online.unicreditcorporate.it

- Unicredit S.p.A. -

Issued by Actalis Authentication CA G3

About this certificate

This digital certificate with serial number 18:30:a3:86:14:25:71:16 was issued on by Actalis S.p.A./03358520967.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Unicredit S.p.A.

Organization: Unicredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Milano
Locality: Milano
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 18:30:a3:86:14:25:71:16
Serial Number (int): 1743072852051325206
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 09:7e:dd:aa:ad:d5:01:33:35:62:42:25:db:d9:b0:1f:49:65:6d:8f
AuthorityKeyId: aa:aa:fd:ca:8c:1d:4d:f1:2e:83:e1:06:fc:fa:8e:ea:0e:23:ae:3d

Fingerprint (sha1): 34:fe:6b:17:6e:06:53:33:56:7f:9c:6f:1a:bb:0c:29:69:49:85:84
Fingerprint (sha256): 75:9e:ab:1f:b8:5b:36:06:e0:d3:fa:a6:64:ce:b4:c3:1d:db:0f:6f:5f:90:69:38:10:d7:6b:e7:08:48:de:d9

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autg3

Revocation information

OCSP Server: http://ocsp03.actalis.it/VA/AUTH-G3
CRL Distribution Point: ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL

Check the revocation status for certificate online.unicreditcorporate.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.unicreditcorporate.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.unicreditcorporate.it

Other certificates including the domain name unicreditcorporate.it

(limited to 100 certificates)
online.unicreditcorporate.it
finance.unicreditcorporate.it
unigeb.unicreditcorporate.it
finance.unicreditcorporate.it
www.unicredit.it
unigeb.unicreditcorporate.it
unigeb.unicreditcorporate.it
www.unicredit.it
unigeb.unicreditcorporate.it
finance.unicreditcorporate.it
online.unicreditcorporate.it
online.unicreditcorporate.it
www.unicredit.it
online.unicreditcorporate.it
unigeb.unicreditcorporate.it
online.unicreditcorporate.it
unigeb.unicreditcorporate.it
www.unicredit.it
unibanking-test.unicreditcorporate.it
online.unicreditcorporate.it
unigeb.unicreditcorporate.it
unigeb.unicreditcorporate.it
online.unicreditcorporate.it
unigeb.unicreditcorporate.it
online.unicreditcorporate.it
online.unicreditcorporate.it
finance.unicreditcorporate.it
unigeb.unicreditcorporate.it
www.unicredit.it
www.unicredit.it
finance.unicreditcorporate.it
unigeb.unicreditcorporate.it
unigeb.unicreditcorporate.it
online.unicreditcorporate.it
online.unicreditcorporate.it
online.unicreditcorporate.it
online.unicreditcorporate.it
unigeb.unicreditcorporate.it
online.unicreditcorporate.it
www.unicredit.it
online.unicreditcorporate.it
unigeb.unicreditcorporate.it

Certificate

The complete raw certificate details for online.unicreditcorporate.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIIGDCjhhQlcRYwDQYJKoZIhvcNAQELBQAwezELMAkGA1UE
BhMCSVQxDzANBgNVBAgMBk1pbGFubzEPMA0GA1UEBwwGTWlsYW5vMSMwIQYDVQQK
DBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzElMCMGA1UEAwwcQWN0YWxpcyBB
dXRoZW50aWNhdGlvbiBDQSBHMzAeFw0xNjEyMjAxMTE2MjZaFw0xNzEyMjAxMTE2
MjZaMHExCzAJBgNVBAYTAklUMQ8wDQYDVQQIDAZNaWxhbm8xDzANBgNVBAcMBk1p
bGFubzEZMBcGA1UECgwQVW5pY3JlZGl0IFMucC5BLjElMCMGA1UEAwwcb25saW5l
LnVuaWNyZWRpdGNvcnBvcmF0ZS5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKsXgw7RsZPpI135N68fC4evD7gJY7U2K8g6demm18Fd7z5DktILsQkx
8dx7Hqarm6Qoc05H4Zc78SeKHGndmVvQUtWRMK1Lq4H7ZP7lTp/A6KRlTqgUSh7J
FxT/mah15hNrLibld0G2pOWx67kjtnCp2IvWO0MnKB9c3WcEna7qwKy35i1wIzAf
4NtEgQTKkRM2nfmJtxzneD33Mk+VfvrLc/9NNK7P4HodYbff3tFDZ0+IYEqOohoL
WnNQiIFNqJp7DPXtuTHfL1Qy5DDCLwxArJcvdU4cidKmsbpN600jMSs/nksGR6k+
xHQ2wEu+kI0nNCBEdi14Wpkl9ARey4sCAwEAAaOCAmkwggJlMHkGCCsGAQUFBwEB
BG0wazA4BggrBgEFBQcwAoYsaHR0cDovL2NhY2VydC5hY3RhbGlzLml0L2NlcnRz
L2FjdGFsaXMtYXV0ZzMwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwMDMuYWN0YWxp
cy5pdC9WQS9BVVRILUczMB0GA1UdDgQWBBQJft2qrdUBMzViQiXb2bAfSWVtjzAM
BgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFKqq/cqMHU3xLoPhBvz6juoOI649MGAG
A1UdIARZMFcwSwYGK4EfARQBMEEwPwYIKwYBBQUHAgEWM2h0dHBzOi8vcG9ydGFs
LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9Qb2xpY3kvU1NML0NQUzAIBgZngQwBAgIw
gd8GA1UdHwSB1zCB1DCBlKCBkaCBjoaBi2xkYXA6Ly9sZGFwMDMuYWN0YWxpcy5p
dC9jbiUzZEFjdGFsaXMlMjBBdXRoZW50aWNhdGlvbiUyMENBJTIwRzMsbyUzZEFj
dGFsaXMlMjBTLnAuQS4lMmYwMzM1ODUyMDk2NyxjJTNkSVQ/Y2VydGlmaWNhdGVS
ZXZvY2F0aW9uTGlzdDtiaW5hcnkwO6A5oDeGNWh0dHA6Ly9jcmwwMy5hY3RhbGlz
Lml0L1JlcG9zaXRvcnkvQVVUSC1HMy9nZXRMYXN0Q1JMMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwJwYDVR0RBCAwHoIcb25s
aW5lLnVuaWNyZWRpdGNvcnBvcmF0ZS5pdDANBgkqhkiG9w0BAQsFAAOCAQEAoAPL
tO+a9anhXf0LpjN9tRhOt15aNWHioLKsFEKOkofUEoqWD6x3o6/BaTd4TNIT5eTW
Wu9GXOYFj7Lew6U1Z4XIsPXe8A6had0LaGGioRNlHvuLiCqznZUPijqFuJAGfRpi
dYhlkfzhH1yjqZIZNQWdpRml+XO9u9xJFZKHgYBpQgxZ66L7LaLHR7nBWgxT9/vX
Y5iHoktrHKUJQa2Ob2Gpubi05j7AAFRnfR9Mjlv+mAwpoxhE4YDJIb2LAZcEydir
+HIwDdO84BXnuu0Ig0B2oqhmR2Jl15H0rTuybt7YEhZ1mnTemMT9iRPNysYNImhu
x34XjJwumQPqq5igMA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxeDDtGxk+kjXfk3rx8L
h68PuAljtTYryDp16abXwV3vPkOS0guxCTHx3HsepqubpChzTkfhlzvxJ4ocad2Z
W9BS1ZEwrUurgftk/uVOn8DopGVOqBRKHskXFP+ZqHXmE2suJuV3Qbak5bHruSO2
cKnYi9Y7QycoH1zdZwSdrurArLfmLXAjMB/g20SBBMqREzad+Ym3HOd4PfcyT5V+
+stz/000rs/geh1ht9/e0UNnT4hgSo6iGgtac1CIgU2omnsM9e25Md8vVDLkMMIv
DECsly91ThyJ0qaxuk3rTSMxKz+eSwZHqT7EdDbAS76QjSc0IER2LXhamSX0BF7L
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1743072852051325206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Authentication CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 11:16:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-20 11:16:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Unicredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'online.unicreditcorporate.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21598344321333004089641299996987278554221826032332612570785393040227073492582153095686807246528088950930384263275550506578886051666082087052285825083821360432329351499559766831346984925529758847965574474237058427623414742002462160435682325924832369217931959053457888831228753345431906171898643980026558649424307831465896311085836431917438265117924532546933720603515122165527752045396609930997563119399997505549740897187136475419381525871406286948031961661809421501889731266661378091777943397868668879442773982796708389140367637504104922781036013611570577270422231947508894130261619295291993558219526967236371951831947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp03.actalis.it/VA/AUTH-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							097eddaaadd5013335624225dbd9b01f49656d8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aaaafdca8c1d4df12e83e106fcfa8eea0e23ae3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://portal.actalis.it/Repository/Policy/SSL/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.unicreditcorporate.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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