*.antichitasaccoluciano.it

Issued by Actalis Domain Validation Server CA G1

About this certificate

This digital certificate with serial number 33:f9:33:7a:6f:15:d4:e4 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.antichitasaccoluciano.it,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 33:f9:33:7a:6f:15:d4:e4
Serial Number (int): 3745081166078006500
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: eb:63:42:c6:51:59:cb:a6:0f:ee:ab:d5:ed:91:08:66:14:5d:04:ee
AuthorityKeyId: 1b:42:7f:5c:45:7e:ff:7e:1e:1e:41:9c:f3:ad:ae:35:c6:65:eb:c5

Fingerprint (sha1): 46:b8:fd:31:32:6b:0e:0f:6c:d1:51:a2:dc:b3:eb:1e:07:94:36:cf
Fingerprint (sha256): b1:0d:94:30:80:fc:16:c0:bb:89:53:f5:d1:2a:8d:53:30:e2:99:7b:d4:08:47:0c:91:68:98:58:c5:b5:5e:d5

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg1

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G1
CRL Distribution Point: ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL

Check the revocation status for certificate *.antichitasaccoluciano.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.antichitasaccoluciano.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.antichitasaccoluciano.it
antichitasaccoluciano.it

Other certificates including the domain name antichitasaccoluciano.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.antichitasaccoluciano.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6qbVYidC3BATAeO/RSP
HaU81QKezKeoHS38qUggPOUpefllEF1elB8NSq00ils10AcVZf9GJqfpkBXz6uaC
PASSa/R+y6SNYMs7mQTGp9qpo1mi9eoEyyA+zG8KN81aETbW/Qr/oFapzzKBXlA4
AE9UPSGSMaPyX0KfWkTBHevRA5QWqmcmVaMl9hq/RI6U0VYG7BocwLwyqmsHqx98
eXyt0dlFazFSgLObCkJgkbDOiVqvZTn6YwIv8gXoyrdc6fxH4FKb8aM26e8LOnxe
+gZfS8dELBjGxOINtAt1G/P/bYmR4NuO8JadS9mlyUp0Sp4v9lQf6qJzLu0HU3Wk
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3745081166078006500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 14:41:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 14:41:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.antichitasaccoluciano.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26215458463722511429102728544970146902120165417801547864819400145806393333636625162384410474579248592175532639472862917801532938883363496881329984888456607694275299664587374413576918103036118226588462398142465068689151057606142562600278556852632262541603665515312226077390725788910933146545212259872184310273183253989279433395537997456916559479928597629894886518363003058229641843500728698874542174246567147537221940720374013630603031120043251058700328760862945693249407560003838089307204797822418401169791683427522080082008046993193173812588569991292861638370147469695134892501341039378757588708634260491616547873937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b427f5c457eff7e1e1e419cf3adae35c665ebc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G1'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antichitasaccoluciano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antichitasaccoluciano.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap06.actalis.it/cn%3dActalis%20Domain%20Validation%20Server%20CA%20G1,o%3dActalis%20S.p.A./03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G1/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb6342c65159cba60feeabd5ed910866145d04ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001668282dfd00000040300473045022100955df6f998ea59636374585e66a1e87982833482dca571cf6d9cdc6271fc8102022042eb2b7fa5c338a6e01f91521a1847ce4346514622a85115a34d69a63cf8752c007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001668282df47000004030047304502206c7fb9e4d9cb695f991f54faa1ee2d843b1110fb6cda8e0a12d2bcc77c8d06bf02210084a5c5922f794ceba342b6e2546ccda6fe884cfd64a477159cc7a451363459fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00755c2df10e912f3162d22ae7f9ad8f9a9a62c5c19314790ef49173327d5fc91b53d230b7b4bebc8cd873f15e0440d5f489c7191519a876f2a20c485316fef040e35d3699fc2282d4abe8b7df277eaebb113173b367490a9cc157799eaa6fe2107eed42096d809beb50b5f78b8659c44e03cc222192b005110d0a59202634936fb19149010daeb336a9e0ac2b95873c22a421a33cdabe17e2c3d04781454aa9c41b6618cb1f175893f3fdcdaa60730db4660ffc8b35450a2650c9b85813d2a62db862225f6ba7990f81bcdfa9a8626911715b343e670363a8990c072b9e826654cb548e3bf3477c5d7240e7b0fa5570b1ad0e6f56dd4c6addbdf9032fab72d800