www.lefrecce.it

- TRENITALIA S.p.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:15:03:e5:3f:a4:ad:7f:2d:33:9d:f4:5c:77:9a:bd was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TRENITALIA S.p.A.

Organization: TRENITALIA S.p.A.
Organization unit: TRENITALIA S.p.A.
State / Province: Roma
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:15:03:e5:3f:a4:ad:7f:2d:33:9d:f4:5c:77:9a:bd
Serial Number (int): 9413713214698307980627063560610486973
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a9:79:05:a1:42:74:3b:b3:d7:f2:c9:2c:52:e6:bc:d2:af:98:6f:ff
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 7f:5c:51:f5:df:50:0e:1a:6a:c6:c3:b8:00:6f:9e:b1:1e:69:14:3f
Fingerprint (sha256): 43:85:b9:2f:75:ee:07:9e:5f:d3:c1:72:bd:7e:e0:97:bc:0f:8c:73:34:f3:bf:19:4c:8d:88:2d:d3:f6:30:1c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lefrecce.it

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lefrecce.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lefrecce.it
lefrecce.it
api-cert.lefrecce.it
portaleapi.lefrecce.it
api-int.trenitaliatper.com
olta-certificazione.lefrecce.it
apimanagement-cert.lefrecce.it
www-cert.trenitaliatper.com
api-corr.trenitaliatper.com
int.c2c.lefrecce.it
app.lefrecce.it
ticketsstaging.c2c-online.co.uk
corr.c2c.lefrecce.it
ams.c2c.lefrecce.it
cert.c2c.lefrecce.it
agenzia.trenitalia.com
portaleapi-certificazione.lefrecce.it
api-cert.trenitaliatper.com
dev.c2c.lefrecce.it
next.c2c.lefrecce.it
olta.lefrecce.it
app-certificazione.lefrecce.it
agenzia.cert.trenitalia.com
apimanagement.lefrecce.it
thello.fr
consumer-apimanagement.lefrecce.it
app-correttiva.lefrecce.it
api.lefrecce.it
portaleapi-cert.lefrecce.it
tickets.c2c-online.co.uk
ticketsuat.c2c-online.co.uk
www.trenitaliatper.com
c2c-online.co.uk
ticketsbeta.c2c-online.co.uk
api.trenitaliatper.com
www.thello.fr
www-int.trenitaliatper.com
www-corr.trenitaliatper.com

Other certificates including the domain name lefrecce.it

(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it

Certificate

The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJtzCCCJ+gAwIBAgIQBxUD5T+krX8tM530XHeavTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA1MTAwMDAwMDBaFw0xOTEwMTYxMjAwMDBaMH0xCzAJBgNVBAYTAklUMQ0w
CwYDVQQIEwRSb21hMQ0wCwYDVQQHEwRSb21hMRowGAYDVQQKExFUUkVOSVRBTElB
IFMucC5BLjEaMBgGA1UECxMRVFJFTklUQUxJQSBTLnAuQS4xGDAWBgNVBAMTD3d3
dy5sZWZyZWNjZS5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYN
NBvnYkgpeexS1vipBAqZzwUw2PUyu93v9vKJRSXPlFPLIbctx9hO7AwhPXiAJ95b
BawnGHp3ifdmvIWK45Xw7LmuyETBiaKFWRDrPN6PX5GT/Aj9s1IjoVxP0FiE7zEa
fM3ppYqSvNuDIs9/VLedLrwefZfV3C3FDHqkuk+H5AxAdjWBKn+OCz+0buHx6map
Gx6AmpBAEP4B0jCW+HXCmA5apx1NHWg/Osae4/xtNtlPk/cbWuITHzLp1oA/WsGf
i81iGLYLfPfU4iyiLHeKjUvCMDynNjpoT94RQLDFUFsY483RB7LN0HmwFmbE0Clu
2S/jQrp9wgiVHSKxfpMCAwEAAaOCBlAwggZMMB8GA1UdIwQYMBaAFJBY/7CcdahR
VHex7fKjQxY4nmzFMB0GA1UdDgQWBBSpeQWhQnQ7s9fyySxS5rzSr5hv/zCCA8EG
A1UdEQSCA7gwggO0gg93d3cubGVmcmVjY2UuaXSCC2xlZnJlY2NlLml0ghRhcGkt
Y2VydC5sZWZyZWNjZS5pdIIWcG9ydGFsZWFwaS5sZWZyZWNjZS5pdIIaYXBpLWlu
dC50cmVuaXRhbGlhdHBlci5jb22CH29sdGEtY2VydGlmaWNhemlvbmUubGVmcmVj
Y2UuaXSCHmFwaW1hbmFnZW1lbnQtY2VydC5sZWZyZWNjZS5pdIIbd3d3LWNlcnQu
dHJlbml0YWxpYXRwZXIuY29tghthcGktY29yci50cmVuaXRhbGlhdHBlci5jb22C
E2ludC5jMmMubGVmcmVjY2UuaXSCD2FwcC5sZWZyZWNjZS5pdIIfdGlja2V0c3N0
YWdpbmcuYzJjLW9ubGluZS5jby51a4IUY29yci5jMmMubGVmcmVjY2UuaXSCE2Ft
cy5jMmMubGVmcmVjY2UuaXSCFGNlcnQuYzJjLmxlZnJlY2NlLml0ghZhZ2Vuemlh
LnRyZW5pdGFsaWEuY29tgiVwb3J0YWxlYXBpLWNlcnRpZmljYXppb25lLmxlZnJl
Y2NlLml0ghthcGktY2VydC50cmVuaXRhbGlhdHBlci5jb22CE2Rldi5jMmMubGVm
cmVjY2UuaXSCFG5leHQuYzJjLmxlZnJlY2NlLml0ghBvbHRhLmxlZnJlY2NlLml0
gh5hcHAtY2VydGlmaWNhemlvbmUubGVmcmVjY2UuaXSCG2FnZW56aWEuY2VydC50
cmVuaXRhbGlhLmNvbYIZYXBpbWFuYWdlbWVudC5sZWZyZWNjZS5pdIIJdGhlbGxv
LmZygiJjb25zdW1lci1hcGltYW5hZ2VtZW50LmxlZnJlY2NlLml0ghphcHAtY29y
cmV0dGl2YS5sZWZyZWNjZS5pdIIPYXBpLmxlZnJlY2NlLml0ghtwb3J0YWxlYXBp
LWNlcnQubGVmcmVjY2UuaXSCGHRpY2tldHMuYzJjLW9ubGluZS5jby51a4IbdGlj
a2V0c3VhdC5jMmMtb25saW5lLmNvLnVrghZ3d3cudHJlbml0YWxpYXRwZXIuY29t
ghBjMmMtb25saW5lLmNvLnVrghx0aWNrZXRzYmV0YS5jMmMtb25saW5lLmNvLnVr
ghZhcGkudHJlbml0YWxpYXRwZXIuY29tgg13d3cudGhlbGxvLmZyghp3d3ctaW50
LnRyZW5pdGFsaWF0cGVyLmNvbYIbd3d3LWNvcnIudHJlbml0YWxpYXRwZXIuY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
PgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1
c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB
BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUG
CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz
dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABaqDN
SooAAAQDAEcwRQIgQ0Q5co0vIpUXZ15Y/T5SByQWxdLGNZOU4hpJspEe31wCIQC4
1sil4u6gc4Lw1kkmw7zsMr/2HjlPpojJbOig/fv2wgB2AId1v+dZfPiMQ5lfvfNu
/1aNR1Y2/0q1YMG06v9eoIMPAAABaqDNS6gAAAQDAEcwRQIhAN1p6Ui/0q5Bqxxm
nG3a7vExcP6JaaG4utjPCWwNqALeAiAh4yQiNhUqgAideBE3S6ByJnKRaNidQAGh
DnHYkEBMWTANBgkqhkiG9w0BAQsFAAOCAQEAk11gFftfgPsnQTDcX6wrucT2aPES
SbhSIHlCzcYKUJpZzboE3m3psZUKoXsfuYaMEHTopqi3YLVm9uY41EdVJx0+skEx
0UhiccAr+n7L/gFGlHoqfUtz3DfrWp4aJHUoe+upvKGs95m2eHUssDT1PN3GThfN
guZVNjR4nOPED6jmqefPTLKnqFtDE2mVGkC51JCuOwzJpVExng43xbdUaxjGeyEg
Z9yTX2lMnbaa20V0tNLpCel8r1s58BdIwIznFXwLsjfmXTM6s51V2CiOxNucc2UJ
Xt1EVZLDbtnobbJq7Ik++MnA5zIrFu0kcT3C/vWXygDw7DVNDYcYUr6eRA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg00G+diSCl57FLW+KkE
CpnPBTDY9TK73e/28olFJc+UU8shty3H2E7sDCE9eIAn3lsFrCcYeneJ92a8hYrj
lfDsua7IRMGJooVZEOs83o9fkZP8CP2zUiOhXE/QWITvMRp8zemlipK824Miz39U
t50uvB59l9XcLcUMeqS6T4fkDEB2NYEqf44LP7Ru4fHqZqkbHoCakEAQ/gHSMJb4
dcKYDlqnHU0daD86xp7j/G022U+T9xta4hMfMunWgD9awZ+LzWIYtgt899TiLKIs
d4qNS8IwPKc2OmhP3hFAsMVQWxjjzdEHss3QebAWZsTQKW7ZL+NCun3CCJUdIrF+
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9413713214698307980627063560610486973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TRENITALIA S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TRENITALIA S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lefrecce.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25001695296833734761623675718374626625425372044179954895269054813312036878606899433019632433783693045687824990021838263710587490109357129773589326999944308203822078112212235391738632274267379806340970034575269157800928004150921961428993424499999413125151825228667288531882582424158129589197646273961712768080408076092621377896133939996018144022202953534506117494701885081713892927739120530989026434265913127168693068998685676722214353927516034483740296967522381842521515038164554110335942537067870021876656435616353872983784913595990337800814654899271340806837590422108267733133564532944137950105806303542811544354451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a97905a142743bb3d7f2c92c52e6bcd2af986fff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olta-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsstaging.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corr.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olta.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.cert.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer-apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-correttiva.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016aa0cd4a8a00000403004730450220434439728d2f229517675e58fd3e52072416c5d2c6359394e21a49b2911edf5c022100b8d6c8a5e2eea07382f0d64926c3bcec32bff61e394fa688c96ce8a0fdfbf6c20076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016aa0cd4ba80000040300473045022100dd69e948bfd2ae41ab1c669c6ddaeef13170fe8969a1b8bad8cf096c0da802de022021e3242236152a80089d7811374ba07226729168d89d4001a10e71d890404c59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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