www3.autostrade.it

- Autostrade per l'Italia S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number de:7b:63:5d:d7:52:fc:dd:00:00:00:00:50:f0:37:6f was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Autostrade per l'Italia S.p.A.

Organization: Autostrade per l'Italia S.p.A.
State / Province: Roma
Locality: Rome
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): de:7b:63:5d:d7:52:fc:dd:00:00:00:00:50:f0:37:6f
Serial Number (int): 295729282971260586066791498218111776623
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0a:fa:19:c6:d3:93:96:44:cc:3a:58:36:0e:3d:08:eb:ad:63:2b:37
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 81:94:bc:33:a7:93:3f:1d:0f:a9:a9:ec:b2:f1:18:0d:7d:16:e2:82
Fingerprint (sha256): 3d:8e:8e:26:5f:bb:45:a8:0d:6d:37:1e:78:6e:c0:5c:68:e8:e1:cc:10:45:73:f2:fd:b4:76:6a:2d:c2:fb:9c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www3.autostrade.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www3.autostrade.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www3.autostrade.it

Other certificates including the domain name autostrade.it

(limited to 100 certificates)
www2.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
www5.autostrade.it
mailbox.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
teonline.autostrade.it
daw.autostrade.it
logos.autostrade.it
logos.autostrade.it
aesr-dn.autostrade.it
supplierregistration.autostrade.it
portal.ncw.autostrade.it
gmc.autostrade.it
www2.autostrade.it
www3.autostrade.it
cdn.autostrade.it
portal.ncw.autostrade.it
www5.autostrade.it
dad.autostrade.it
*.autostrade.it
supplierregistration.gruppo.autostrade.it
supplierportal.gruppo.autostrade.it
www2.autostrade.it
www.autostrade.it
supplierregistration.gruppo.autostrade.it
nga.autostrade.it
nga.autostrade.it
servizitps.autostrade.it
servizi.autostrade.it
fbt.autostrade.it
servizi.autostrade.it
ca.autostrade.it
aesr.autostrade.it
logos.autostrade.it
dpn.autostrade.it
www2.autostrade.it
www5.autostrade.it
cxsrv.autostrade.it
cxsrv.autostrade.it
www3.autostrade.it
meeting.autostrade.it
www.autostrade.it
www2.autostrade.it
filetransfer.autostrade.it
video.autostrade.it
teonline.autostrade.it
brm.ncw.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
cxsrv.autostrade.it
servizi.autostrade.it
www.autostrade.it
servizi.autostrade.it
servizi.autostrade.it
video.autostrade.it
filetransfer.autostrade.it
supplierportal.autostrade.it
sbce-b1-3.autostrade.it
eserv.autostrade.it
*.autostrade.it
www.autostrade.it
www2.autostrade.it
www.autostrade.it
servizi.autostrade.it
*.autostrade.it
nga.autostrade.it
cxsrv.autostrade.it
eserv.autostrade.it
teonline.autostrade.it
www3.autostrade.it
supplierregistration.autostrade.it
aspi-salesforce.autostrade.it
logos.autostrade.it
www2.autostrade.it
teonline.autostrade.it
serviceserp.autostrade.it
aesr-dn.autostrade.it
dad.autostrade.it
*.autostrade.it
logos.autostrade.it
daw.autostrade.it
cxsrv.autostrade.it
eqnx-edge.autostrade.it
servizi.autostrade.it
dpn.autostrade.it
cdn.autostrade.it
AspiWiFi.autostrade.it
logos.autostrade.it
dad.autostrade.it
teonline.autostrade.it
www.autostrade.it
serviceserp.autostrade.it
www5.autostrade.it
AspiWiFi.autostrade.it

Certificate

The complete raw certificate details for www3.autostrade.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295729282971260586066791498218111776623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 09:52:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 10:22:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autostrade per l'Italia S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www3.autostrade.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865288028120180183578176329948658988283315439793443665965729769798816601118979166261982813896179766094699659268104623178208148213397351202684720020974374860431920116393758092161946152190107291382772199540393265088500866164300686524236890223788416741889339628088559312394592238008835901072147707589166514219836078729860877362596735864538645595408097650921570381099841348247813107509624947877358632762707326865425656548087549519656283032503720215649017133900912294065697988934955742122829580422146004696748766032474495101723583673888903306240560215431783985177975752826503355281767948042050674315128927492112707412683401298962197129846219346110737713661099181414728683610070417287325758299593847393376531929940811127044489408005366407375486642320248460879776605708988337662904843514284546979763970414294217993123543066629704197120850226068784200511109482751998966107778676585557921612133056252193153698396835926593989829691519761528456215857938915779563455120242522206789163068197751681330781487191646564157835520375348498708683211021177656345768350527949129280395293841414168022458704617113908793033474171769006114129903403374727135909123562073111879892287917944522835451843222365862670954606511298320063587733507326709394935974101727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.autostrade.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:0|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 75400945114010770478474776131793549397529553594731317052557949652965717402074
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 63714564833115181395989447542139558327991001408988592038420344412630911114426
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0afa19c6d3939644cc3a58360e3d08ebad632b37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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