gestionemail.pec.pasiandiprato.net

Issued by Actalis Domain Validation Server CA G2

About this certificate

This digital certificate with serial number 38:5b:3c:47:9e:87:66:bd:31:b5:f3:e9:5a:44:e9:3d was issued on by Actalis S.p.A./03358520967.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gestionemail.pec.pasiandiprato.net,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 38:5b:3c:47:9e:87:66:bd:31:b5:f3:e9:5a:44:e9:3d
Serial Number (int): 74910489396920037518621292212584245565
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 36:c2:80:e5:a4:36:5e:e4:25:dc:d4:7a:e6:c2:3f:38:ed:a2:17:fa
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd

Fingerprint (sha1): 52:06:fe:dd:e3:90:b9:0b:80:c2:22:ce:83:13:d4:ed:e1:14:be:28
Fingerprint (sha256): 75:2f:92:14:77:da:ce:0f:8e:c0:c3:a8:e5:bb:c8:0a:a1:70:8e:3b:da:e2:8a:fd:dc:7f:ac:24:b0:e5:9c:a4

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL

Check the revocation status for certificate gestionemail.pec.pasiandiprato.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gestionemail.pec.pasiandiprato.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gestionemail.pec.pasiandiprato.net

Other certificates including the domain name pasiandiprato.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for gestionemail.pec.pasiandiprato.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AEBOM8csPRaSpspvMcb
SkNC9wJjm0XD2bYbB+4hlY6FOZ4kQmMWugwKamBn+aTOgN+co9zgVQFpxwZkaOsh
ywftHM5T9zeXZvvAp6Wqbg417xV6YST6qMPmcrPfsG5R0uDK81aYtKskIjhwjBKf
6C8ppM/n+lR01HyXm/fmoJpVjL3LxYCPX7OMH09wWFmxpZx6rZWLXfO9jcthbDFc
ye9H6F6T6AGwoMwzeAP0zQ/7+071HQLaX3nyAEUGom33TzCeSEY3oI301PBqlfnP
T9njC+JWcmK/vJqZm/nPxpnKj0LF/d5rn/tvxSCRQo6b/+ZEkxufaJhI1YIMQ+Tb
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74910489396920037518621292212584245565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 14:57:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 14:57:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gestionemail.pec.pasiandiprato.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26763016124880139155209280857699646209352786607687842828062524864145811361912743001494353056303055304724093105155729847978440621130675659768212345024604902443193222308258778187602994270581314030092460594132555806944767805744175708215623063077872880947060754889025609426524398214910041719373797280245590068037730591693686838500474524647509430193659265100956902838695089073224923777292451945883030405809004814946081469749122562198177725472792488192463358609860198644546796282336898863369134476124538729824732687962326887142468174355297740711279556081182965311804009073227957853203469571169551565737787818338796978887473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionemail.pec.pasiandiprato.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36c280e5a4365ee425dcd47ae6c23f38eda217fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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