*.pensplan.com

- PENSPLAN CENTRUM S.P.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:f1:bb:50:a2:cb:2c:cb:b0:9c:04:0d:82:95:5a:bb was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

PENSPLAN CENTRUM S.P.A.

Organization: PENSPLAN CENTRUM S.P.A.
State / Province: Trentino-Alto Adige
Locality: BOLZANO
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f1:bb:50:a2:cb:2c:cb:b0:9c:04:0d:82:95:5a:bb
Serial Number (int): 5242826729492720154683571602111945403
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 06:d6:5e:41:6c:ab:7b:f6:2a:c6:74:0e:30:c2:52:79:d0:8d:4c:3a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): db:18:cf:4d:34:a1:c3:07:2f:bd:48:04:bf:b6:07:93:97:a3:2b:de
Fingerprint (sha256): 60:8b:16:ff:19:9f:c6:94:c4:1e:82:a3:33:71:87:dd:68:d8:26:42:b6:4c:e3:08:49:1c:5e:f3:42:39:1b:b2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.pensplan.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pensplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pensplan.com
pensplan.com

Other certificates including the domain name pensplan.com

(limited to 100 certificates)
segnalazioni.pensplan.com
whistleblowing.mairetecnimont.com
segnalazioni.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
academy.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
*.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
www.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.mairetecnimont.com
borgwarnerbrossysystemitaly.wbisweb.it
crm.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
*.pensplan.com
segnalazioni.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com

Certificate

The complete raw certificate details for *.pensplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUUMzymWwbwTzjlu9J6
+VPAgAPIjULLtJyIqPATLfyJTEDjLXUwvLyLpnc/znN6aOqL3H+SqQvzeX1YEzhu
I/w7gUeAF4+YpKOZV4GdqTYLHyZ3I+JW5YTG45A92mzX1f1VzSXr9gcsTRbswJhO
4OsBGuTCqWffWIALwUMB3AJMuDkA1CL4uli0mBC0xd9gbuMhI+FSMAMJtxx+hjjF
n82mo/8BC5rXirHB6JfLGu3R6xj/iHH6Y2CUfznv6kXfuYorj5kH/LFRRV1AKHFs
IRhz3ThYxeKjIj0eUU+fk7aTcW7KZ9T3IqykLDSVLfFAgIRwmEaubKXKsmjTl3G7
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5242826729492720154683571602111945403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trentino-Alto Adige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOLZANO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PENSPLAN CENTRUM S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pensplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22346684481286070260785034765057332833518706493375679031973117661007196796562673714618587295448953083653140737158571818014168580109197064798144289563248626325012824501218061531719801520240502619495303424923249179530650882533495231378981710264490122083618387130663881435344043381616719621918025672756385112011402983358839021648646144846144684949602384848046381580954342172038963307806287014565496055689726801595467129584679414502158079012653083038657660647718177531376535818314756357534000843095614563658791061073818583873058738272039589025050848267290952852846405982999653160286361288331901086358531313747398306675697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06d65e416cab7bf62ac6740e30c25279d08d4c3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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