www.lefrecce.it

- FERROVIE DELLO STATO ITALIANE S.P.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:46:65:4d:6d:15:07:8a:13:a7:ac:84:64:cf:51:80 was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FERROVIE DELLO STATO ITALIANE S.P.A.

Organization: FERROVIE DELLO STATO ITALIANE S.P.A.
State / Province: Lazio
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:46:65:4d:6d:15:07:8a:13:a7:ac:84:64:cf:51:80
Serial Number (int): 14987023391429284069376698036956123520
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:4f:7e:3b:f0:6a:ff:95:79:98:a5:26:49:8e:1b:c0:36:fa:7f:4f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e7:b8:9a:46:05:fd:33:c4:3c:80:24:80:d8:e0:0d:b7:25:0e:75:a2
Fingerprint (sha256): 41:0e:03:64:29:14:58:eb:3e:89:80:6f:3f:f4:de:3a:00:1a:0a:38:e4:7e:de:95:37:80:c2:ba:71:a2:32:4d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lefrecce.it

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lefrecce.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agenzia.cert.trenitalia.com
agenzia.trenitalia.com
ams.c2c.lefrecce.it
api-cert.lefrecce.it
api-cert.trenitaliatper.com
api-corr.trenitaliatper.com
api-int.trenitaliatper.com
api.lefrecce.it
api.trenitaliatper.com
apimanagement-cert.lefrecce.it
apimanagement.lefrecce.it
app-certificazione.lefrecce.it
app-correttiva.lefrecce.it
app.lefrecce.it
c2c-online.co.uk
cert.c2c.lefrecce.it
consumer-apimanagement.lefrecce.it
corr.c2c.lefrecce.it
dev.c2c.lefrecce.it
int.c2c.lefrecce.it
lefrecce.it
next.c2c.lefrecce.it
olta-certificazione.lefrecce.it
olta.lefrecce.it
portaleapi-cert.lefrecce.it
portaleapi-certificazione.lefrecce.it
portaleapi.lefrecce.it
thello.fr
tickets.c2c-online.co.uk
ticketsbeta.c2c-online.co.uk
ticketsstaging.c2c-online.co.uk
ticketsuat.c2c-online.co.uk
www-cert.trenitaliatper.com
www-corr.trenitaliatper.com
www-int.trenitaliatper.com
www.lefrecce.it
www.thello.fr
www.trenitaliatper.com

Other certificates including the domain name lefrecce.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJsDCCCJigAwIBAgIQC0ZlTW0VB4oTp6yEZM9RgDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDExMDMwMDAwMDBaFw0yMTExMDcyMzU5NTlaMHUxCzAJBgNVBAYTAklUMQ4w
DAYDVQQIEwVMYXppbzENMAsGA1UEBxMEUm9tYTEtMCsGA1UEChMkRkVSUk9WSUUg
REVMTE8gU1RBVE8gSVRBTElBTkUgUy5QLkEuMRgwFgYDVQQDEw93d3cubGVmcmVj
Y2UuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90agv44nRybqt
Xloycs3sTf/NUVwlphK5UYVfOLmPQ0i2920R6Y9v5rx5FmIiIHxhG7wM57PNJHcp
s1XeFT8XpgNEjEvoZfMG9y7DL/yFlshMMT8SMW1t0SJVjyjQdLKupovsqr4lr9mC
K79C2aeQNZDMfcmbSL3C2N9oRxi86rFi8t+vvqhs/OkhsVU3WKK7hyFma3R13STJ
0aZhK0/6UwMPH9LbK1gykXkXBbW7QqPLGH8GHeMAeQtDpyd8YHZidT8YdpSwX2i3
gI8/6ERuizVKLQdbMs8OuuNjDWgEbrjM7R8h/kZlH+hEfVk5apkMY+FRaca9KP7W
5lj8Z/CHAgMBAAGjggZRMIIGTTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MW
OJ5sxTAdBgNVHQ4EFgQUQU9+O/Bq/5V5mKUmSY4bwDb6f08wggPBBgNVHREEggO4
MIIDtIIbYWdlbnppYS5jZXJ0LnRyZW5pdGFsaWEuY29tghZhZ2VuemlhLnRyZW5p
dGFsaWEuY29tghNhbXMuYzJjLmxlZnJlY2NlLml0ghRhcGktY2VydC5sZWZyZWNj
ZS5pdIIbYXBpLWNlcnQudHJlbml0YWxpYXRwZXIuY29tghthcGktY29yci50cmVu
aXRhbGlhdHBlci5jb22CGmFwaS1pbnQudHJlbml0YWxpYXRwZXIuY29tgg9hcGku
bGVmcmVjY2UuaXSCFmFwaS50cmVuaXRhbGlhdHBlci5jb22CHmFwaW1hbmFnZW1l
bnQtY2VydC5sZWZyZWNjZS5pdIIZYXBpbWFuYWdlbWVudC5sZWZyZWNjZS5pdIIe
YXBwLWNlcnRpZmljYXppb25lLmxlZnJlY2NlLml0ghphcHAtY29ycmV0dGl2YS5s
ZWZyZWNjZS5pdIIPYXBwLmxlZnJlY2NlLml0ghBjMmMtb25saW5lLmNvLnVrghRj
ZXJ0LmMyYy5sZWZyZWNjZS5pdIIiY29uc3VtZXItYXBpbWFuYWdlbWVudC5sZWZy
ZWNjZS5pdIIUY29yci5jMmMubGVmcmVjY2UuaXSCE2Rldi5jMmMubGVmcmVjY2Uu
aXSCE2ludC5jMmMubGVmcmVjY2UuaXSCC2xlZnJlY2NlLml0ghRuZXh0LmMyYy5s
ZWZyZWNjZS5pdIIfb2x0YS1jZXJ0aWZpY2F6aW9uZS5sZWZyZWNjZS5pdIIQb2x0
YS5sZWZyZWNjZS5pdIIbcG9ydGFsZWFwaS1jZXJ0LmxlZnJlY2NlLml0giVwb3J0
YWxlYXBpLWNlcnRpZmljYXppb25lLmxlZnJlY2NlLml0ghZwb3J0YWxlYXBpLmxl
ZnJlY2NlLml0ggl0aGVsbG8uZnKCGHRpY2tldHMuYzJjLW9ubGluZS5jby51a4Ic
dGlja2V0c2JldGEuYzJjLW9ubGluZS5jby51a4IfdGlja2V0c3N0YWdpbmcuYzJj
LW9ubGluZS5jby51a4IbdGlja2V0c3VhdC5jMmMtb25saW5lLmNvLnVrght3d3ct
Y2VydC50cmVuaXRhbGlhdHBlci5jb22CG3d3dy1jb3JyLnRyZW5pdGFsaWF0cGVy
LmNvbYIad3d3LWludC50cmVuaXRhbGlhdHBlci5jb22CD3d3dy5sZWZyZWNjZS5p
dIINd3d3LnRoZWxsby5mcoIWd3d3LnRyZW5pdGFsaWF0cGVyLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3
MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0Ey
MDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxo
dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcB
AQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0G
CCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RS
U0FDQTIwMTguY3J0MAwGA1UdEwEB/wQCMAAwggECBgorBgEEAdZ5AgQCBIHzBIHw
AO4AdQB9PvL4j/+IVWgkwsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXWNhWu9AAAE
AwBGMEQCIEjQAII3P2orlmdHvbf4FLd3y+IsLPazWBG1WCtch9k0AiBJSpAMgTru
lBvgQlEvSr0ZWnCC/PD3kpSgUlRoEVg/fgB1AFzcQ5L+5qtFRLFemtRW5hA3+9X6
R9yhc5SyXub2xw7KAAABdY2Fa9UAAAQDAEYwRAIgRqWfryJY7IdYMZ7xaMUw8pME
vfQrWC3rJ30mPbVw5qcCIBQqJivCzAPGnJ0TRjhDaD6xoWvXYfj5rrrkC+dcDAgR
MA0GCSqGSIb3DQEBCwUAA4IBAQAs7vKPTnFGxoW8zCXthSuD72WCjL2Uyl07523q
ycVmF8iuyiUsSRgKJJnBzJj7rO9cdHsjr1/xAYqxZ6fxlqJGt1Jit33W6Ns/kimh
QS2YC3FO4N4iT5bGIv09H1AifePVUNJy71GcWXpOC9PVcR1i508zwpUf9EAsV7vl
T2Nq5A3DY5lNmaa45RK1j4DOauGD44AHnFzC2LLK0x+jXEuyGJpgyasvQRZsu9Bp
aOZXLYrHQbQO5NjCodKQiS6sw5QpRi5yLeOsqqhff+EP3CGd97hlkHrUa6Qer7+W
MtcX6bK1svDtQMhGkqJQ7FI8X/68bkWh2iuEgD6ZqcVQLQwV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGoL+OJ0cm6rV5aMnLN
7E3/zVFcJaYSuVGFXzi5j0NItvdtEemPb+a8eRZiIiB8YRu8DOezzSR3KbNV3hU/
F6YDRIxL6GXzBvcuwy/8hZbITDE/EjFtbdEiVY8o0HSyrqaL7Kq+Ja/Zgiu/Qtmn
kDWQzH3Jm0i9wtjfaEcYvOqxYvLfr76obPzpIbFVN1iiu4chZmt0dd0kydGmYStP
+lMDDx/S2ytYMpF5FwW1u0Kjyxh/Bh3jAHkLQ6cnfGB2YnU/GHaUsF9ot4CPP+hE
bos1Si0HWzLPDrrjYw1oBG64zO0fIf5GZR/oRH1ZOWqZDGPhUWnGvSj+1uZY/Gfw
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14987023391429284069376698036956123520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FERROVIE DELLO STATO ITALIANE S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lefrecce.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23962425349018984952694720361003336200603909037738603892608265868329965633836055058325730663272888896286931774444848016567557182724821014355483418380976324173597975425561659545897578045318362841896832305470050364283627427352186528438810133242145925974942106698496348939098689427672900237076104957642086669484419330918152663266030804021223881753078909409915969860938426579457065398041355703861488270061700751971203493332857642708216793103166216853563561468349299995353555506790525169719403928118569504509523137098895720499453955273214133468765179772816063726615298816204773024753971884364419457779409077291849135681671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							414f7e3bf06aff957998a526498e1bc036fa7f4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.cert.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-correttiva.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer-apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corr.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olta-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olta.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsstaging.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenitaliatper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001758d856bbd0000040300463044022048d00082373f6a2b966747bdb7f814b777cbe22c2cf6b35811b5582b5c87d9340220494a900c813aee941be042512f4abd195a7082fcf0f79294a052546811583f7e0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001758d856bd50000040300463044022046a59faf2258ec8758319ef168c530f29304bdf42b582deb277d263db570e6a70220142a262bc2cc03c69c9d13463843683eb1a16bd761f8f9aebae40be75c0c0811
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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