sip.chiesigroup.com

- Chiesi Farmaceutici SpA -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 64:d7:2c:b4:3c:84:e3:92:6e:7b:68:95:d6:8d:3d:86 was issued on by GeoTrust Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Chiesi Farmaceutici SpA

Organization: Chiesi Farmaceutici SpA
Organization unit: CICT
State / Province: Parma
Locality: Parma
Country: IT

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 64:d7:2c:b4:3c:84:e3:92:6e:7b:68:95:d6:8d:3d:86
Serial Number (int): 134040050108898141947441336360457026950
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 16:ec:54:ee:4f:74:54:08:ac:80:86:2a:ca:11:bd:84:cd:32:7b:6c
Fingerprint (sha256): 9c:7b:17:45:31:f5:1e:1f:e5:45:b9:68:82:05:70:de:20:66:c0:be:cf:53:6b:70:b5:81:2b:35:de:a9:36:f3

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate sip.chiesigroup.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.chiesigroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.chiesi.com
webconf.chiesigroup.com
sip.chiesigroup.com

Other certificates including the domain name chiesigroup.com

(limited to 100 certificates)
itpool.chiesigroup.com
extranet.chiesi.com
chiesisg.chiesigroup.com
chiesisg.chiesigroup.com
MAIL.chiesi.com
mail.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
itpool.chiesigroup.com
itpool.chiesi.com
wifi.chiesigroup.com
sip.chiesi.com
MAIL.chiesi.com
extranet.chiesi.com
extranet.chiesigroup.com
cag.chiesigroup.com
cag.chiesigroup.com
chvpn.chiesigroup.com
wifi.chiesigroup.com
itpool.chiesi.com
itpool.chiesi.com
pem.chiesigroup.com
cargobay.chiesi.com
mail.chiesi.com
extranet.chiesigroup.com
wifi.chiesigroup.com
chiesigroup.com
cargobay.chiesi.com
wifi.chiesigroup.com
chiesicrm.chiesigroup.com
chiesigroup.com
chiesisg.chiesigroup.com
sip.chiesi.com
itpool.chiesi.com
cag.chiesigroup.com
mail.chiesi.com
sip.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
extranet.chiesi.com
chvpn.chiesigroup.com
pem.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
www.chiesigroup.com
ngs.chiesigroup.com
pem.chiesigroup.com
MAIL.chiesi.com
cargobay.chiesi.com
sip.chiesigroup.com
MAIL.chiesi.com
cag.chiesigroup.com
cargobay.chiesigroup.com
sip.chiesigroup.com
itpool.chiesigroup.com
extranet.chiesi.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
chiesisg.chiesigroup.com
chiesigroup.com
extranet.chiesigroup.com
chiesigroup.com
attp.chiesi.com
chiesigroup.com
webconf.chiesigroup.com
chiesicrm.chiesigroup.com
itpool.chiesigroup.com
chiesigroup.com
ngs.chiesigroup.com
chiesigroup.com
sip.chiesi.com
sharefile.chiesi.com
chiesigroup.com

Certificate

The complete raw certificate details for sip.chiesigroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OFhiL/tXxNqSbZHjKkw
NE7Nx9/Y/iy2KyABjH/h+TGwzxuoqqfH06jt3qV4CAlr8oPdWZUO1GXWfFc3vgJ9
rTzsG4vBnZkCdGub7BAOCdlYpYtDZA6wZwUWaV8+ZLMrr5e7Nx9Q4YisRQbkW22t
Yxovp/2n6C6tGHSWzwLBi45jjXvSliXkGjhA5YIHALlMrJO9DFQhjYi9BJpGFMXL
VYnrcbZp3K8UCKx7QV6sCTYDUmvfU5TSf6xQBFGBDWJXRJg7ogBXKuxtJItDXbvq
0eoRiwuVIPbs0+qUgjnccdVjhw2baKj65RbWESew0ZeNpDFPmYMyG8ezRH0HsksR
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134040050108898141947441336360457026950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Parma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Parma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chiesi Farmaceutici SpA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.chiesigroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26368706942758076926607991047545855230125669426627101949758258686789651531646682144442146155800047331399725434471946961919816674668758507605793489432102230221189181417327930679372168231910172644007107080420138305361809652231072826515877236590600154130854299034909239877791635209896939323455016327072394507690544992188584086155278898066539805856654091915812245420414751951017664545646222963166711812369779812718797545973907997149575586074397193461490894398891582455338729948528526259803032728595756144935959681699856771552953686499444864479107924120658473542425845682779019638949419968229535140457646252487644294091233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.chiesigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.chiesigroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c06642f38d5e16b46ce0e84f4f498a01be6db9b315df1267b81f81f33f4a8e6f0dd10c10a192d7fab41e82f98de4ff18f96b0de24a814e4062c4ec332a0a14159c33363f3d44babe4a9dc773ddda8d937f7aeeba45c18ffc417eedf09b85251f4f08c9b9f6a542cd6d8ce63e3ae86f0a06d1ac29e9862b71745340e466f393682a5ecc5f23ed6898f8d4e8ece2b24a627870d762f3f428119e8e897b88da83ac3988c59896dd0ce93207bb98174b13a6820edfca2581501d737c551f97c236a4f67689e41327d9fad27b39f4d2bff1ee61917ce9dbe8ccf0466b80ff199ac68823fb650339417201b5a50f804604f2bf0f424012a8472e97c0a2c8ae0a17eace