*.lifestories.world

Issued by Actalis Domain Validation Server CA G2

About this certificate

This digital certificate with serial number 57:da:33:bb:c9:38:d3:2e:2d:e5:43:f8:c7:0f:7d:69 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lifestories.world,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 57:da:33:bb:c9:38:d3:2e:2d:e5:43:f8:c7:0f:7d:69
Serial Number (int): 116775805629279633859447628917082389865
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ca:43:ec:ec:41:5d:5c:4b:72:f1:49:b1:e7:b5:b7:1e:47:16:ff:d9
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd

Fingerprint (sha1): 9e:3c:7e:66:d3:19:61:b3:2f:b5:fc:3a:a8:19:31:67:df:46:83:2d
Fingerprint (sha256): 68:a1:f6:02:92:3d:4c:59:6c:59:77:ca:a9:67:0f:da:82:ac:b1:40:27:0c:c0:c5:20:0d:59:26:8b:4d:83:b9

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL

Check the revocation status for certificate *.lifestories.world

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lifestories.world

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lifestories.world
lifestories.world

Other certificates including the domain name lifestories.world

(limited to 100 certificates)
*.lifestories.world
*.lifestories.world
lifestories.world
*.lifestories.world
lifestories.world
lifestories.world
*.lifestories.world

Certificate

The complete raw certificate details for *.lifestories.world in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN7adyW+VJu3HcNbvMuv
v5wg8slwK2MBXO5MFNcfThZkRZCI2MH0haMmAWGHuqhUQI9fAWVi+QDptJay+PH0
urGPlPi02/G+vAY70xwT/xDW+/Z+zRx9KewC/GAnEwncazZgRSzzWRrIEnNTNlvc
mtBhid11Wnfl3CPgO9CjY73CwF4xlpUCNXNiYxsk6ZcKufInYQN5ArDpn6Rhqysu
nf779v3yWhWMyfHdpGzMOsAjz5q9QkbDelB7X2M1NxXYhC4nrvF8F5aX3ObJ0zTX
lUTRNXLewbR0Pd3BDQf00nM1EU8FTgTy7j8H+ulc0rYtvtRSSuMMDtCjBHSkl0kW
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116775805629279633859447628917082389865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 10:15:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 10:15:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lifestories.world'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24347647651202125332392239934613600337101845710897111396405804982213718015167638499709790232015565658656919282345736660074272337146100005222123838898452645282966561342523972910603316030827538150442386368928273503539708787495452541459245821451121358207048053443322169854115291390393583829706094798406524031035617522951161850788934486468909000987350817289289506642351209685311305708952914034262159063143111106799831955386013048827449997452793032419786036210281913804237908600903880729160291780992014941514621215425433801463683041055437668255180559790713210239848806476497622003575945057048195223677003474797888245667537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifestories.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestories.world'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca43ecec415d5c4b72f149b1e7b5b71e4716ffd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016abb0622f900000403004730450221008149d6d8106cdae83e2c3f07d88fb26018e8478190fe95def7fc70bbdb1f34070220208e08228654abcd8dccfa8456d241c351b28ba0128f45ea97b6fce4f771a2d3007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016abb06206f0000040300473045022100a73b44410303577531ee96430de4663e8f2ed23d8d7c7f73c1c9498c90214e84022002cc87f50f3d592153046545b72eb384ad5d8f78bb2406f273020fc705b00170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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