servizionline.acegasapsamga.it

- HERA SPA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:3b:b8:d6:18:a9:9a:13:38:4f:f1:3b:10:0d:3e:cd was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HERA SPA

Organization: HERA SPA
Organization unit: DSI
State / Province: Bologna
Locality: Bologna
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:3b:b8:d6:18:a9:9a:13:38:4f:f1:3b:10:0d:3e:cd
Serial Number (int): 14931602394114155690162808590173028045
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:e1:2f:b5:05:23:f5:98:e9:d6:de:49:8a:40:cf:b2:2e:4e:77:17
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 36:a1:1a:62:58:21:49:46:0e:90:ae:00:5c:c9:fd:8f:0f:8d:98:c1
Fingerprint (sha256): b0:d0:2f:2d:a2:84:14:ed:51:44:13:17:f0:4e:a6:84:49:fd:c9:22:ff:ea:88:23:4d:55:42:39:a5:c4:1a:c2

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate servizionline.acegasapsamga.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for servizionline.acegasapsamga.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

servizionline.acegasapsamga.it

Other certificates including the domain name acegasapsamga.it

(limited to 100 certificates)
nova.tutorsunited.org
nova.tutorsunited.org
*.acegasapsamga.it
planner.podmanagement.co.uk
acegasapsamga.it
www.miupdate.co.uk
v2.dieschrankhelden.de
servizionline.acegasapsamga.it
acegasapsamga.it
servizionline.acegasapsamga.it
www.f2b2.org
www.gruppohera.it
servizionline.acegasapsamga.it
adventure.tyf.com
sts.gruppohera.it
adventure.tyf.com
greeneco-air-gf.sunapps.fr
fieldservice.mango-solar.de
www.gruppohera.it
privacy.appzco.uk
sts.gruppohera.it
servizionline.acegasapsamga.it
select.converge-digital.com
*.acegasapsamga.it
sts.gruppohera.it
www.itvcreate.com
*.acegasapsamga.it
richieste.acegasapsamga.it
corpoapp.wast.fr
sts.gruppohera.it
adventure.tyf.com
servizionline.acegasapsamga.it
adventure.tyf.com
app.futurest8.co.za
www.gruppohera.it
check.ticketpay.de
nova.tutorsunited.org
sip.gruppohera.it
my.answerbee.co.uk
www.gruppohera.it
my.sixlinks.com
docenti.forema.it
wanapptest.workapp.be
*.acegasapsamga.it
select.converge-digital.com
nova.tutorsunited.org
sip.gruppohera.it
www.gruppohera.it
partnership.coherenze.com
portal.wakelake.sk
db.weconnectminds.com
sip.gruppohera.it
servizionline.acegasapsamga.it
nova.tutorsunited.org
portal.pleaseconnectme.co.uk
myapp.atelieruldeit.ro
nova.tutorsunited.org
login.aimloop.com
nova.tutorsunited.org
inhus.dsst.lt
adventure.tyf.com
complex2.propertydashboard.co.za
adventure.tyf.com
permissions.genesis-tec.com
sip.gruppohera.it
nova.tutorsunited.org
adventure.tyf.com
complex1.propertydashboard.co.za
portal.mmbb.be
grc.orangeoaks.nl
*.acegasapsamga.it
coty.asecca.co.uk
*.acegasapsamga.it
pat.acegasapsamga.it
virtualvda.intelauto.co.uk

Certificate

The complete raw certificate details for servizionline.acegasapsamga.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFHQMQDSXEyaKr6DtRHr
rm20mp8nJtT3FMO1XarC6r8+HRnI2BXc5AIQZ7gDzFrKxHJY6CsuCo58siK4U7e/
jGyr2C9+s5yCOx1ZURF+Lia/DaEvX9qMStUfMQIKgLccIIzvjt7hEBToDpwRPetW
vghXzlDkqW1yiBF1+u3AefQj+ih23dq7H90/dfySlLmlQ8lth+TY7odfpxu7nBrA
g0RggBbVG1E3eTVnzWLSGc54YwegRVbX4uVhoLbEGAGsUIBConXVLuvk+cPC7VqT
pNEl82dlmDA3K8uydWM3crznfBq6T34WdVJf6F16LNGG5vzeSd2X3qUA+eWX1A3r
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14931602394114155690162808590173028045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HERA SPA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'servizionline.acegasapsamga.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20743425630516263684664391583400010191667897963993502106673701664363622337873524358134167872954505246542352844627254034509568324006553856603592705308622897957748506621477148603646447545863589071769238257315679571341269312827436316939246155881269246942357264660616050455216602421522286306164717708884675167105594440127372177313249416848420262542369682890746806539553619179400695712502507913302774962796130714836897882764999771642435943379672189134729743261913859665519169095552832634573566039805475895768880159867764078319847949974474014421405445011026789893886103947616782544755956886380280049203786165246065474661251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86e12fb50523f598e9d6de498a40cfb22e4e7717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servizionline.acegasapsamga.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166c9d9d616000004030046304402206b48149cc95732afead889430d1c22602ffb484a9ea9a49dfddcb12ac5fe8e50022046e874111dcb8c120da33d6f691f5065b7dfb40cae89790a208081abac15caed0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166c9d9d6dc0000040300473045022100e4294b77416ab80a4c495320db0c8be4229e0d9739dafef1189a7affeb6a8b70022025f08c57aaad3055b0bed606deb8f44e08625df9b9b2f040acb2e0a9a6cda0d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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