heracomm.gruppohera.it

- HERA S.p.a. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:f3:37:f7:04:64:c7:94:70:fc:cd:a2:e2:f9:52:4c was issued on by DigiCert Inc.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HERA S.p.a.

Organization: HERA S.p.a.
State / Province: Emilia-Romagna
Locality: Bologna
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f3:37:f7:04:64:c7:94:70:fc:cd:a2:e2:f9:52:4c
Serial Number (int): 14555143197717238818372349401616699980
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:c6:44:de:0b:6a:3b:cc:fb:79:86:9b:6b:ec:88:3c:e5:f6:86:87
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): fd:83:79:df:2e:a4:e0:b3:1b:c0:81:e4:64:03:34:84:da:f6:0e:63
Fingerprint (sha256): 74:2d:c1:8f:a8:dc:a7:3a:17:5b:c8:91:f8:eb:f5:f7:22:5f:61:47:b9:24:ff:e1:8e:19:59:7c:38:8f:6b:ca

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate heracomm.gruppohera.it

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heracomm.gruppohera.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heracomm.gruppohera.it
www.heratech.it
www.gruppohera.it
cmvenergia-dev.gruppohera.it
www.heratrading.eu
auth-cmvenergia.gruppohera.it
auth-www.gruppohera.it
heracomm.com
eng-test.gruppohera.it
www.rifiutologo.gruppohera.it
auth-heracomm-marche-dev.gruppohera.it
bs.gruppohera.it
auth-heracomm-marche-test.gruppohera.it
www.ilrifiutologo.com
auth-eng.gruppohera.it
www.gruppohera.eu
www.rifiutologohera.it
heracomm-marche.gruppohera.it
heracomm-marche-dev.gruppohera.it
www.heraspa.eu
auth-heracomm-dev.gruppohera.it
cmvenergia.gruppohera.it
auth-cmvenergia-test.gruppohera.it
heracomm-nordest-dev.gruppohera.it
auth-heracomm-nordest-dev.gruppohera.it
halfresults.gruppohera.it
be.gruppohera.it
auth-eng-test.gruppohera.it
www.ilrifiutologo.net
www-test.gruppohera.it
smarthera.it
auth-www-test.gruppohera.it
www-dev.gruppohera.it
auth-cmvenergia-dev.gruppohera.it
auth-heracomm.gruppohera.it
cmvenergia-test.gruppohera.it
amga.gruppohera.it
heracommmarche.gruppohera.it
heracomm-marche-test.gruppohera.it
www.smarthera.it
insieme.gruppohera.it
auth-amga-dev.gruppohera.it
amga-test.gruppohera.it
auth-heracomm-nordest.gruppohera.it
auth-heracomm-test.gruppohera.it
auth-amga.gruppohera.it
amga-dev.gruppohera.it
www.gruppohera.com
heracomm-test.gruppohera.it
www.ilrifiutologo.it
heracomm-nordest.gruppohera.it
auth-www-dev.gruppohera.it
eng.gruppohera.it
heracomm-nordest-test.gruppohera.it
auth-amga-test.gruppohera.it
www.heracomm.com
heracomm-dev.gruppohera.it
auth-heracomm-nordest-test.gruppohera.it
auth-eng-dev.gruppohera.it
auth-heracomm-marche.gruppohera.it
eng-dev.gruppohera.it

Other certificates including the domain name gruppohera.it

(limited to 100 certificates)
heureka.gruppohera.it
*.gruppohera.it
gepeweb.gruppohera.it
heureka.gruppohera.it
incapsula.com
*.mobility.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
incapsula.com
incapsula.com
heureka.gruppohera.it
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
heureka.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
webmail.gruppohera.it
heureka.gruppohera.it
heraricarica.gruppohera.it
offerte-heracomm.gruppohera.it
akamai-san122.exacttarget.com
ragazzi.gruppohera.it
indicienergetici.gruppohera.it
www.gruppohera.it
incapsula.com
incapsula.com
pasemplice-tst.gruppohera.it
incapsula.com
incapsula.com
mobile.gruppohera.it
incapsula.com
sts.gruppohera.it
eng.gruppohera.it
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
eng.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
www.gruppohera.it
incapsula.com
www.minidot.be
heureka.gruppohera.it
servizionline.gruppohera.it
www.gruppohera.it
heracomm.gruppohera.it
incapsula.com
offerte-heracomm.gruppohera.it
*.gruppohera.it
akamai-san122.exacttarget.com
sip.gruppohera.it
www.admin.k-9access.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
heracomm2.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
servizionline.gruppohera.it
incapsula.com
click.contatti.gruppohera.it
incapsula.com
*.gruppohera.it
www.gruppohera.it
servizionline.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
ragazzi.gruppohera.it
app.paymytable.com
incapsula.com
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
*.mobility.gruppohera.it
sts.gruppohera.it
heracomm2.gruppohera.it
*.gruppohera.it
incapsula.com
heraricarica.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
beam.gruppohera.it
heracomm.gruppohera.it
incapsula.com
games.gruppohera.it
beam.gruppohera.it

Certificate

The complete raw certificate details for heracomm.gruppohera.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Dzy79ydkzWeYsI5JRS
ZrBmpNl7Co8zzy+bmVRAEcBO2Vgp/92Tp/k49QRJjME0n10j1EDl8hwYmp9lUm8a
M/IFCRJJ0kPlyMdclDab53sZriTR5lCmf/9XE1uEgy+x/jy9gUKZpSKBftf/r0XX
RJ7OxgxF+G3LzRgQMkZu+bsbDgf6eVg0cWX+GyfnRd3B8ic9VeUlSh8NatAGpCq3
TJfVKy4v+r9gdHPboQBfGEgM1g4joFM/sBU+PBwnyi+pQUzDsNyNGIEjNpirdL9F
ZnbVcIs6F2BDjipnvtTGdkA3Xln2QZqm3fEDHabgesH474FVj/sB3mMBkbs/zxzS
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14555143197717238818372349401616699980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Emilia-Romagna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HERA S.p.a.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heracomm.gruppohera.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24735287489576287344279761961435009013529048129218511400252077271236447139867867242692423529180039777832578506007987305179602876015118845337136556070854158034482929318083523380107544272662751553723277420007338714879392704782459905544676466888340766665517045110034195132499031893318670781665980200144792880301815109941473417841226681194878015476771901394477740111182536434335745806361024161824317813903499088428813954795917715936933332677614751795933922389649195943912324454574076262265167350853979169979025550793424925692000207699754267465947920134411443886226291600338044512239916069504560450473647780481778778428117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1c644de0b6a3bccfb79869b6bec883ce5f68687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heratech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvenergia-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heratrading.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-cmvenergia.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-www.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifiutologo.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-marche-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bs.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-marche-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilrifiutologo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-eng.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruppohera.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifiutologohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-marche.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-marche-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heraspa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvenergia.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-cmvenergia-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-nordest-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-nordest-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfresults.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-eng-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilrifiutologo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarthera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-www-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-cmvenergia-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvenergia-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amga.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracommmarche.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-marche-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smarthera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insieme.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-amga-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amga-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-nordest.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-amga.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amga-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruppohera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilrifiutologo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-nordest.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-www-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-nordest-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-amga-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heracomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heracomm-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-nordest-test.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-eng-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-heracomm-marche.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng-dev.gruppohera.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006023839a355b018e76d4c3a618c31675e3bda882d11af71f2eca86329e2b8ad41cf41e6d53fda0e5c9b0db233edaa345c275f9cbeeb1168220e89160c575c78ab75629fe949f57216dd4004f740798340d10cccc8782229f7d5b471b9aa73c67cc1c5e3f76fa7252fe97867d7333c807e88c497a07ae060f016a3e1d6b2132a34cfcd98d4cc20f59a439c35b97ff4aaf721d450fbef126a15299ec2597b57765fc9c77ea08613fdabd623e075479ed67ffac1cc6edd08ecb41b484a869d995b2d3e3214ff3bf5f18720b98af6612036aaca3244c30311fc302a08b937951946ff64eedf3020c6e1c689b4894f11018043838997ea6e60c114d21f496ed7135a