gtwsap.mondadori.it

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:25:06:37:a5:9b:a9:90:cf:47:62:e0:05:76:0a:a8 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gtwsap.mondadori.it

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:25:06:37:a5:9b:a9:90:cf:47:62:e0:05:76:0a:a8
Serial Number (int): 16142977036444550165427395265356499624
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:f0:5a:0c:64:e4:f5:86:a1:27:b8:7e:d0:7d:7b:55:94:18:0c:c4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): da:08:5a:8f:5d:8b:f7:ee:e5:74:34:62:1c:6c:cf:ed:97:a7:8b:5a
Fingerprint (sha256): 71:4b:71:fb:bf:24:0a:b1:6c:bd:05:8f:e0:60:43:1d:8a:e2:c2:ec:1e:5e:fd:04:5e:4f:a1:fc:2f:aa:3d:e3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate gtwsap.mondadori.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtwsap.mondadori.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtwsap.mondadori.it

Other certificates including the domain name mondadori.it

(limited to 100 certificates)
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
svi-dpm.mondadori.it
ptps.stbm.it
servizioarretrati.mondadori.it
ptps.stbm.it
ptps.stbm.it
*.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
vr-voip-expe.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
arretrati.mondadori.it
ptps.stbm.it
servizioarretrati.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
*.mondadori.it
ptps.stbm.it
mondadori.it
mi-voip-expe.mondadori.it
vr-voip-expe.mondadori.it
mi-voip-expe.mondadori.it
digital.mondadori.it
cedolini.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
adfs.mondadori.it
ptps.stbm.it
gtwsap.mondadori.it
ptps.stbm.it
ptps.stbm.it
mi-voip-expe.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
wmail.mondadori.it
*.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
*.mondadori.it
*.mondadori.it
whistleblowing.mondadori.it
librimondadori.mondadori.it
mondadori.it
ptps.stbm.it
arretrati.mondadori.it
vr-voip-expe.mondadori.it
dpm.mondadori.it
mi-voip-expe.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
connect.mondadori.it
servizioarretrati.mondadori.it
adfs.mondadori.it
adfs.mondadori.it
ptps.stbm.it
ptps.stbm.it
adfs.mondadori.it
ptps.stbm.it
*.mondadori.it
*.mondadori.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
ptps.stbm.it
*.mondadori.it

Certificate

The complete raw certificate details for gtwsap.mondadori.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVP3E5NZWaHekRM6SBmC
CQ2g20L+2PAz3R1AwaK5CNj1D6NHvP8d+E0Xqd6t2Ji4vVx2PBtXFjDzw0pk+dyT
Mr9T7UmxOtJzNxUlhlnZ9xEyCm7DNuGaD0J2Vq0jfuw2F2JVohtB88Ic6BfCbdse
vV7Stc2aSUzVIYN3Q8tFWrlUuiNnRe+mpMCelaTbaJzTt4RoQHjW81KN+ErTHqDC
3lwSev54uNFXxonBmB4Opb5NtjZnFZ5AZK19P4lBbtttSSt9i+8vTAds0XPWI61K
OxWfMHSnDxPJO3x1i2WUxTz95FR6vO1TtzCCqP1ccJ3rip+CQ3V45hunK1exRKdl
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16142977036444550165427395265356499624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtwsap.mondadori.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23900444393503364993593394807307982109356118505448449987081305736945827397868404549337722092592403426327930700672573453683569576781742369272195816999916694770272616613345043707835862616208097246057069523669726737798127533228605509492587748727995338142396989275593069115068932990027925461547886932244795261401546857468181415385271425980925810512047151727519140809910818811472525856101554516730086516842427842352106857061530283781052609933421313032824315042461441185089945635990648858625177448767932282617884085639317833478555138725012451445370206971658052417138993815352253394977489275642695897463197641999712749315477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f05a0c64e4f586a127b87ed07d7b5594180cc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtwsap.mondadori.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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