*.martincostruzioni.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 4c:19:44:c6:00:c1:21:61:41:28:79:df:ae:d7:4d:41 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.martincostruzioni.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:19:44:c6:00:c1:21:61:41:28:79:df:ae:d7:4d:41
Serial Number (int): 101152529992379683484639140816314912065
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: de:5b:99:f5:03:eb:0a:d2:8f:03:f7:ec:66:48:89:68:80:7a:71:6c
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): d6:bb:05:f3:31:52:dc:6b:c2:5b:86:00:0c:e1:ff:e4:55:31:b9:a1
Fingerprint (sha256): 9b:38:d6:70:b1:0f:5d:dc:ca:ff:eb:e6:ba:91:60:bd:33:64:be:37:63:1b:ea:f7:a0:d7:43:8c:14:b8:ba:e7

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.martincostruzioni.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.martincostruzioni.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.martincostruzioni.it
martincostruzioni.it

Other certificates including the domain name martincostruzioni.it

(limited to 100 certificates)
*.martincostruzioni.it
*.martincostruzioni.it
*.martincostruzioni.it
*.martincostruzioni.it
*.martincostruzioni.it
*.martincostruzioni.it
*.martincostruzioni.it
*.martincostruzioni.it

Certificate

The complete raw certificate details for *.martincostruzioni.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYJKOTTE6XJ8T5yXQO+7
C0l0YGVLRzGreEQnPxJSKFbLs5dZwbtMYEDiGXsa4upYwJm6JA9IGhX/Et7kD2aG
1ZfcOxmmTptp9W86yW5xAiitbbPbTNvWLOZBa55a5rRGp/aPLs0tzPzPsF1eDcIE
CqO11a9I5SdTKBjyUj68IGjb9JoKypvwcv5GSUkQYd0PE5Sz4a9UP+o/bhuqzgMg
tAiJAoca2pdiykX73etbsPv6JxpwLDj9B7tKDjFEJ00xMZEmMc+IsIz7f5cs8Si2
y1tggq5R6LoN1Ndz/UBvoNTz8YJ6taouC8OE9W5Ujd3Ug3e4N+NPzqAhPMtKuUq+
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101152529992379683484639140816314912065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 04:55:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 04:55:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.martincostruzioni.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24933194440026680634860372975444915179187841717505027252429549168450825300100357290321863017552096372125407655591292287496728766491854591123647299841769294074996477902525308034615954471372008857123727167502790480165441883220019938488504336531536620176715811214358527127007627147602558290003860307918906825554867716218902412495341828641897180139583292342036602559717456910946288640894445251319712325893960432045803777683071802944980870670300874078234560717838924646417135407296698844371210527066957927748703516270429261119443851274341161312662216162238272577614884887914177326448351872957881592873346282635950738292341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martincostruzioni.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martincostruzioni.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de5b99f503eb0ad28f03f7ec66488968807a716c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001637bb8bc3f24a903c9ab5ad477b050d1b7368ce67affb347e4516fc93c63936b895c45188ed2d49c61b90507c546fb79d766e352b7b1f5714bfadb2116d0b3cebc5fc120a20845fef165b50b89b05124a6864ff15e54b5281fe133867ce9fb4ff4d2512c7573cc16807f8ca54e933c3f3bfd7df0ec8b0e926947b36e146ea85ca1328be694ebc5bfb1f04a0686713f2a647c90d82fde7d46a54a746574ec203dc2f4e52419d90b8f04ec4bd4fd8ee2dafcdee7370aff72126e1d6ac126ae3edce19162d1ff8df9539050118fa34859bb05ee96dca4459eccdc080ab05e89fd6edce1d22b002d3b32dbc84efe755735cc0467ff37afba8765d7bb5476ce43aa413fd81a86655ace039cce7b3dc9c13ca2bd6dd695250b6f3829babebc5eaf802c5f56b3b9c852d0991e26a991e520cd0184138a842790869419deee6ce82b1fea9f30987fde19837a3b1e95d8538619bd1af86b099154467599a06db2c47437b5412c732247fb6f7062f1fcae75e4e1374c8ea5bbc47802dd7853b3549bc46e00fdeb1726943031556f40139b085551fd628e5e548ae18998cbd179c541fe343ce7637e3f8a02e2353d554484f21472f92551a51fd6c5bcfc53d89d2908a2fa0bb4e6f18daf8beb7e145d57a2f1174b0d57c543c9614d891980642075c484b6a9018e3a5abf0347ab8b66475fb6e7e0bcd7d016787fa417c36f683aa7a2d509d