suapcl.impresainungiorno.gov.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 3d:36:36:69:2c:b6:fd:3e:25:05:49:9c:92:81:0d:3d was issued on by Actalis S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=suapcl.impresainungiorno.gov.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:36:36:69:2c:b6:fd:3e:25:05:49:9c:92:81:0d:3d
Serial Number (int): 81364395356154970963426181367589834045
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c8:d2:92:b4:60:95:57:11:6d:33:05:5d:ee:5f:31:28:a5:bb:84:28
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 48:c1:44:d3:ee:b5:c9:60:90:49:07:3d:f7:cd:0e:84:a5:69:89:a0
Fingerprint (sha256): 67:24:a2:e0:a9:a6:18:aa:cb:5b:e6:09:69:a5:3d:63:79:d4:b6:cb:a2:16:89:03:ef:ef:18:27:2d:12:70:c7

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate suapcl.impresainungiorno.gov.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suapcl.impresainungiorno.gov.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

suapcl.impresainungiorno.gov.it

Other certificates including the domain name impresainungiorno.gov.it

(limited to 100 certificates)
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
pa-demo.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
www.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
pacl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
api.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
subf.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
comunicazionireaws.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
api.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
test.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
test.impresainungiorno.gov.it
pa.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it

Certificate

The complete raw certificate details for suapcl.impresainungiorno.gov.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhzCCBW+gAwIBAgIQPTY2aSy2/T4lBUmckoENPTANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yMjA3MTEw
NzM4NDRaFw0yMzA3MTEwNzM4NDRaMCoxKDAmBgNVBAMMH3N1YXBjbC5pbXByZXNh
aW51bmdpb3Juby5nb3YuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDg+j+uSrlyAThZRUINrQgY06r3lyi2wAcx0zJtfJO47AhCHAPn8MvBLgFvKZn9
NWBjm74XBQZTuZJUE0VbwX/HJJXb0uOR7wTiKrjIdz9LwIBkPyEj+/QWZZjzErkK
CxWB2eQoK+d8hL+FQDxWq5K1hduIvWCAvyFySFm2VUvqzlgnOa2DDVPd42fHSb/p
4M549MTF06Mx2mAydADSzMiiZeifek31Sq6aKlTPjS20gMyoP6yKrIIB7uER0vxM
IEU08iez1MvPGduldH5lxaouCm2VnYChL5sSTzblkzbqWF/DVCqapXkulqRBchSv
kS+wZDWVslkaw8ooQGh6FRjxAgMBAAGjggNMMIIDSDAMBgNVHRMBAf8EAjAAMB8G
A1UdIwQYMBaAFEKDbYB8CYRn/YBXq/Em9XfIIoJxMH0GCCsGAQUFBwEBBHEwbzA6
BggrBgEFBQcwAoYuaHR0cDovL2NhY2VydC5hY3RhbGlzLml0L2NlcnRzL2FjdGFs
aXMtYXV0ZHZnMzAxBggrBgEFBQcwAYYlaHR0cDovL29jc3AwNi5hY3RhbGlzLml0
L1ZBL0FVVEhEVi1HMzAqBgNVHREEIzAhgh9zdWFwY2wuaW1wcmVzYWludW5naW9y
bm8uZ292Lml0MFEGA1UdIARKMEgwPAYGK4EfARYBMDIwMAYIKwYBBQUHAgEWJGh0
dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1kb3dubG9hZDAIBgZngQwBAgEwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMEgGA1UdHwRBMD8wPaA7oDmGN2h0
dHA6Ly9jcmwwNi5hY3RhbGlzLml0L1JlcG9zaXRvcnkvQVVUSERWLUczL2dldExh
c3RDUkwwHQYDVR0OBBYEFMjSkrRglVcRbTMFXe5fMSilu4QoMA4GA1UdDwEB/wQE
AwIFoDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe++nz/EMiLnT2cHj4Y
arRnKV3PsQwkyoWGNOvcgooAAAGB7DtxuQAABAMARzBFAiASci2vOQs5l9Mi1Z3q
IW2aqBevQfzo2TS0xcT9Ao9ZBAIhAJ8V4R5k3SEqNOiCRuIGoBieVjP2JpolkUw9
U4YqoqQdAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGB7Dtx
nAAABAMASDBGAiEAuhR0elSJ6RoXWYj1bqkEKnH7aRSuyu76ygCow0C4gyMCIQC1
h+d3WQs0ybe6b5FZwRjiFR+5NyBNfN9lwqcqnBxdIAB2ALNzdwfhhFD4Y4bWBanc
EQlKeS2xZwwLh9zwAw55NqWaAAABgew7cs0AAAQDAEcwRQIhANHXBfLBPUodkO5a
i7RAOvOfsXqzrRw3LIC9oSU/gRFwAiAhS8QWC5EyZi2TT2t1EN+x0CieE7L6DXm2
4yzGjelxkDANBgkqhkiG9w0BAQsFAAOCAgEAYR/S90HyRMdjXctVQFwQAxw4/5jy
cOOrgbHUzeLEeKYVZeOnXsHuCpdIyfiwoUDCfjrVBUY1tZ1zQea93vyf3jGkO7wr
DgddHjGZr9mQRluAFtyH4tHvaNjRuud9abASSSE+ZZ6+mir4+1U1X1rSdTCZTCu4
24sXic26e+j4dvoblliHxpF+ZUr7OLNIGtQCLOx1M9zNBJHHXLshPS+fsmHSWThS
8d5IkGhrhMiMI+jaLwnMz/zJxDxMzQH79p3l5stDeNmdPkZC6Kagb/WX0voqHu2W
FILgAfrRCKXiRKKWLdURJIfCotJf6nHPkAXppZkHVR59m/Xfk/ZNXD8ITZVAyWdI
JQQ/b9xho5XHnPF8axs2i1odv4zFEeqRurhqOt/lVdxZIYYRkjMN/Hi58X4eesCA
pdU89xRiAr5nGPHfyFGtj9zKwRqMzOiZ3Ajsq/gH2C7n9IDBFty4TiLZxHm9vplV
N0VJLq9NmhPn10tnR2wUYqI8VIOS1d9fHapwk0JI/z79uMa3EScdflVA0Rtf5qg/
sWIIh+R/jJR4ak+tMqAO1N/VNziHHNRAzx62tHd903/O4lskwdpl32rb7e+EMuKe
516yX2/8iCEwQI0RJEyhWmcTBXHREs//siP1GDCfZLNnlxEeUeDIOUMuFR9iT2kc
a73BXKGDOuRKIeE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Po/rkq5cgE4WUVCDa0I
GNOq95cotsAHMdMybXyTuOwIQhwD5/DLwS4BbymZ/TVgY5u+FwUGU7mSVBNFW8F/
xySV29Ljke8E4iq4yHc/S8CAZD8hI/v0FmWY8xK5CgsVgdnkKCvnfIS/hUA8VquS
tYXbiL1ggL8hckhZtlVL6s5YJzmtgw1T3eNnx0m/6eDOePTExdOjMdpgMnQA0szI
omXon3pN9UqumipUz40ttIDMqD+siqyCAe7hEdL8TCBFNPIns9TLzxnbpXR+ZcWq
LgptlZ2AoS+bEk825ZM26lhfw1QqmqV5LpakQXIUr5EvsGQ1lbJZGsPKKEBoehUY
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81364395356154970963426181367589834045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-11 07:38:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 07:38:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'suapcl.impresainungiorno.gov.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28400782571881627151833432820548156503099860807735359244370139245625628969327194494810626445101780921850536488719510484569980269658220377882467939441037997492530497734673882539272670449334475081505178720475756328195200620932986856868543930285073183766473418716314383227564682275131046278073924528095875445022560235171033522859985163969625239127573669411576205759777977058047576759592885230438428685074771113084026430984437392156686592807912981376495579848764271982850370927925945241724432146985603963361113627221767738755361966507903704885681916067103297853529050420942929987872278132352766920120941558708523102443761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suapcl.impresainungiorno.gov.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8d292b4609557116d33055dee5f3128a5bb8428
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000181ec3b71b90000040300473045022012722daf390b3997d322d59dea216d9aa817af41fce8d934b4c5c4fd028f59040221009f15e11e64dd212a34e88246e206a0189e5633f6269a25914c3d53862aa2a41d0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000181ec3b719c0000040300483046022100ba14747a5489e91a175988f56ea9042a71fb6914aecaeefaca00a8c340b88323022100b587e777590b34c9b7ba6f9159c118e2151fb937204d7cdf65c2a72a9c1c5d20007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000181ec3b72cd0000040300473045022100d1d705f2c13d4a1d90ee5a8bb4403af39fb17ab3ad1c372c80bda1253f8111700220214bc4160b9132662d934f6b7510dfb1d0289e13b2fa0d79b6e32cc68de97190
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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