sip.gruppohera.it

- HERA S.p.a. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:0b:95:60:e0:2f:12:47:e6:48:04:43:80:c3:70:36 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HERA S.p.a.

Organization: HERA S.p.a.
State / Province: Bologna
Locality: Bologna
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:95:60:e0:2f:12:47:e6:48:04:43:80:c3:70:36
Serial Number (int): 5377057002899640106210862188974010422
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:e3:b5:68:55:86:85:31:87:23:f7:20:19:55:6b:88:e4:6a:12:68
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 2f:0c:01:76:62:7f:50:60:30:fe:f1:5a:c6:75:f8:42:82:ed:77:ff
Fingerprint (sha256): ab:c0:ff:74:d0:69:e8:b6:0c:48:b9:38:29:93:ed:60:c0:6e:1c:01:d8:61:dd:52:a7:84:09:61:bd:1d:40:9d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate sip.gruppohera.it

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.gruppohera.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.gruppohera.it
sipconf.gruppohera.it
sip.inretedistribuzione.it
sip.consulenti.inretedistribuzione.it
sip.consulenti.gruppohera.it
sip.acegasapsamga.it
sip.collaboration.gruppohera.it

Other certificates including the domain name gruppohera.it

(limited to 100 certificates)
admin.govoltmobility.com
heureka.gruppohera.it
*.gruppohera.it
gepeweb.gruppohera.it
heureka.gruppohera.it
incapsula.com
*.mobility.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
incapsula.com
incapsula.com
heureka.gruppohera.it
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
heureka.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
webmail.gruppohera.it
heureka.gruppohera.it
heraricarica.gruppohera.it
offerte-heracomm.gruppohera.it
akamai-san122.exacttarget.com
ragazzi.gruppohera.it
indicienergetici.gruppohera.it
www.gruppohera.it
incapsula.com
incapsula.com
pasemplice-tst.gruppohera.it
incapsula.com
incapsula.com
mobile.gruppohera.it
incapsula.com
sts.gruppohera.it
eng.gruppohera.it
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
eng.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
www.gruppohera.it
incapsula.com
www.minidot.be
heureka.gruppohera.it
servizionline.gruppohera.it
www.gruppohera.it
heracomm.gruppohera.it
incapsula.com
offerte-heracomm.gruppohera.it
*.gruppohera.it
akamai-san122.exacttarget.com
sip.gruppohera.it
www.admin.k-9access.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
heracomm2.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
servizionline.gruppohera.it
incapsula.com
click.contatti.gruppohera.it
incapsula.com
*.gruppohera.it
www.gruppohera.it
servizionline.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
ragazzi.gruppohera.it
app.paymytable.com
incapsula.com
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
akamai-san122.exacttarget.com
*.mobility.gruppohera.it
sts.gruppohera.it
heracomm2.gruppohera.it
*.gruppohera.it
incapsula.com
prestazionifognatura.gruppohera.it
heraricarica.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
beam.gruppohera.it
heracomm.gruppohera.it

Certificate

The complete raw certificate details for sip.gruppohera.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6T1tNJV9/UOE72ZuAWq
S5zWqcMZKQLquRy3v02ovLNjOG/Opw98fphz4CLvmphwOEyrH4PKg074UhPa+HEl
O0xoN/J2muqwVAkwh8S+S6Os0QEfihRDD+Q5hw+M2U930yPvBMqwvPJmarcGoV1d
dibdwa1bfb2T9DtBg+S3da5wrE9YPvt17tOYg75N2mGnFJg8Al9Cej99HnxBMHbv
0AqFs9pWxm6j6MC8uetPQhc1VEd1moWras399KWmG9rtHJwGGz/rc3130MbBXQ1S
1IickBUDgPlq7SHco+MVeoMDKhHkDK1C/cpFkidhYtx63J0efhiM51aTgrJiXk2G
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5377057002899640106210862188974010422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HERA S.p.a.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip.gruppohera.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23182954513178344269096681730795115587594158078379240074608405575440797808126767475719707334642473087496724140292210814880359361372493546473066231706107900625904407053574775613923296958496772132980052224595490821466715721667093456713177819280530746554198903002151362372954846076777981754481759130116500944762197706550614468903219790064609670111015402801295117039908012564896311169285965889991377145643952382283819430693399109085793869471543720275880705731757644959647419357956833425618757161630305625501037954954737600134886127198484400870045344153106230496817342094595573999174532519076945547788840328103269541709461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e3b568558685318723f72019556b88e46a1268
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipconf.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.inretedistribuzione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.consulenti.inretedistribuzione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.consulenti.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.collaboration.gruppohera.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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