ser.recordati.com

- Recordati Industria Chimica e Farmaceutica S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:c4:f6:e9:d4:ad:5e:8e:f3:a0:61:1d:5c:c5:2e:45 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Recordati Industria Chimica e Farmaceutica S.p.A.

Organization: Recordati Industria Chimica e Farmaceutica S.p.A.
Locality: Milano
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c4:f6:e9:d4:ad:5e:8e:f3:a0:61:1d:5c:c5:2e:45
Serial Number (int): 19631890124006425358720898200521485893
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:58:df:16:81:88:d3:8f:e6:b6:88:c9:ac:07:55:61:64:48:d0:39
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d9:44:66:b6:f5:fe:63:b5:1d:b3:4e:52:91:91:5f:22:a2:2b:67:d7
Fingerprint (sha256): 88:29:ad:3a:9c:8b:2a:74:20:c7:92:3b:eb:b1:f4:4e:8d:7d:0c:b5:c4:29:cc:dd:73:cc:11:ba:94:de:2f:19

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ser.recordati.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ser.recordati.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ser.recordati.com

Other certificates including the domain name recordati.com

(limited to 100 certificates)
ser.recordati.com
access.recordati.com
webmail.recordati.com
minext.recordati.com
serdv.recordati.com
recordati.com
www.recordati.com
adfs.recordati.com
www.recordati.com
www.recordati.com
citrix.recordati.com
www.recordati.com
smtponprem.recordati.com
www.recordati.com
recordati.com
ser.recordati.com
ser.recordati.com
sip.video.recordati.com
skype-sip.recordati.com
schedetecniche.recordati.com
*.recordati.com
serdv.recordati.com
webmail.recordati.com
*.recordati.com
schedetecniche.recordati.com
sip.video.recordati.com
schedetecniche.recordati.com
reportBI.recordati.com
www.recordati.com
recordati.com
www.recordati.com
recordati.com
sip.video.recordati.com
sip.video.recordati.com
*.recordati.com

Certificate

The complete raw certificate details for ser.recordati.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvJJQZnZQ6kY/7b31ObOf
5CjlCCegEz4fxBuqkkF7ZEG7SekQzTclNqZ3WO9Gk9dyvGTf9tZJWZs8IV9heA0f
cdeiu5c+WGJndcXvJKBOhK+wybv1vg+obYdzJTfrwmrb4dRU/TpAt4AWkhzpGaW7
Hyx7hhOAPj3P6CqrOaDzY4NU7pYvzN1A2lTujgyqKIk1fZ2/pIy4tYoXOLrvr6uJ
mqUOGROIgCiw9SP7WeHrLMmqpggrOWD+TfR8L0zaYYRgneDjNMPbtjCNgAZHFATb
N6JZWgz0QL93AY0O5qAizl7akYdKAFIH97CO6eK3LmkAatlqYpy/B0iA6P+L3Ekz
azIK4l0RZJYRMRJgY9hL78wiMB/yGjZUKmJBjQWhv1DsoQOkfJIuza1YQEOVXK1i
0mVKbv64W+TorUjL8Bdg0QJyvJLlbn720mYRkOWBPBcKpS3VBSH0tC2Fxe2IsP4p
53NWkhTN2Y5VdNJYsNRgA3XTebriCCm0IcJH0JUxSqH1TK4Se2wxg4Or3dZwSGG6
mLqx7+R7GRlhfje/wS78MfaioYhxiuzXFVBKYFNRBI7oicXzP50+SILt5kb3bmLg
d4yqN1tbwuKnfEFCVUP3EC043ctHudU6jMokjUEhW5pwUWv+aOk9k2W4u155W+Ty
DKDgtxSjAV6z9UnHeXOqnlcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19631890124006425358720898200521485893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Recordati Industria Chimica e Farmaceutica S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ser.recordati.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769304761744878774958063009236693950587320294331186603112771052626462788436660903769884560773515944471861773370778053392296366371356565096279457526432814920220710841905761099820812385050957334576165094418163396514604682394147724790765780404061013778018673096039497776317902826270228083942205586395968602217032962759503780168554475273135402079328607804207640594042018924170085283779874823929838332795008099945731386238647050561556969652366107919130547538156283153581019469654389012256501679734310439964689381540745759579523630138757513706648409086844303069861982147417266185163467045892466914736069404778899787684635719136448817326654145330729333828787290889578265989392159476785527195682553801939294001620311859969157860960556136493668760715581985804751275895198872776845120458957188566254178781827381638245147688974078954101482852373348154196401594525371670045664386903757519515535196475070718992746069687624128723781027566732230489353206239172139366741467866460011962365908022092654250387567619958227503722209862729736400520936762029978364138556415113778091746880872113531201863986093663642397748163488861631813446489493452880401624532785230439049823691526581160589485580530130430907522377868920678376858507849966790924408363589207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7958df168188d38fe6b688c9ac0755616448d039
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ser.recordati.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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