app.lefrecce.it

- Trenitalia S.P.A. -

Issued by Actalis Organization Validated Server CA G2

About this certificate

This digital certificate with serial number 21:8e:20:cf:77:3e:87:a1:19:b2:1c:c8:87:4e:c3:1f was issued on by Actalis S.p.A./03358520967.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trenitalia S.P.A.

Organization: Trenitalia S.P.A.
State / Province: Roma
Locality: Roma
Country: IT

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 21:8e:20:cf:77:3e:87:a1:19:b2:1c:c8:87:4e:c3:1f
Serial Number (int): 44602495489055436696057139144453702431
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 7c:0a:eb:2f:96:01:97:2f:f2:77:a4:2b:1e:2e:a1:10:68:a8:09:f4
AuthorityKeyId: 62:fe:bb:27:8a:64:44:ed:68:96:5a:58:79:a1:db:5a:26:ad:ff:bb

Fingerprint (sha1): 24:91:cc:28:25:2f:d9:8d:3c:df:64:57:85:bf:e8:b8:82:39:00:ff
Fingerprint (sha256): 9b:69:a0:3a:de:e7:21:f4:3b:1a:0c:ea:1e:24:fd:b4:d7:a3:2e:92:5e:37:0f:7f:a7:2a:5f:0a:97:30:20:13

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg2

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G2
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G2/getLastCRL

Check the revocation status for certificate app.lefrecce.it

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.lefrecce.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.lefrecce.it
app-correttiva.lefrecce.it
app-certificazione.lefrecce.it

Other certificates including the domain name lefrecce.it

(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it

Certificate

The complete raw certificate details for app.lefrecce.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgIQIY4gz3c+h6EZshzIh07DHzANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3
MTQwMgYDVQQDDCtBY3RhbGlzIE9yZ2FuaXphdGlvbiBWYWxpZGF0ZWQgU2VydmVy
IENBIEcyMB4XDTE5MDkyNzE0MzU0N1oXDTIxMDkyNzE0MzU0N1owYTELMAkGA1UE
BhMCSVQxDTALBgNVBAgMBFJvbWExDTALBgNVBAcMBFJvbWExGjAYBgNVBAoMEVRy
ZW5pdGFsaWEgUy5QLkEuMRgwFgYDVQQDDA9hcHAubGVmcmVjY2UuaXQwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhMz2x3Y/UEw7GKzhkmb/OHADXcD3
6j7gO4BS+ACllO8wGrw59i/JWmQxb7XHviNPoyfylsHaWs9C3Z5KR8D//RQJmeIy
0j2QtnbPCihdaoE3DwYAzos7BnZ7at/2IYe3yfMGBzQ9i8K9qaFxqZ4QvRRETnEz
00muuOsANJ9SwfwJQs6bujIhlWVNwsSm01+l5YzphqYxDL2retxsG0BGVwRtUW/E
qS98C5t01Qx6KT1xQWld+NrayPdtf9PV52F/BXTYaiYyBSke6SRlwOVyx1mYcwcB
fF13labOvmpP+DqAAzDbxCzkcLIBSuB8btLDMsMRNwE5QC5wAYFvNkl1AgMBAAGj
ggN5MIIDdTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFGL+uyeKZETtaJZaWHmh
21omrf+7MH4GCCsGAQUFBwEBBHIwcDA7BggrBgEFBQcwAoYvaHR0cDovL2NhY2Vy
dC5hY3RhbGlzLml0L2NlcnRzL2FjdGFsaXMtYXV0aG92ZzIwMQYIKwYBBQUHMAGG
JWh0dHA6Ly9vY3NwMDkuYWN0YWxpcy5pdC9WQS9BVVRIT1YtRzIwVgYDVR0RBE8w
TYIPYXBwLmxlZnJlY2NlLml0ghphcHAtY29ycmV0dGl2YS5sZWZyZWNjZS5pdIIe
YXBwLWNlcnRpZmljYXppb25lLmxlZnJlY2NlLml0MFEGA1UdIARKMEgwPAYGK4Ef
ARQBMDIwMAYIKwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1k
b3dubG9hZDAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB
MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwwOS5hY3RhbGlzLml0L1JlcG9z
aXRvcnkvQVVUSE9WLUcyL2dldExhc3RDUkwwHQYDVR0OBBYEFHwK6y+WAZcv8nek
Kx4uoRBoqAn0MA4GA1UdDwEB/wQEAwIFoDCCAX8GCisGAQQB1nkCBAIEggFvBIIB
awFpAHYAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFtcy9gogAA
BAMARzBFAiBD08T+tPkVUDu+qQnTjmQ7rYJW1TGeiuG4iGKQCXfK9wIhANoKIdnX
P2/+Kz04HHh2Nk99Mvi/xtGFyu4zOdyBe53jAHcARJRlLrDuzq/EQAfYqP4owNrm
gr7YyzG1P9MzlrW2gagAAAFtcy9eigAABAMASDBGAiEAu3n6YKzcXcloccLeq7bF
xDwcfF0A0364KARdTYggcYUCIQC4BLtJ2BN+TE029cKXTwN0GR+EzSfxNA5DVYED
obqAKwB2APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABbXMvXlUA
AAQDAEcwRQIhAMayGB9ogCUznCJOPByRkCKaYW3qU+iRfQ/vf/WDkonFAiAFVsDb
Nngc9VAxcVdWvn1UZ8glp3+DBZgbu1epTip05zANBgkqhkiG9w0BAQsFAAOCAQEA
JGUII8kgL8/SlreXNMtbGsPFwVxPcakppIERynHKZaCjbk7Mkx+rkPPzoNy+mjjT
/WdsZ/nQj+unf8Ib598oGC8+6yJAsbX7ysvVlfWlGVwOUVfUvsYgdCOIcZeARBD6
Xm2vmyN3DYb0OR7OtR4SSXXgeOxcmO5iQwXkTevzZuRTtjGcnqJ3P/WIznztX8Qy
yfo8rNcsNdKOZ5bIrUqS1zfDO3PDEX7Hnq+4HTOQ99qDGKfy1umgd/AKuLMN8wz0
aSQC7Oz9vrhFg3G/4HoLB0RNhO9R/mjgRw3c9a6xtVZrfxtvlC8W5O9QsivO/ZcS
wIqxrzbOnO/d9Z0kjIK44A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24TM9sd2P1BMOxis4ZJm
/zhwA13A9+o+4DuAUvgApZTvMBq8OfYvyVpkMW+1x74jT6Mn8pbB2lrPQt2eSkfA
//0UCZniMtI9kLZ2zwooXWqBNw8GAM6LOwZ2e2rf9iGHt8nzBgc0PYvCvamhcame
EL0URE5xM9NJrrjrADSfUsH8CULOm7oyIZVlTcLEptNfpeWM6YamMQy9q3rcbBtA
RlcEbVFvxKkvfAubdNUMeik9cUFpXfja2sj3bX/T1edhfwV02GomMgUpHukkZcDl
csdZmHMHAXxdd5Wmzr5qT/g6gAMw28Qs5HCyAUrgfG7SwzLDETcBOUAucAGBbzZJ
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44602495489055436696057139144453702431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 14:35:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-27 14:35:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trenitalia S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'app.lefrecce.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27711675224135434710181152382423964015668474741617143767312307877773842987564230593145988948892276211926579141988010349378186224180634672764159554917707680713298609680971749184346036137862813856556701834589796290985229254859976499135606123516688829863353267867222223188369067822967173823362771170550229805342879017945523487670331707413896672576487342743721873653243417108699425354253934631049490860196192874699696174645578535632908529636217412937271783310051040066987807036367882772702470392355720724199738911472740061835858656513798729375726469751444892301698665411481273726428905673756935628439445149538964682983797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 62febb278a6444ed68965a5879a1db5a26adffbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-correttiva.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c0aeb2f9601972ff277a42b1e2ea11068a809f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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