*.acegasapsamga.it

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0b:78:f9:d6:34:f1:b3:4f:d3:ed:3d:38:3a:e4:48:a4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.acegasapsamga.it

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:78:f9:d6:34:f1:b3:4f:d3:ed:3d:38:3a:e4:48:a4
Serial Number (int): 15249650867861759645270559024105146532
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:b4:dd:24:9b:1d:c6:a9:dd:e1:bb:f7:0a:5f:cd:2b:cb:94:ac:06
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 1a:0e:98:1d:e5:da:1f:50:aa:f4:cf:53:35:06:5e:e7:2d:ed:38:a3
Fingerprint (sha256): 67:c7:a0:fb:91:7a:fe:9e:bb:ce:22:50:90:3d:7c:6f:f3:2e:74:c9:49:e9:a6:ae:7c:00:d9:ee:bf:cf:69:f9

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.acegasapsamga.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.acegasapsamga.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acegasapsamga.it
acegasapsamga.it

Other certificates including the domain name acegasapsamga.it

(limited to 100 certificates)
nova.tutorsunited.org
nova.tutorsunited.org
*.acegasapsamga.it
planner.podmanagement.co.uk
acegasapsamga.it
www.miupdate.co.uk
v2.dieschrankhelden.de
servizionline.acegasapsamga.it
acegasapsamga.it
servizionline.acegasapsamga.it
www.f2b2.org
www.gruppohera.it
servizionline.acegasapsamga.it
adventure.tyf.com
sts.gruppohera.it
adventure.tyf.com
greeneco-air-gf.sunapps.fr
fieldservice.mango-solar.de
www.gruppohera.it
privacy.appzco.uk
sts.gruppohera.it
servizionline.acegasapsamga.it
select.converge-digital.com
*.acegasapsamga.it
sts.gruppohera.it
www.itvcreate.com
*.acegasapsamga.it
richieste.acegasapsamga.it
corpoapp.wast.fr
sts.gruppohera.it
adventure.tyf.com
servizionline.acegasapsamga.it
adventure.tyf.com
app.futurest8.co.za
www.gruppohera.it
check.ticketpay.de
nova.tutorsunited.org
sip.gruppohera.it
my.answerbee.co.uk
www.gruppohera.it
my.sixlinks.com
docenti.forema.it
wanapptest.workapp.be
*.acegasapsamga.it
select.converge-digital.com
nova.tutorsunited.org
sip.gruppohera.it
www.gruppohera.it
partnership.coherenze.com
portal.wakelake.sk
db.weconnectminds.com
sip.gruppohera.it
servizionline.acegasapsamga.it
nova.tutorsunited.org
portal.pleaseconnectme.co.uk
myapp.atelieruldeit.ro
nova.tutorsunited.org
login.aimloop.com
nova.tutorsunited.org
inhus.dsst.lt
adventure.tyf.com
complex2.propertydashboard.co.za
adventure.tyf.com
permissions.genesis-tec.com
sip.gruppohera.it
nova.tutorsunited.org
adventure.tyf.com
complex1.propertydashboard.co.za
portal.mmbb.be
grc.orangeoaks.nl
*.acegasapsamga.it
coty.asecca.co.uk
*.acegasapsamga.it
pat.acegasapsamga.it
virtualvda.intelauto.co.uk

Certificate

The complete raw certificate details for *.acegasapsamga.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlflzRR+rRcDeCRHnZlDa
qxJJYDCyeXp7AiLCEMwfyo6XO2/v/thx98woNer1JRD8CoPx/l8wgQZAnn3lV340
wYCz+fCoBoO2e863nQ1929ypLKV+NkN1QUt8mXnUyfXwwGl20faOpvBCPh9byf/U
7NOR7IR07VBQgnLn+nofQNSmN5QzKm50b3wMiz0qFp/ThjQZsMOf8JLY9s36ZrBU
HH1wej+PbQOpRSihyXdO+9wGbsszZphZsVHCuHN8JSEbvkzecSpK06/KWl30vUAg
qKU/iJDswpNema6s3h+EwWQ3ufScf0z+av7abugbLGFhsvpoB0kveqZ7MDAd/qaR
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15249650867861759645270559024105146532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.acegasapsamga.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18932515954392776639965310801217514723260633591343711565110153279875630125971415520807289311564867077203702182243980671114965689198203246458801979838866587221045308024848268314463774558051359777298812710676164626776636947048687007303702804795957847230927568246353335459047993176022824343875029139258210507862777972620690575090983922859179688181055556384749793929623265096532768947928273162645876563801084064401472935205474240540353598798708730164661850612970407501255041896313069657081135047551182207920048154872739249421810196929527993829215894332664245264045335786960527185087773468947128704206967343735604571967823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eb4dd249b1dc6a9dde1bbf70a5fcd2bcb94ac06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acegasapsamga.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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