www.unicredit.it

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 73:0c:74:fc:e0:1a:fb:ef:0d:9b:cf:e8:07:ac:b2:68 was issued on by Actalis S.p.A..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 73:0c:74:fc:e0:1a:fb:ef:0d:9b:cf:e8:07:ac:b2:68
Serial Number (int): 152925899871935984498893344932191056488
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d1:7b:1c:df:42:5d:fc:ac:07:e2:10:0b:4e:bf:07:f4:52:97:24:88
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 78:89:4a:d5:ae:2e:3d:14:00:ec:8d:95:2f:29:bf:17:6b:a3:76:58
Fingerprint (sha256): 9b:1b:6d:a0:dd:02:b0:d4:5f:24:9c:ec:15:57:ce:10:4a:42:bd:a9:34:06:16:60:c8:4d:76:13:85:f0:41:a9

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate www.unicredit.it

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.unicredit.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.unicreditcard.it
online.unicreditcorporate.it
gdo.unicreditimpresa.it
confidi.unicredit.it
mkt.unicredit.it
unicred.it
www.unicreditfactoring.it
online-private.unicredit.it
www.geticket.it
www.ilmiodono.it
homebanking-ucfin.unicredit.it
www.ucf.it
online-retail.unicredit.it
online-smallbusiness.unicredit.it
geticket.it
unicredit.it
www.unicredit.it

Other certificates including the domain name unicredit.it

(limited to 100 certificates)
gestionedelibere.unicredit.it
www.unicredit.it
processihr.unicredit.it
api.f4p.uat.unicredit.it
res-findata-uj-v3.unicredit.it
content.unicredit.it
www.empbw.unicredit.it
openaccount.unicredit.it
online-smallbusiness.unicredit.it
more.unicredit.it
www.premiocerto.unicredit.it
unica.unicredit.it
tls12.unicredit.it
ebanking.qc.unicreditgroup.de
globe.unicredit.it
akamai-san133.exacttarget.com
assistenza.unicredit.it
ucilearning.unicredit.it
finance.unicredit.it
www.unicredit.it
media.investimenti.unicredit.it
bankingonline-uccmb.unicredit.it
corporateportal.unicreditgroup.eu
mail.unicredit.it
clubgrandiaziende.unicredit.it
msite.unicredit.it
shop.unicredit.it
mbv.unicredit.it
pagamenti.unicredit.it
shop.unicredit.it
m.unicredit.it
trasparenza.unicredit.it
push.unicredit.it
onlineretail.unicredit.it
push2.onemarkets.de
www.circoloUdine.unicredit.it
geb.unicredit.it
unicredit.it
finance.unicredit.it
www.circoloBari.unicredit.it
m-uat.unicredit.it
imprendo.unicredit.it
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
clubgrandiaziende.unicredit.it
lifedesk.unicredit.it
mailing.unicredit.it
www.circoloGenova.unicredit.it
www.landing.unicredit.it
res-findata-m-v2.unicredit.it
guest-wifi-mi.unicredit.it
mlocator.unicredit.it
digital.api.unicredit.it
www.landing.unicredit.it
ebank1.unicredit.it
assistenza.unicredit.it
ucilearning.unicredit.it
dimensionesociale.unicredit.it
mailing.unicredit.it
online-subitobanca.unicredit.it
online-retail.unicredit.it
www.unicredit.it
push2.onemarkets.de
sha2.unicredit.it
www.unicredit.it
corporateportal.unicreditgroup.eu
push.unicredit.it
openaccount-online.unicredit.it
trasparenza.unicredit.it
confidi.unicredit.it
www.buddybank.com
more.unicredit.it
ucilearning.unicredit.it
onlineretailbank.unicredit.it
www.unicredit.it
cyberfunds.unicredit.it
www.unicredit.it
unicredit.it
pagamenti.unicredit.it
newrsvp.unicredit.it
likeu.validazione.unicredit.it
mail.unicreditgroup.eu
click.aziende.unicredit.it
processihr.unicredit.it
onlineretailbank.unicredit.it
private.unicredit.it
online-retail.unicredit.it
www.unicredit.it
www.investimenti.unicredit.it
invoicecomm.unicredit.it
www.landing.unicredit.it
ial.unicredit.it
bankingonline-uccmb.unicredit.it
in-formati.unicredit.it
ebanking.unicreditgroup.de
www.circoloAncona.unicredit.it
mailing.unicredit.it
online-smallbusiness.unicredit.it
confidi.unicredit.it
www.circoloVerona.unicredit.it

Certificate

The complete raw certificate details for www.unicredit.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJJTCCBw2gAwIBAgIQcwx0/OAa++8Nm8/oB6yyaDANBgkqhkiG9w0BAQsFADCB
iTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMTQwMgYDVQQDDCtB
Y3RhbGlzIE9yZ2FuaXphdGlvbiBWYWxpZGF0ZWQgU2VydmVyIENBIEczMB4XDTIz
MDkwODA4MTkzNVoXDTI0MDkwODA4MTkzNVowZTELMAkGA1UEBhMCSVQxDzANBgNV
BAgMBk1pbGFubzEPMA0GA1UEBwwGTWlsYW5vMRkwFwYDVQQKDBBVbmlDcmVkaXQg
Uy5wLkEuMRkwFwYDVQQDDBB3d3cudW5pY3JlZGl0Lml0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAuFj2hMSIwp17OxrdRMAoCmaajo5cJ/IiAdUQoYx+
AteAMJHa45k3l52sAY/imLU1kKezeO5eV7v2CrCUh88+pwSpFaW9Txa6acje+Cn2
h0tFC1Qy5laibuD6ZlvT54J4PZkVeHLFGzbQf+hRIgdj+d/wJak/nlHZcNtNUZ9H
Iwb0NVjvMTO6xe/QkeJZDCz4wcsip8gwU6WGO9VKftpX3T+SsYCKj7xkwvu0rjMA
MMi034F/P0qZeen4YaobHnibv6cgC5gk8cnL5uGR38Jkqk59eu+pKmTsGgX7Lyfa
/rR0r9sCWl0CGIPrwyHbAXaVnT8ftjGhn7VZT1md7g5aawIDAQABo4IEqjCCBKYw
DAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBSfirG18bHegvQnfL6Izd6pQ4GjSzB+
BggrBgEFBQcBAQRyMHAwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jYWNlcnQuYWN0YWxp
cy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGhvdmczMDEGCCsGAQUFBzABhiVodHRwOi8v
b2NzcDA5LmFjdGFsaXMuaXQvVkEvQVVUSE9WLUczMIIBhAYDVR0RBIIBezCCAXeC
F29ubGluZS51bmljcmVkaXRjYXJkLml0ghxvbmxpbmUudW5pY3JlZGl0Y29ycG9y
YXRlLml0ghdnZG8udW5pY3JlZGl0aW1wcmVzYS5pdIIUY29uZmlkaS51bmljcmVk
aXQuaXSCEG1rdC51bmljcmVkaXQuaXSCCnVuaWNyZWQuaXSCGXd3dy51bmljcmVk
aXRmYWN0b3JpbmcuaXSCG29ubGluZS1wcml2YXRlLnVuaWNyZWRpdC5pdIIPd3d3
LmdldGlja2V0Lml0ghB3d3cuaWxtaW9kb25vLml0gh5ob21lYmFua2luZy11Y2Zp
bi51bmljcmVkaXQuaXSCCnd3dy51Y2YuaXSCGm9ubGluZS1yZXRhaWwudW5pY3Jl
ZGl0Lml0giFvbmxpbmUtc21hbGxidXNpbmVzcy51bmljcmVkaXQuaXSCC2dldGlj
a2V0Lml0ggx1bmljcmVkaXQuaXSCEHd3dy51bmljcmVkaXQuaXQwUQYDVR0gBEow
SDA8BgYrgR8BFAEwMjAwBggrBgEFBQcCARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5p
dC9hcmVhLWRvd25sb2FkMAgGBmeBDAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
KwYBBQUHAwEwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDA5LmFjdGFsaXMu
aXQvUmVwb3NpdG9yeS9BVVRIT1YtRzMvZ2V0TGFzdENSTDAdBgNVHQ4EFgQU0Xsc
30Jd/KwH4hALTr8H9FKXJIgwDgYDVR0PAQH/BAQDAgWgMIIBgAYKKwYBBAHWeQIE
AgSCAXAEggFsAWoAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AYpz6S54AAAEAwBHMEUCIENGbT75Cqa8kuC22He1Q2q/RPyJHOzbp3EyneMyZpQZ
AiEAxS+NJxkUkQeh/AcehXIspsK26rUN/Z80WB0xG0joGpAAdwBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYpz6S/+AAAEAwBIMEYCIQDjnZ2jgybW
Ble9x3mxUeeTgcfYQfMQuVBj4zDmwKB1/wIhAOjswwdLPfvN1g82NJyMnQ+UUlTm
iC2cKpP4irnlG4PsAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQA
AAGKc+kuQQAABAMASDBGAiEAmAV455+dwTDMfrNsCXvVNFm48mzxDjyUmY0PqyLp
KdQCIQCWajPfMFYJEnI45Pcm/fYUTKln4U6u8DVZ8da0U3dVuzANBgkqhkiG9w0B
AQsFAAOCAgEAFkvF6wYXd6T30+qBgr0qidMeQeP2Hzt+jrORmUrTVDMyIrOfjI3j
TCn5hjsfWEkB/vVuMk3xEl04DqRwaSi5fuvNtVTy0MSV3eqb0pcK2aIk++qm68OJ
FCNXCrks/1Dd2kPpEiiX3sLvebxD2d5gBpcoRgbetZV+4eHgMYcIWDU30s0mRK3R
UxVdcN0y4QeNIwkNmLxzJkZZ+617Kgtr70x0uzyA4YMgNwfo1TsTiW9usLgZwIht
+CPo3cakBeUChzWTXBVEyiVcnRyuxfBSMhyk/ADlIXooETMkoaN42anPzXrq5x8p
wi/fsyd/VFPrqElPsZlt6xOk/UcjW4Q1ryt0D7bNy+KE5WxWWKiLatIJVJADOlIO
W5BtTJA2QFFs0zLt2VwH7brITn/GqPG93TUM1+U/tTLXsSb04vITsAp8SP2X9dmk
uTlySFwG9toIHB2EwpTX4TRv7ClvU9hgj68xNZ1kGLPmIos0JpAkYWrJ3nCUrShl
jDjHrin9M6l5qFRbuKVv0GJx1y9UWgfBg6InGdWJqtr29SA/6fUF/0JIYPzkNQZ4
dswSj9YIxq/4B1OS+Yer6RpvCQqUWK28IKmBl4jJzDGIo9WZ8V9/hjmOEn6qM8Di
VoPUAjkxYXIO+4xJJ7g3k6Mf35yFMptXS+N12CHU0rr7+FWfdTMhq/c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFj2hMSIwp17OxrdRMAo
Cmaajo5cJ/IiAdUQoYx+AteAMJHa45k3l52sAY/imLU1kKezeO5eV7v2CrCUh88+
pwSpFaW9Txa6acje+Cn2h0tFC1Qy5laibuD6ZlvT54J4PZkVeHLFGzbQf+hRIgdj
+d/wJak/nlHZcNtNUZ9HIwb0NVjvMTO6xe/QkeJZDCz4wcsip8gwU6WGO9VKftpX
3T+SsYCKj7xkwvu0rjMAMMi034F/P0qZeen4YaobHnibv6cgC5gk8cnL5uGR38Jk
qk59eu+pKmTsGgX7Lyfa/rR0r9sCWl0CGIPrwyHbAXaVnT8ftjGhn7VZT1md7g5a
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152925899871935984498893344932191056488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 08:19:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-08 08:19:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.unicredit.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23271717386024925246190235655786101590656707302160263919511616208670251938350859203579932627941504747358067589201435271486811993859130785231495258593823737248560708068147898889795249178171738577152710769709173368596371999974365382050733214006066184853737980549180660873152549804695662838036063438606484380551109249296130181584946176606627862928976869702990846438818658689227821613830346799266664926610753950086850090973912040699758340165928453218194855869507825083561276381691325551293773945197054097345076736598546734579627276048156158492620770646675674165248660993909981565646581762571682087090485790550084476099179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (379 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.unicreditcard.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.unicreditcorporate.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdo.unicreditimpresa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confidi.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicred.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicreditfactoring.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-private.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geticket.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilmiodono.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homebanking-ucfin.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-retail.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-smallbusiness.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geticket.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d17b1cdf425dfcac07e2100b4ebf07f452972488
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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