DV SSL/TLS Certificate for *.talentiinrete.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.talentiinrete.it DV SSL/TLS Certificate

This certificate with serial number 65:14:50:7d:62:77:7d:12:91:94:0a:78:97:76:4b:1d for *.talentiinrete.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.talentiinrete.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 65:14:50:7d:62:77:7d:12:91:94:0a:78:97:76:4b:1d
Serial Number (int): 134357506038209789905898968572344290077
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: ed:ee:e4:58:69:7e:ad:ac:f4:b1:80:14:ba:0a:96:cf:a0:9e:ef:5d
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 6e:ab:f3:20:05:ad:94:05:d8:89:cd:08:ae:b2:8c:db:d2:03:33:2d
Fingerprint (SHA-256): 51:31:e4:ff:8d:87:0e:2a:b3:38:a9:af:de:a8:64:87:44:32:24:25:cb:d5:11:2d:03:56:10:c6:d5:7c:87:38

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.talentiinrete.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.talentiinrete.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.talentiinrete.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62CVXDPH8PQvpK6Ok2a1
/oYURk3rJP+zRnK883nmsr8LYkyW2d86quLuRryZeW7VRYjaGpwJtBp3lSlgYknC
INuoAva4xhvaCfWHF/TIF0+km+BS7G/XEXynWu+IZU6022fMmZwPiUwY2//tGbYB
hDNou9gFna9lK7j4nsyxS58l0UKl0Z7nGmpJ+9B4hbv+Mz7cQi1fPXBCw/3yi3tL
43u9d+t9iiOegIIUNrO6rNaAyeaqWfKeOQMRbEXLAK1Ggkp9plUUGyHvyOf7017u
tYlMiI3GCBX60jRbmFfLDWADn5zqvAZ3fADd/iT77Ag3Zxzb0Z3kp38mrn1qhTzr
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134357506038209789905898968572344290077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 03:18:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-05-24 03:18:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.talentiinrete.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29713628735458216987175916658652069069413262273874991083071595091004778921332233881304164558796194619582708014218004406195806685311135715952497532917038832899538692361084359285022950828498154633953179624655320420463582643216296761540225693302432002525277041547199771156878222856922424358900092374301281579696082900076140210301300071260987187467573963019833565492838818905302786901834457255915893935956485599325562328818317550236553951300304645766746377696926281608123244242489407679667317886602308500759511544106194162286568469941548074621127853944935619858011875999414341130044223989687107794766327330296804115540981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentiinrete.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentiinrete.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edeee458697eadacf4b18014ba0a96cfa09eef5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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