pop3s.pec.pasiandiprato.net

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 75:e0:b6:17:4d:75:98:31:45:97:3c:9f:99:9f:83:30 was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pop3s.pec.pasiandiprato.net

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 75:e0:b6:17:4d:75:98:31:45:97:3c:9f:99:9f:83:30
Serial Number (int): 156686443247915069736382061351154975536
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cc:dd:79:47:f4:7d:dc:4b:f7:84:38:f0:87:0d:8e:c8:56:29:d1:84
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): b3:44:50:89:4e:60:18:5b:85:43:29:82:70:9b:ef:27:cf:0f:98:d6
Fingerprint (sha256): 6e:a4:1c:45:65:c8:b2:a3:ad:ce:10:0f:a8:bc:6e:ce:a9:2a:7d:be:19:ec:d3:03:96:88:26:02:78:53:37:1d

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate pop3s.pec.pasiandiprato.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pop3s.pec.pasiandiprato.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pop3s.pec.pasiandiprato.net

Other certificates including the domain name pasiandiprato.net

(limited to 100 certificates)
smtps.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net

Certificate

The complete raw certificate details for pop3s.pec.pasiandiprato.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+tr08PiO/wom8hLJfAO
dz42NA7AbE9a4ZDkWsmlDmVlSdsbvpDZLbLRNQOCNx9kbrLDlUV1MIMNovyECN0x
q9IEGJ4YWxHrPtDnp1MvLW9SMe8Mpe6Y7KQycf8W1d+cUzgdMPv/e8CpaSuxhOkc
coEUXAjqXoSuP0f58fm3zlTKsm+1QR9SxXMm1HEKDC+P8R0JuLpmqWvEkwfAvFmG
2FzA3NtuMoVPMbo7OrhGaorPYIux2LC+dViXxHSODF2S5kKA/9FndS21gJSVDYrA
o2/tD9mDcV53KOityQq5qP/wiU0+EnMG9pWacjkwnFu8jy997R/uoMLwufr1TehI
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156686443247915069736382061351154975536
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:43:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:43:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pop3s.pec.pasiandiprato.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25237513208733446080262138633999483084776155129592516879807937353033470452051613333130644396403430677952467334105886269244914781310637132180390668899861292490554530493386517051789721616924839682705242775752890301525335637303939123390266004972929415192568993569994491862334977484397962327958435543298002761862298668448214155865682524102879214892545534401555749867371375943047307596875346119675580847199363135048015964561805779712754442577808989362217872513166978843712090447788899357557388410855246022172910314902040552296026674186762427971653708960613123890173148193940116526607698342840699519431228941546602717792453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3s.pec.pasiandiprato.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccdd7947f47ddc4bf78438f0870d8ec85629d184
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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