www.autostrade.it

- Autostrade per l'Italia S.p.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f8:bf:18:3f:74:d5:67:2f:00:00:00:00:50:e7:3b:70 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Autostrade per l'Italia S.p.A.

Organization: Autostrade per l'Italia S.p.A.
State / Province: Roma
Locality: Rome
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f8:bf:18:3f:74:d5:67:2f:00:00:00:00:50:e7:3b:70
Serial Number (int): 330640763460002264205535569901156514672
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 73:68:14:6d:21:66:78:db:8d:b7:55:ef:6a:5f:37:0d:2b:a2:b5:b8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bd:f5:88:52:ae:34:f6:e2:2c:8c:01:c9:05:ee:56:13:e4:2b:8b:19
Fingerprint (sha256): 3e:07:06:b4:9c:bb:bf:3f:44:aa:79:8a:5d:44:82:7f:a0:c4:15:dc:7f:3e:c0:66:a9:17:6f:b0:7c:b5:96:c0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.autostrade.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.autostrade.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.autostrade.it

Other certificates including the domain name autostrade.it

(limited to 100 certificates)
www2.autostrade.it
DPI-mTLS-PROD.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
www5.autostrade.it
mailbox.autostrade.it
www2.autostrade.it
vcf.autostrade.it
www2.autostrade.it
teonline.autostrade.it
daw.autostrade.it
logos.autostrade.it
logos.autostrade.it
aesr-dn.autostrade.it
supplierregistration.autostrade.it
portal.ncw.autostrade.it
gmc.autostrade.it
www2.autostrade.it
www3.autostrade.it
cdn.autostrade.it
portal.ncw.autostrade.it
www5.autostrade.it
dad.autostrade.it
*.autostrade.it
supplierregistration.gruppo.autostrade.it
supplierportal.gruppo.autostrade.it
www2.autostrade.it
www.autostrade.it
supplierregistration.gruppo.autostrade.it
nga.autostrade.it
nga.autostrade.it
servizitps.autostrade.it
servizi.autostrade.it
fbt.autostrade.it
dmztst.autostrade.it
servizi.autostrade.it
ca.autostrade.it
aesr.autostrade.it
logos.autostrade.it
dpn.autostrade.it
www2.autostrade.it
www5.autostrade.it
cxsrv.autostrade.it
cxsrv.autostrade.it
www3.autostrade.it
meeting.autostrade.it
www.autostrade.it
www2.autostrade.it
filetransfer.autostrade.it
video.autostrade.it
teonline.autostrade.it
brm.ncw.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
supplierportal.autostrade.it
supplierregistration.autostrade.it
portale.autostrade.it
cxsrv.autostrade.it
servizi.autostrade.it
www.autostrade.it
servizi.autostrade.it
servizi.autostrade.it
video.autostrade.it
filetransfer.autostrade.it
supplierportal.autostrade.it
sbce-b1-3.autostrade.it
eserv.autostrade.it
*.autostrade.it
www.autostrade.it
www2.autostrade.it
www.autostrade.it
servizi.autostrade.it
*.autostrade.it
nga.autostrade.it
cxsrv.autostrade.it
eserv.autostrade.it
teonline.autostrade.it
www3.autostrade.it
supplierregistration.autostrade.it
aspi-salesforce.autostrade.it
logos.autostrade.it
www2.autostrade.it
teonline.autostrade.it
serviceserp.autostrade.it
aesr-dn.autostrade.it
dad.autostrade.it
filetransfer.autostrade.it
*.autostrade.it
logos.autostrade.it
daw.autostrade.it
cxsrv.autostrade.it
eqnx-edge.autostrade.it
servizi.autostrade.it
dpn.autostrade.it
cdn.autostrade.it
AspiWiFi.autostrade.it
logos.autostrade.it
dad.autostrade.it
teonline.autostrade.it

Certificate

The complete raw certificate details for www.autostrade.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA371/02/Wk+uaBR/aFNdc
MLlntoHMw9BIbDhopOQbhYfuAVOWLlBqWMl71jkGZCWrBSAOED0rv9f3EpPPeC7Q
VO+PKF9lRE8fSDB3AZ3S/tk/A/4mDHMsifjlAJWkUIao3x0stTi4i9FH/uNrkYaH
gSpka3b19+rCQPYOnZRpOuHlCEWd0mYBuD1gfaOFwvfLKroG25sOiUmq49s0pOxq
ftZoQZYS0NXT/r8289Nxp8ykM+DN5wu2Tn+jL4LFmwn4Ug/rmGpnJzMiyxj9Hmka
sf65K4X/N5LVkImksA9+etad14ELO0SO/RyZIQujYyTUMJj4wDfpCXFiI62iInSB
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330640763460002264205535569901156514672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 09:45:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 10:15:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autostrade per l'Italia S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.autostrade.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28244587604898327482744326499832789815588631817479735967162734007631342184369153522194220941960497571626897723853610641103595366280575214127142553827335850712648388431217840880089435018848294714796526599336133543480271416119518624874487390324830106396756961079987552672025408831342255739043915503595023285562361814716283889768705360157168843079762670985948509020819279871297349715245699251155602754484157900000982003529821511950342098565169245733161297011871401985727585143363313637943899800472242673558674169690231827765959043982161728955053553825203056657611575279909638634574639025853374307458113486394191582101833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autostrade.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7368146d216678db8db755ef6a5f370d2ba2b5b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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