*.requalifica.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 2d:e6:09:53:34:e2:e6:f2:cb:be:90:40:e9:69:c0:67 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.requalifica.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 2d:e6:09:53:34:e2:e6:f2:cb:be:90:40:e9:69:c0:67
Serial Number (int): 61009677221775674553234473724771156071
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e5:f6:39:d8:b5:3b:d9:3e:f8:3a:ea:b4:f8:3c:80:8c:75:9b:22:d2
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): ed:23:d1:75:bd:ad:8f:af:dd:a9:e0:c7:81:02:98:9b:60:df:95:b0
Fingerprint (sha256): 40:d0:29:d3:4b:82:c4:06:8a:b5:8d:8a:b0:93:fd:ba:a1:6e:5c:07:be:79:b6:04:09:a3:9b:50:e8:a9:8a:0e

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.requalifica.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.requalifica.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.requalifica.it
requalifica.it

Other certificates including the domain name requalifica.it

(limited to 100 certificates)
support.tadiplus.de
support.build365.de
supporto.cgshop.it
support.what-now.co.uk
tasks.yourmaningermany.de
zoho.alphapublicidad.com
mysupport.gauri.com
desk.mon-contre-expert.com
desk.ascent-makler.de
desk.ascent-makler.de
help.tallstoriestickets.org.uk
support.what-now.co.uk
desk.ascent-makler.de
support.edclass.com
ifragasatt.support.automat-it.io
technical.subrosagroup.co.uk
service.werobot.de
support.e4p-shipper.easy4pro.com
desk.ascent-makler.de
desk.ascent-makler.de
assistenza.marziniconsulting.com
desk.ascent-makler.de
service.theappealguru.com
support.kleeberg.studio
assistenza.marziniconsulting.com
support.flylumo.co.uk
support.bta-rn.de
support.what-now.co.uk
gcs.digimetrica.com
help.rjcortel.co.uk
support.kleeberg.studio
desk.ascent-makler.de
support.tuerchen.com
servicedesk.atraxo.com
brillplace.zephyrcomplete.com
desk.ascent-makler.de
portal.sbusinesslondon.ac.uk
ifragasatt.support.automat-it.io
support.lumiad.com
desk.ascent-makler.de
desk.ascent-makler.de
assistenza.requalifica.it
help.tallstoriestickets.org.uk
servicedesk.atraxo.com
support.lumiad.com
tasks.yourmaningermany.de
assistenza.requalifica.it
desk.ascent-makler.de
support.cefim.eu
support.oddly.digital
desk.ascent-makler.de
desk.mon-contre-expert.com
hilfe.eifachanders.ch
desk.remed.rs
support.build365.de
support.bta-rn.de
support.candjapparel.co.uk
support.sportyfriends.com
desk.ascent-makler.de
supporto.cgshop.it
hjalp.islandsvefir.is
assistenza.marziniconsulting.com
help.tallstoriestickets.org.uk
desk.ascent-makler.de
supporto.areabit.it
help.tallstoriestickets.org.uk
brillplace.zephyrcomplete.com
support.scopetechnology.com
support.edclass.com
desk.ascent-makler.de
assistenza.spaziopromozionale.it
support.kleeberg.studio
help.tallstoriestickets.org.uk
help.simplylearn.com
support.tadiplus.de
help.rjcortel.co.uk
*.requalifica.it
helpcenter.hendrixstores.dk
desk.ceffage.fr
ithelpdesk.heart-england.co.uk
assistenza.spaziopromozionale.it
mysupport.gauri.com
helpdesk.giliam.eu
assistenza.marziniconsulting.com
zoho.alphapublicidad.com
assistenza.requalifica.it
assistenza.marziniconsulting.com
desk.ascent-makler.de
support.bta-rn.de
support.sportyfriends.com
propertymaintenance.ssphealth.com
assistenza.requalifica.it
portal.sbusinesslondon.ac.uk
portal.sbusinesslondon.ac.uk
supporto.areabit.it
desk.ascent-makler.de
helpcenter.hendrixstores.dk
desk.ascent-makler.de
assistenza.marziniconsulting.com
tasks.yourmaningermany.de

Certificate

The complete raw certificate details for *.requalifica.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuyu6Qj/KWXpXtwmSf1t
b9wvV5PhbtHzKdkXV0CKWUzDrXVM8K3zyLH3SgKJZ7lw0qpFo54ZOuYrlw/fIn4W
e6fXbfu6AihKdypMhc/s60qD3/zMRZU9Pxo8hup8ZkVE9F1crofSyWHZWk3bcS52
x+pvsTlX4MtNe3REFNADFaY34eR9iKg1OYtyslX1gBmroI1xQV6Mq9r5yVGpsKmU
VU/Ikd1a9OFtXMGNmrjLuh5wTEXWqixFi0pExi+8aF7VDntyZ21B5JNBGqLIWpDu
8T/D7gszTWYrBUg1LsFnfEzZrfZBnuvNEgAFU1ctsF5jo+tAmvZumpRF8w0J9kJb
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61009677221775674553234473724771156071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 04:18:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-28 04:18:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.requalifica.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22587131141194238468318341135837369984924118166963395098359878881453615923212772779920555909846518441548519013084898531173661079563010344853366275402705883341905335394564259668667457970125690238528246701269184301918781014257422775288503872176053595576806163313469985381003498239082422719420401776412645099533901087174167527257329437150735279730702017142515684693237408172672228719901843009664041058490758629120179038259038390846547497202544450368971175860379052358909957906744261193852880853025270275537670529109866637044133736879618303013609310033050315450169746085107863720262168851213763528607128923145301011880773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.requalifica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requalifica.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5f639d8b53bd93ef83aeab4f83c808c759b22d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0043aaa2c80528d36cf54f3ff7b2c88220662afada602e98ec43a92ba9d902c01bf52db60f489c2305aad0dbc6efb5b546a99f50fd9776bdf80d8a38ce14c525f38e85f325cd5072c6f958720451a70413dabfcbcf28db6e18c3041ddcb5d51fe6c096ffc554968b357aa1ac58e2d62ae329156b5ba3af2735df0e675495a1206ed167705408a0409188b5c3c0d61b11c34de2a59454a4f713cf03b4636a2270e14cb477088f6f687f6444f050ce56f2fd090854bd69faa51ae63bdd342359067ebe160bba8631aa10d54dbdc18da4ec6a58f81810e7fa5017ddba44f80f7eed99155da787b6846e893da260102c019c0b971692b76c4d51ce65deea7ace1eafe5b0c8b8d5f0182d994d56d304df7bfddebfd372a82790ee88fd579bc4d5294fd48de1d4c227b4a25eb09193228acf448e9d1b7535853819297d754a799cb56697652fe1003cc2eecd8e2abd14f07333c7c339ce0aec4a1a9bdd45e1f8299be39646a4212573c7a073b86714dfef285aa749153106ef1e5a035628ec709fceb9cc9f22d7ef935db2ab225ab7551d9e3ecaaf0b489a8a7af7d0ba1bd3e6261ae228afbde3e527c6e7ca3c26d6ee2191d9f5cdee0bbb0f9564d3eb224823b659e5cab93a6f38d6871eaa50d6a719585384dbbbba3da32dab195d39a3b76dd418f1ca41bf6c4c458d8734688fd0c0a8ce6c0cf7be4352d5542b06ad0e6268ca5e33ff