*.ricettasalute.it
Issued by Actalis Domain Validation Server CA G2
About this certificate
This digital certificate with serial number 72:aa:b0:c6:7d:50:e0:65:2b:db:28:58:e3:00:45:c2 was issued on by Actalis S.p.A./03358520967.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ricettasalute.it
Actalis S.p.A./03358520967
Organization:
Actalis S.p.A./03358520967
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate has expire since
Certificate Details
Serial Number (hex): 72:aa:b0:c6:7d:50:e0:65:2b:db:28:58:e3:00:45:c2Serial Number (int): 152418267415481150695828429581383124418
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 5e:c6:b1:25:fb:6a:38:52:8e:dc:60:a4:81:a4:a8:23:60:e2:6c:af
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd
Fingerprint (sha1): 8c:fe:3d:45:f8:17:a4:0f:40:fb:30:22:2a:43:6f:03:14:11:9d:63
Fingerprint (sha256): 78:55:43:00:c2:2c:1d:0f:ba:38:5b:41:de:3c:7a:39:22:c0:93:d0:17:3a:15:c4:f9:1b:cf:0d:63:14:30:ca
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2
Revocation information
OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL
Check the revocation status for certificate *.ricettasalute.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ricettasalute.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ricettasalute.it
ricettasalute.it
ricettasalute.it
Other certificates including the domain name ricettasalute.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.ricettasalute.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIQcqqwxn1Q4GUr2yhY4wBFwjANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl IFNhbiBQaWV0cm8xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3 MS8wLQYDVQQDDCZBY3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBH MjAeFw0yMDAzMDcwNTEzMjJaFw0yMTA2MDcwNTEzMjJaMB0xGzAZBgNVBAMMEiou cmljZXR0YXNhbHV0ZS5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANHjVDkgSndBIaQuH48W79rgBnWyQTutH1gh5CNDjw3NODSi/8jFDelcu7NjizPE A+uVuz5IkUnKTG7KWxCPA0xutgE6JFuiaTvJFQUdx9UmPxkAVQXaS3IvyJjSV/ci ov8Y/36hrcIVSVdYE1LWikG15CvJjmgh4v6J26Wy7ktuz/MPiNTHJHeS4VaviXlc u/FKa14svV3KMtqFFUo9DQ5Vg+ozox9CBeWhg6dKYN5X1gBOMd/kBuHT9tWsxVnn KBdjstrxYJnocFNcP/ZRFoni+AptIFAcR3N9h2DE8GVb7M2PV7PjAXK9niIm7rgf fwIE3WohdbnT1L3+95ACoCMCAwEAAaOCA1AwggNMMAwGA1UdEwEB/wQCMAAwHwYD VR0jBBgwFoAU1UAI95YiThmz2uVhk7q6tz7ruc0wfQYIKwYBBQUHAQEEcTBvMDoG CCsGAQUFBzAChi5odHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxp cy1hdXRkdmcyMDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA2LmFjdGFsaXMuaXQv VkEvQVVUSERWLUcyMC8GA1UdEQQoMCaCEioucmljZXR0YXNhbHV0ZS5pdIIQcmlj ZXR0YXNhbHV0ZS5pdDBRBgNVHSAESjBIMDwGBiuBHwEXATAyMDAGCCsGAQUFBwIB FiRodHRwczovL3d3dy5hY3RhbGlzLml0L2FyZWEtZG93bmxvYWQwCAYGZ4EMAQIB MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBIBgNVHR8EQTA/MD2gO6A5 hjdodHRwOi8vY3JsMDYuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FVVEhEVi1HMi9n ZXRMYXN0Q1JMMB0GA1UdDgQWBBRexrEl+2o4Uo7cYKSBpKgjYOJsrzAOBgNVHQ8B Af8EBAMCBaAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AFzcQ5L+5qtFRLFe mtRW5hA3+9X6R9yhc5SyXub2xw7KAAABcLNyr5UAAAQDAEcwRQIgUFvbDGGzTeVR xvh0edhz5HmrEhPQCY48uFYB7mpW/uQCIQCauMxsVWZmAhQB18gOCI7HBjWN8+mR Vtj2lBMeI9CD5wB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAAB cLNyr9YAAAQDAEcwRQIhAOVL7pXvfoDHhplVC9BZ6xyRWWnMffgxNO+o6Ime+9IU AiBur26YnrxACPTtNyL0j8kDGwFo7qip1jKqqMevbSKyXwB2APZclC/RdzAiFFQY CDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABcLNyr4AAAAQDAEcwRQIhAMHd6VQ0vi4j fxN3ysP4sewOVD9fKQTjt63BVceWDmukAiBf16HVVjf6+dIYnARL0lJX6ASvtKZB Gg2zPOx544pYOjANBgkqhkiG9w0BAQsFAAOCAQEAS8m0nPoYakfge+wP6yNNy4kB 1L+P90APsosJit4HKKTFmkOtwI61EoZlGVcGprbr0ItqqdALf6Sn1pdGVHUaea86 3GYDVrHdlV3RRI1B1fWMUHhZrMWzTKVndZxpMMv8ej2zRCOvWLUmtLjrPibFDbYx I7knPSDm07joPKEHXbNF9VQsSoVP1ct3RfFHUigeRUMb17l/fMTcxvkRmQdlqyv5 cziJUCGoxhRu07xPAQN53PjveJxlxEzkmKFiiOtapgmyLsHsrfeUnNoS8k+M7oAf DTrkpOudW7sPT1J08IU1ZaiBDc6zlTpon6b5pKuHTFCCBMLrIZXw+dCAqbz5dw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eNUOSBKd0EhpC4fjxbv 2uAGdbJBO60fWCHkI0OPDc04NKL/yMUN6Vy7s2OLM8QD65W7PkiRScpMbspbEI8D TG62ATokW6JpO8kVBR3H1SY/GQBVBdpLci/ImNJX9yKi/xj/fqGtwhVJV1gTUtaK QbXkK8mOaCHi/onbpbLuS27P8w+I1Mckd5LhVq+JeVy78UprXiy9Xcoy2oUVSj0N DlWD6jOjH0IF5aGDp0pg3lfWAE4x3+QG4dP21azFWecoF2Oy2vFgmehwU1w/9lEW ieL4Cm0gUBxHc32HYMTwZVvszY9Xs+MBcr2eIibuuB9/AgTdaiF1udPUvf73kAKg IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 152418267415481150695828429581383124418 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 05:13:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-07 05:13:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ricettasalute.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26495905844195199273650879186984531503616701236765807284518716567632881528257333491411307384805651169685271501451354019589087767869232944644457863283831390603188956025007920786170593797163026952628871257214355781626486503472544641669200474597219387567430501050943206717704922656814680035200154280982043377327352896328198204831920624696378538638542867335992943588326420738240472179398685180225165937732248183420267842294182571059952709551310803036085401949080671680127115985582010784208719059132401992342863293715076854084942235840051984148694532585757016425065688078387584569178728551287580768282787646736245683560483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ricettasalute.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricettasalute.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ec6b125fb6a38528edc60a481a4a82360e26caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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