www.tecnimont.it

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:59:ff:34:36:0b:8b:7b:f1:89:c1:74:1f:b5:f1:ce:a9 was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tecnimont.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:59:ff:34:36:0b:8b:7b:f1:89:c1:74:1f:b5:f1:ce:a9
Serial Number (int): 374430229999323286830206548841857241173673
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:cc:c0:45:54:68:d3:fd:6c:9e:f1:d8:b5:42:d7:c1:e0:2a:59:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:6c:bd:6b:e2:58:4f:ce:91:30:66:f9:15:5b:a1:0b:b8:66:0c:3f
Fingerprint (sha256): 86:34:7d:54:d2:cf:27:33:fa:2e:41:66:51:c4:33:0d:03:1d:97:fb:b7:78:02:6b:c4:bd:a1:d8:81:cd:91:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.tecnimont.it

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tecnimont.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kt-met.com
mairetecnimont.com
met-development.com
mta-sts.external.kt-met.it
mta-sts.external.mairetecnimontfoundation.com
mta-sts.external.met-development.com
mta-sts.external.mst-italy.it
mta-sts.external.neosiarenewables.it
mta-sts.external.nextchem.it
mta-sts.external.tecnimont.it
mta-sts.kt-met.it
mta-sts.mairetecnimont.com
mta-sts.mairetecnimont.it
mta-sts.mairetecnimontfoundation.com
mta-sts.met-development.com
mta-sts.mst-italy.it
mta-sts.neosiarenewables.it
mta-sts.nextchem.it
mta-sts.resident.kt-met.it
mta-sts.resident.tecnimont.it
mta-sts.sap.tecnimont.it
mta-sts.tecnimont.it
tecnimont.it
www.kt-met.com
www.mairetecnimont.com
www.met-development.com
www.tecnimont.it

Other certificates including the domain name tecnimont.it

(limited to 100 certificates)
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it

Certificate

The complete raw certificate details for www.tecnimont.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WvAv8joGuVqpQ0d0ysO
GG3/Etvb2L/ENIBn7kP6Iia7arBKQ/j+NhKwDfvdV6IhfG6NGAUKXMZufOaLnPMC
vyJX7P0oBdy130iZQnmBsSFf8yrHvG3l1/o+CAMlIclj0fjAYsujBy42ogKEvcFG
OUtDRwjOlkD7P0knWAACW5zrnlKLS+AmRcgUvbCppcaTKvGn1e5IFdQLHFCeANzJ
Q/sjCwC/mTLljDW9pKb20SxZnk+y8VMWRH3tiHH3bMQh1XjX2P1oB2uHkh9rnmWK
akDD/UkgjOpVAllgXHWhOkpQu4VT4FsgtMgvnL87S1sdmKJRYlHRyuFw4/rWBxVB
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374430229999323286830206548841857241173673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 07:36:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 07:36:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnimont.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27951800345875256929446901477446410496155853618522224581324801239345436837511642968750788079723220426314486801431111877348357302742646290836938519121377343397888305351915917875581725400044307431354957918459869962614356249390630623683494927009136628497646743570710859507761679680995406250023405628017107330913026158755029998469376754658058652730839398411579962249562414357361379214819000087519557058925966607587368179283047134604130272366119924625632131449676002247164870258975577819201914202750562572092459821082210847045716753470348932313179688744087087934509277949886215033595621306996462193108357923755920761111017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9ccc0455468d3fd6c9ef1d8b542d7c1e02a5957
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (717 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kt-met.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.mairetecnimontfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.mst-italy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.neosiarenewables.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.nextchem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimontfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mst-italy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.neosiarenewables.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.nextchem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.resident.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.resident.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.sap.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kt-met.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnimont.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184c287f007000004030046304402205f9b2e31f2d8229422cd9fdc28dd106a2ad00e48ccdcc7edccf263fe162c655102206d565ae41ad396a3ac1e32560929435422558da794c3488a6a0e84ff6f3712990076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184c287f2120000040300473045022100efddc3b847b1c1654a66167cdcc9980038795d52c100af497d386a16e7bb52d502202826c3c08524a417622185138247245b072f9ef5e260a5c1cba6b54833ea5aa6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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