*.mis.mediobanca.com

- MIS -

Issued by GlobalTrust Certification Authority

About this certificate

This digital certificate with serial number 91:d1:8c:8f:e5:93:4c:a7:49:95:69:89:c2:07:ec:17 was issued on by GlobalTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MIS

Organization: MIS
Organization unit: Operation
Organization unit: Provided by Mediobanca Innovation Services S.C.P.A
Organization unit: Real Web Wildcard
Address: Via Siusi 7
Postal code: 20132
State / Province: Milan
Locality: Milan
Country: IT

GlobalTrust

Organization: GlobalTrust
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 91:d1:8c:8f:e5:93:4c:a7:49:95:69:89:c2:07:ec:17
Serial Number (int): 193826100370268472649407115771295296535
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ee:b5:ed:e8:c5:0b:51:f0:c8:52:b3:db:68:9b:84:f0:29:1a:b5:d9
AuthorityKeyId: 56:fb:db:24:a8:5a:c1:b6:8a:3e:44:73:3d:d1:2a:43:23:15:06:b6

Fingerprint (sha1): 8b:34:4c:52:9d:39:5b:af:be:a9:29:5b:00:b3:68:8b:66:c4:6d:6f
Fingerprint (sha256): 9a:36:65:01:1b:fa:3a:5c:3f:f0:18:e9:2d:eb:53:f6:73:b4:ff:6d:f1:ce:1f:e0:43:48:66:08:fa:f1:b4:d2

Issuing Certificate URL: http://crt.globaltrust.it/GlobalTrustServerCA.crt
Issuing Certificate URL: http://crt2.globaltrust.it/GlobalTrustServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.globaltrust.it/GlobalTrustServerCA.crl
CRL Distribution Point: http://crl2.globaltrust.it/GlobalTrustServerCA.crl

Check the revocation status for certificate *.mis.mediobanca.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mis.mediobanca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mis.mediobanca.com
mis.mediobanca.com

Other certificates including the domain name mediobanca.com

(limited to 100 certificates)
*.mediobanca.com
www.in.mediobanca.com
mediobancasustainablefinancehub.mediobanca.com
vdi.mediobanca.com
www.in.mediobanca.com
abaco.mediobanca.com
www.in.mediobanca.com
lifetime.mediobanca.com
lifetime-prd.int.mediobanca.com
lm.mis.mediobanca.com
events.mediobanca.com
mediobanca.com
www.mediobanca.com
*.int.mediobanca.com
mediobanca.com
*.int.mediobanca.com
*.mis.mediobanca.com
*.mis.mediobanca.com
xpise01.mis.mediobanca.com
mediobanca.com
mediobanca.com
intunegwexc.mis.mediobanca.com
www.mediobanca.com
digiventsm1.mediobanca.com
*.mis.mediobanca.com
idgfunc.mis.mediobanca.com
intranetmb.mediobanca.com
*.mis.mediobanca.com
research.mediobanca.com
xpise01.mis.mediobanca.com
xpise02.mis.mediobanca.com
dbw-fmipoc.mis.mediobanca.com
idgtoc.mis.mediobanca.com
events.mediobanca.com
*.mis.mediobanca.com
www.mediobanca.com
vdi.mediobanca.com
*.mis.mediobanca.com
board.mediobanca.com
*.mediobanca.com
mediobanca.com
idgtoc.mis.mediobanca.com
aodocs.integration.mediobanca.com
mdm.mediobanca.com
www.mediobanca.com
archiviostorico.mediobanca.com
abaco.mediobanca.com
intranetmb.mediobanca.com
lifetime-svi.int.mediobanca.com
eap01.mediobanca.com
lifetime.int.mediobanca.com
mediobanca.com
archiviostorico.mediobanca.com
lifetime-col.int.mediobanca.com
mxm.mis.mediobanca.com
aodocs-cert.integration.mediobanca.com
www.in.mediobanca.com
lm.mis.mediobanca.com
aodocs-cert.integration.mediobanca.com
xpise02.mis.mediobanca.com
mediobanca.com
www.in.mediobanca.com
*.mediobanca.com
idgfunc.mis.mediobanca.com
*.mediobanca.com
lifetime-svi.mediobanca.com
aodocs.integration.mediobanca.com
ndes.mis.mediobanca.com

Certificate

The complete raw certificate details for *.mis.mediobanca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XXAdy8K3kjEEGXftuzR
HH97hVVt8KE/RNAeeaWeCFHYUMnBmPDKts3GXO4Nmx/cj5SuxJPLBke/pBGUM6lz
uyNuXmtupd+4J3PVaY5tGdapi93CWKXsOvXTfHJXkSb+IBlKupYXtpBuTV7faGrO
KHRRXGAWDphAVrdpu3Z2qdNVVgQy7x6lcBsuTjNVANEltxI2YlcJoisyQmQLF+91
+TGGq0rBLdEg0JIqyVYiEgkLdslrdeFlUMSPnZmxGKCG5wdAn7KDFX9XTbdnK4NU
QCUbjylUTIdmmAI1Qr35tnp/V/kfZmK3e0AMX1jZeYoh0bpqoW8XBTNImh64mIYf
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 193826100370268472649407115771295296535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalTrust Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20132'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Via Siusi 7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Mediobanca Innovation Services S.C.P.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Real Web Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.mis.mediobanca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27956730983384563047459120701788422880520126289366940671591705017293251103867921744074803685917885870662086493314710939795853766928941555378166043212729270348728190605314122772135348698962000802373812597064069153497042531588776984567556602645538416793818227328092899216902528632418758590488673997135831289260481596807207715502246703490593919449807097157924940446475743669848355365917091614454704748778012655899837154139671282048400192622884618348069371368678699705203035862346646299228087934160197716014307768444805844027492351100132458988783289274347942916453192248213677357363854036087398505375699818268641125080867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 56fbdb24a85ac1b68a3e44733dd12a43231506b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eeb5ede8c50b51f0c852b3db689b84f0291ab5d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globaltrust.it/resources/legaldoc/cps/index.aspx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globaltrust.it/GlobalTrustServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.globaltrust.it/GlobalTrustServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.globaltrust.it/GlobalTrustServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt2.globaltrust.it/GlobalTrustServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mis.mediobanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mis.mediobanca.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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