: GlobalTrust
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): dc:f8:1b:a2:69:8b:3f:a6:c8:62:6a:d8:f7:3e:6c:98
Serial Number (int): 293718409186284022502492076611444042904
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9d:f2:be:b7:53:6a:03:55:a3:93:47:94:d3:24:d2:93:cb:7e:fa:e7
AuthorityKeyId: 56:fb:db:24:a8:5a:c1:b6:8a:3e:44:73:3d:d1:2a:43:23:15:06:b6

Fingerprint (sha1): db:12:f7:80:41:e4:be:58:f2:e0:eb:dd:0f:5a:1d:f1:82:ea:e6:77
Fingerprint (sha256): 3c:8f:3d:a8:85:1f:c2:d2:6a:99:84:06:d9:86:0b:93:da:f8:97:45:a7:44:54:db:23:41:b5:e2:f2:0f:5a:52

Issuing Certificate URL: http://crt.globaltrust.it/GlobalTrustServerCA.crt
Issuing Certificate URL: http://crt2.globaltrust.it/GlobalTrustServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.globaltrust.it/GlobalTrustServerCA.crl
CRL Distribution Point: http://crl2.globaltrust.it/GlobalTrustServerCA.crl

Check the revocation status for certificate app.compassonline.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.compassonline.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.compassonline.it
www.app.compassonline.it

Other certificates including the domain name compassonline.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for app.compassonline.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIRANz4G6Jpiz+myGJq2Pc+bJgwDQYJKoZIhvcNAQEFBQAw
UTELMAkGA1UEBhMCSVQxFDASBgNVBAoTC0dsb2JhbFRydXN0MSwwKgYDVQQDEyNH
bG9iYWxUcnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNDA3MjIwMDAw
MDBaFw0xNzA3MjEyMzU5NTlaMIHtMQswCQYDVQQGEwJJVDEOMAwGA1UEERMFMjAx
MjExDzANBgNVBAgTBk1pbGFubzEPMA0GA1UEBxMGTWlsYW5vMRswGQYDVQQJExJG
b3JvIEJ1b25hcGFydGUgMTAxFzAVBgNVBAoTDkNvbXBhc3MgUy5wLkEuMTswOQYD
VQQLEzJQcm92aWRlZCBieSBNZWRpb2JhbmNhIElubm92YXRpb24gU2VydmljZXMg
Uy5DLlAuQTEaMBgGA1UECxMRUmVhbCBXZWIgSWRlbnRpdHkxHTAbBgNVBAMTFGFw
cC5jb21wYXNzb25saW5lLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Y/hcD/tkGEi0JK6MVKvWz5O8F3RSN7f+EwcljuMELLOVc489fUH9shG0tAG
KofvkyBC0sVSmku4aqOSGaZcu1YdsuWlLtytrfSAFqWp0CRk8eaIXZkr4iVFOqn3
jqPsvO4f5kfzbEyf1Wyb3sbDf8Dscxcc6yisa++PjjxxFa/O7R2ZCoG0fgRM9hYj
4XZoWkraESjJHl02Fi8ue1xhHcxv4qAqQsyuV82jrTClc/wqmstymAYD8SmEijkP
hnB76SpbUkHGQyNTQizFuTc2gwfV+HPb3JaDyQ8rrUrDdP1NQ79/aybxTQNbaqZW
42vh96ryXGjbGVE9nSjdnRv5VwIDAQABo4ICYzCCAl8wHwYDVR0jBBgwFoAUVvvb
JKhawbaKPkRzPdEqQyMVBrYwHQYDVR0OBBYEFJ3yvrdTagNVo5NHlNMk0pPLfvrn
MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjBuBgNVHSAEZzBlMFkGCysGAQQBsjEBAgILMEowSAYIKwYB
BQUHAgEWPGh0dHBzOi8vd3d3Lmdsb2JhbHRydXN0Lml0L3Jlc291cmNlcy9sZWdh
bGRvYy9jcHMvaW5kZXguYXNweDAIBgZngQwBAgIwfAYDVR0fBHUwczA3oDWgM4Yx
aHR0cDovL2NybC5nbG9iYWx0cnVzdC5pdC9HbG9iYWxUcnVzdFNlcnZlckNBLmNy
bDA4oDagNIYyaHR0cDovL2NybDIuZ2xvYmFsdHJ1c3QuaXQvR2xvYmFsVHJ1c3RT
ZXJ2ZXJDQS5jcmwwgbYGCCsGAQUFBwEBBIGpMIGmMD0GCCsGAQUFBzAChjFodHRw
Oi8vY3J0Lmdsb2JhbHRydXN0Lml0L0dsb2JhbFRydXN0U2VydmVyQ0EuY3J0MD4G
CCsGAQUFBzAChjJodHRwOi8vY3J0Mi5nbG9iYWx0cnVzdC5pdC9HbG9iYWxUcnVz
dFNlcnZlckNBLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0
LmNvbTA5BgNVHREEMjAwghRhcHAuY29tcGFzc29ubGluZS5pdIIYd3d3LmFwcC5j
b21wYXNzb25saW5lLml0MA0GCSqGSIb3DQEBBQUAA4IBAQA/gKu9ee8ODhyyVn3F
TQKoepAeDfNjDGPfT7RI9NQQ6zJe69TyKnaN7LiJUArpFXkWkxs1vMqi1o7+IpPn
dGBEBsy1dBjHaKds8ZJn1sZUtA3U3Opl90Ztl8qMlUaZqrn+SK3TUvdMCnwArba4
gcoP8HYloF26X424gSGOOny0fJ7M8TbS9pwe88WqL84tLhfQE3XVpT0IpKFLwRUz
V03Sdp9ukOw3Y71Lj6URrnzQPgNMu9eEh6QIBdCqqBcf9UId8uerGRlYAhMPM580
kjfeORKWDaxGsFQhrHVJwWxvPdTAzGI7/YX67WIzOHJGiWb0yLjurv06bL5p2HGT
+zUn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y/hcD/tkGEi0JK6MVKv
Wz5O8F3RSN7f+EwcljuMELLOVc489fUH9shG0tAGKofvkyBC0sVSmku4aqOSGaZc
u1YdsuWlLtytrfSAFqWp0CRk8eaIXZkr4iVFOqn3jqPsvO4f5kfzbEyf1Wyb3sbD
f8Dscxcc6yisa++PjjxxFa/O7R2ZCoG0fgRM9hYj4XZoWkraESjJHl02Fi8ue1xh
Hcxv4qAqQsyuV82jrTClc/wqmstymAYD8SmEijkPhnB76SpbUkHGQyNTQizFuTc2
gwfV+HPb3JaDyQ8rrUrDdP1NQ79/aybxTQNbaqZW42vh96ryXGjbGVE9nSjdnRv5
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293718409186284022502492076611444042904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalTrust Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20121'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Foro Buonaparte 10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Compass S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Mediobanca Innovation Services S.C.P.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Real Web Identity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.compassonline.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27464662355235034368464655977595119401600392782596124054430755581475856254721259129946916714605959044421194342780075579216636286273286850526553670706455352226611430701951011031947288710149640290438121114342938902714381981447038593303152627963182814415582717155780886779529479462774785917867604319924717693527944081774642434143331903089309817866003834054704603684915393531158101820008080002201278897885377598657847121362145105876040179722426450563354859407774603587796897192170295067466587875638655349547870468113058993328656144714563377781352573319819487326903333588548686843049443744664303431682802530022781943019863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 56fbdb24a85ac1b68a3e44733dd12a43231506b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9df2beb7536a0355a3934794d324d293cb7efae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globaltrust.it/resources/legaldoc/cps/index.aspx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globaltrust.it/GlobalTrustServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.globaltrust.it/GlobalTrustServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.globaltrust.it/GlobalTrustServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt2.globaltrust.it/GlobalTrustServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.compassonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.compassonline.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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