webmail.pec.pasiandiprato.net

Issued by Actalis Authentication CA G3

About this certificate

This digital certificate with serial number 1d:37:56:14:e9:c8:47:4d was issued on by Actalis S.p.A./03358520967.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Certificate Subject

CN=webmail.pec.pasiandiprato.net,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Milano
Locality: Milano
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:37:56:14:e9:c8:47:4d
Serial Number (int): 2105245998640547661
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: ca:5a:f8:f6:83:29:76:5e:69:f8:d3:10:95:18:1c:8e:ff:27:b0:c6
AuthorityKeyId: aa:aa:fd:ca:8c:1d:4d:f1:2e:83:e1:06:fc:fa:8e:ea:0e:23:ae:3d

Fingerprint (sha1): ce:42:4c:71:bd:97:e2:ee:f4:bb:8e:d4:f3:6e:81:ca:86:12:b5:8b
Fingerprint (sha256): 85:b5:f5:02:a5:8c:59:d7:a9:e8:f0:52:4d:b2:f7:2b:c7:c5:64:c3:43:90:1c:57:f0:cb:88:7d:a1:74:d4:b5


Revocation information

OCSP Server: http://ocsp03.actalis.it/VA/AUTH-G3
CRL Distribution Point: ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL

Check the revocation status for certificate webmail.pec.pasiandiprato.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.pec.pasiandiprato.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.pec.pasiandiprato.net

Other certificates including the domain name pasiandiprato.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for webmail.pec.pasiandiprato.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/2+Goi5gIA1mxYsmXVH
x1xydr3NYS+qCes8vvVw1hA0YotdSBJUNQTz5UUM1OheAbcVG3Merwk6HczhyV2E
eoPFz25p43GJOTwExDCBvc5l1vt69fxcXXWxF44ziRSgxw9aZ0+5l05peYc0TCQG
syORWFdykwjJd8ENnaFWZUvJox5JmrZJHmADntr2PXXAbqPnfoDPPaYcX3enesoH
2HnRKx56SR0Tuk0FDGy6CORdByhIkXP3RIgi45p0+uxpbculOpRQzGrmDtzkrqNG
HBg/XFQ8FtYAkYODy/PiN1WFn4v0LCJ3vcTMmSsRpoSD97PWjGHnOR6yTW9DmbbC
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2105245998640547661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Authentication CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-02 09:43:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-02 09:43:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.pec.pasiandiprato.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21206922065111025938173398065161855903003132547005599488483196215565214940077793477607839213221919325149691651229133871747921754277755090857322862335613271327457507942119048369083265978702166221532996029119564179251824637977901485634374273025446857690731147850002779573014304629101729335512643057955038227237498194960556081571892727080811524863722287363207398719273526093809434919817957342505897529676103580401617245212698842510546594119278445823340940325119282162968466393993237188000856372438610608343136604441860394230213603907367447270442779504085907321307807236187345027619925828075495599257186783079905489240621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp03.actalis.it/VA/AUTH-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca5af8f68329765e69f8d31095181c8eff27b0c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aaaafdca8c1d4df12e83e106fcfa8eea0e23ae3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://portal.actalis.it/Repository/Policy/SSL/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pec.pasiandiprato.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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