authtest.izs.it

- IZSAM G. CAPORALE -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d0:bf:a3:d7:67:ca:42:a6:4e:d2:a6:d5:95:77:8b:16 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IZSAM G. CAPORALE

Organization: IZSAM G. CAPORALE
State / Province: Teramo
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): d0:bf:a3:d7:67:ca:42:a6:4e:d2:a6:d5:95:77:8b:16
Serial Number (int): 277474474922184463201340747671747922710
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f6:19:a1:09:4b:f3:b3:74:73:0d:3d:ef:f2:03:cd:f5:90:0e:59:15
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 4f:be:3e:a8:08:8f:eb:48:5f:d6:f2:7b:55:38:b0:1e:5c:c9:b1:84
Fingerprint (sha256): 6c:58:2b:28:9e:ea:14:0e:97:af:ba:01:bd:dc:ab:0b:d7:25:bd:bb:1c:f9:2d:e2:e5:9d:ae:a5:c1:30:2b:bc

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate authtest.izs.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for authtest.izs.it

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

authtest.izs.it

Other certificates including the domain name izs.it

(limited to 100 certificates)
biblioteca.izs.it
protocollo.izs.it
sptest.izs.it
redmine.izs.it
silabsicilia.izs.it
brucellosis2020.izs.it
*.izs.it
westnile.izs.it
lnr.izs.it
silabsicilia.izs.it
bdrizsam.izs.it
wstest.izs.it
ctxstorefront.izs.it
ucc.izs.it
auth.izs.it
csa.izs.it
demetra.izs.it
xapp.izs.it
cartaittica.izs.it
demetra.izs.it
xapp.izs.it
msrc0818.izs.it
sharelock.izs.it
bluetongue.izs.it
genpat.izs.it
epiexplorer.izs.it
bluetongue.izs.it
easyvista.izs.it
epiexplorer.izs.it
silabsicilia.izs.it
portale.izs.it
izsbox.izs.it
zmail.izs.it
wstest.izs.it
cohesive.izs.it
bdrizsam.izs.it
portaledeldipendente.izs.it
sptest.izs.it
bancabioreagenti.izs.it
attivitadiagnostica.izs.it
bibliotecadelmare.izs.it
anagrafe.izs.it
lnr.izs.it
attivitadiagnostica.izs.it
biblioteca.izs.it
ctx.izs.it
wstestmef.izs.it
geoportale.izs.it
webgis.izs.it
bluetongue.izs.it
easyvista.izs.it
silabsicilia.izs.it
talk.izs.it
veterinariaitaliana.izs.it
silabsicilia.izs.it
www.izs.it
servizi.izs.it
biblioteca.izs.it
onlyoffice.izs.it
www.izs.it
geovet2023.izs.it
zmail.izs.it
hermesproject.izs.it
bioinfoweb.izs.it
portaledeldipendente.izs.it
bancabioreagenti.izs.it
www.demetra.izs.it
intranet.izs.it
portale.izs.it
demo.izs.it
izsboxsicilia.izs.it
portale.izs.it
authtest.izs.it
anagrafe.izs.it
demetra.izs.it
opac.izs.it
servizi.izs.it
biblioteca.izs.it
test.cloud.izs.it
fad.izs.it
ctx.izs.it
geoportale.izs.it
proveinterlaboratorio.izs.it
silabsiciliab.izs.it
te-1.cloud.izs.it
westnile.izs.it
wsmef.izs.it
geoportale.izs.it
auth.izs.it
sptest.izs.it
proveinterlaboratorio.izs.it
fad.izs.it
mobile.izs.it
farmaco.izs.it
farmaco.izs.it
dr-1.cloud.izs.it
www.demetra.izs.it
api.cloud.izs.it
zmail.izs.it
bioinfoweb.izs.it

Certificate

The complete raw certificate details for authtest.izs.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277474474922184463201340747671747922710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Teramo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IZSAM G. CAPORALE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'authtest.izs.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4685558494444730594308292088373923038786080653186558239577490777686151649511855568794976720734088537087046645294627713898819488585756858448132848768681321550101555189416432066402110291452172546260938733087126181241452981421799199287627058774915748520671656457196564159321649811841084663866425848594617187005289393068563355843669277819345561275189829684795110437321561186875740966068292291793889406083496860290511944253528141660598590096142598401168217737558289309885614646189162944512807229912708482838588846168775491259896826910407932189647403865408215983801798512084158699141480654413576065321842241362345866950895157015714668286386934532616475680364461667863529693564280360229762191688534534281493943936039154387584592535555529166656758684828380072993972511316800648769462023091495022411904006537865075129423586033917668195677737045648504002474945008311300184772550936817311407357334187540608247971181806368377985336168233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f619a1094bf3b374730d3deff203cdf5900e5915
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authtest.izs.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003f6230a8ac00071b54bffa4f08afc22dea24562f93f12b3ee379688ff8b7851a1d672a55c17ac5d097a313390c876a16469cf046c46411aa418ed9edab9416ab0dbb647113c6ebab0c9178d248bcb4c299064caf2de890828f909c773a9146316c0c0c26d5076fe8377f5cc49d574466786aacca8ca3f211b90af750dc5aaf94042996581517c8ea4dc577dff84aeefd2fe05e16b231eddb7fe67a1d288354bd788f65b20519b6074e8dc8cc716e5d85c7c6d8e605f3e66ac4207bc8ba6fa30884832ae8084226d695017be2c5e417bb2b016ffd52298c988b58332d22e46fa5ffb191138f5c9cadd8fe824defa1d45c5da232a13a0a2fefb7c2ec920d361ff2a0863d2efb0fd37880ce77836b16765af618a62a43562a2e5ce1b4b65d83e2dac7308562d0d26b34e529fed8c22517e09eba592b6da67ec514db3568fe202d3014b1ebd5d80868584064a58b68744848db778655d00fdd805ef1b343479d742b0941283326ea95c4e2b0cbffe8d30d4f8b2c94e665bb019fbbc14263fad85fc4cc83f2412df9a38757f1525b250706ecdd4e5c017e9968ac251024c851ed6f7731145b91efec807a6fb2b5bfa6fbaa3f0db83773d9ca389dfe7b9370cef2ab1140ab6e122217ce4aaef289ce2ac7c9c28d5cf85d69cf72210dc100a4d7a0d1ebc41ee9dbf5a9a0d507f4eba6ab9ffeff9d004d42eaf6a3579cf167ec694080a0