app.casadellasaluteweb.it

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 09:8d:4b:02:90:bc:a3:aa:e1:a0:2a:f6:97:19:65:0d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.casadellasaluteweb.it

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:8d:4b:02:90:bc:a3:aa:e1:a0:2a:f6:97:19:65:0d
Serial Number (int): 12696687203088144821870017113277162765
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f0:ad:3a:5e:ab:78:9d:9b:ef:94:b5:bd:8e:77:f6:17:61:de:80:4c
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): bb:00:20:65:4b:ad:8b:5c:3f:de:ca:e0:ee:e9:5c:3a:ce:e6:5c:20
Fingerprint (sha256): 67:69:8f:cd:cc:e1:2c:f0:c4:80:4c:64:53:80:66:ed:43:bb:6a:49:8a:b8:0f:8f:26:2e:7b:d4:a0:c1:56:e8

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate app.casadellasaluteweb.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.casadellasaluteweb.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.casadellasaluteweb.it

Other certificates including the domain name casadellasaluteweb.it

(limited to 100 certificates)
www.holtmon.dev
www.kevinhcross.dev
link.psu.care
vscoparis.com
www.standuppie.com
asad-dowling.com
umsatz.co
www.wow.bio
game.keystonecrusade.com
console.cacoff.com
www.kerbas.co
www.nomadwork.place
www.martinsoftwarellc.com
daten.europakommunal.eu
media.kuburayaprinting.com
www.itrenzy.com
casadellasaluteweb.it
home.grigoras.dev
live.fruenshus.dk
www.boorran.com
www.sumitup.org
www.sasan-nami.dev
toptabula.com
share.qa.soniccloud.com
api.apvyl.com
connect.awheels.kitloongholdings.com
b2yclub.online
www.60sfire.com
croptube.app
baskal.joyridecity.bike
turkuma.com
inipharm.com
docs.mylegaleinstein.com
dranna.takeaction.co
app-dev.curipod.com
www.mehulgupta.com
www.lucky13.net
www.joseizarra.com
www.hushhushgali.com
www.safon-bookstore.com
zeh.arq.br
app-dev.curipod.com
test.mobile.ireport.ch
newidentity.com.mx
www.griffinw.com
ribeiroribeiro.adv.br
link.psu.care
yocorroporeldravet.es
musical-nintama-td-store.selforder.live
www.lucky13.net
niravpatel.cf
app-qa.casadellasaluteweb.it
www.nazotoki-bingo.com
frozr.io
dev.pedidos.deliverynube.com
trumpalyse.com
greenwooddevelopmentnj.com
wallet.merit.me
asad-dowling.com
chiquerentals.com
app.casadellasaluteweb.it
book-forex.com
thearmchairepidemiologist.info
www.parkncharge4u.com
saurrenewable.in
www.epicapps.eu
poistu.raha.fi
dafsports.com
app-dev.casadellasaluteweb.it
seccomad.com
yocorroporeldravet.es
nationalpark.shopstudentstore.com
gymnacode.blueur.com
www.angelasette.com
newidentity.com.mx
app.casadellasaluteweb.it
ruhland-kallenborn.eu
ratazima.com
www.cropcaddy.ca
whatsacut.app
www.scdclinic.com
greenwooddevelopmentnj.com
ribeiroribeiro.adv.br
theme.livestax.com
app.monbim.co
jeroengoudsmit.nl
opportuno.app
www.abhiram.dev
delighto.com
cmov.dev
app.casadellasaluteweb.it
www.shinra.app
wijn-proeven.nl
www.amitdante.com
whatsacut.app
www.keplergroupsystems.com
personalinsights.co
www.david-jennings.com
www.cropcaddy.ca
habescha.ch

Certificate

The complete raw certificate details for app.casadellasaluteweb.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDhR8JluPE/pfvZ5Fdx+
cWjQOivsKJbi6JAmFqVcH6Lek/8CGEP8w0DuAfD7tdrCdyhW9PgfEt8FgUY2C79C
4iNqGuPi4ugjpGLi8YodFQXpB9uxzpyd0SVc3HUXIjziAZTJkNa078R6+sENw607
aAx5Z5bKVSUEko8fNmpfEcv98DaQmzStwdxaZbTQnn451D/D3YaoHCiiOKn6eTY/
bU3mHbPk0Gv/VgatAqh55lmj7RLMdffr0RDGXCf3zzxuamDqJbi2QhCKHJ1qZP43
wYB2gdooxm7mO2EmqqNAeSEkP/omYoeB3hJQPM4o7QXx11Gxd25Gjcc2fZgal3WX
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12696687203088144821870017113277162765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.casadellasaluteweb.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25780386678387410807847383266199784753369465971806846219936000676023855453697854033129692468419998373561340285661829710191063717587869851245586597126334397163876848985240110479737322281471858715382700082106271032839239683324577755357269875043540506640739060641852875101176358370653276962945446800945840146646738358374780152052194589022794734287250257286544909097299478429702160853569497710302772814704327421593973577993785190803474136489256721960950768429800999718292624262925604381701442918708332629200224272102776006015980382913989961597081794503679083944883035060246501580451818520549233312022991056425072077412281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0ad3a5eab789d9bef94b5bd8e77f61761de804c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.casadellasaluteweb.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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