pdaH3G.compass.it

- Compass -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 60:75:21:de:2a:71:c5:ac:00:00:00:00:50:f1:e4:44 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Compass

Organization: Compass
Locality: Milano
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 60:75:21:de:2a:71:c5:ac:00:00:00:00:50:f1:e4:44
Serial Number (int): 128214073249105409812260533866171851844
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: be:5e:18:24:42:e9:39:30:3f:8d:23:b7:71:ee:62:8d:8a:ec:ef:1c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 33:4c:0c:98:3b:a1:b9:cb:c1:27:2e:8d:53:44:2c:77:37:cc:c3:29
Fingerprint (sha256): b4:e9:16:a5:30:b5:34:cf:14:16:43:c0:82:6c:b6:44:5a:87:09:e0:c7:19:9a:9f:98:d8:f6:33:68:b7:5c:a2

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate pdaH3G.compass.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pdaH3G.compass.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pdaH3G.compass.it
www.pdaH3G.compass.it

Other certificates including the domain name compass.it

(limited to 100 certificates)
passcom.compassonline.it
wmbldi.compass.it
ds-richiesta.compass.it
richiesta.compass.it
m.compass.it
assicurazioni.compass.it
fidoposbancoposta.compass.it
cometa.compass.it
www.compass.it
mailsync.compass.it
lmm.compass.it
wmbldi.compass.it
www.compass.it
compasspay.compass.it
*.compass.it
passcom.compassonline.it
prestiti.compass.it
secure.compass.it
fidoposbancoposta.compass.it
cmiep.compass.it
compasspay.compass.it
www.compass.it
fidoposbancoposta.compass.it
www.compass.it
uploaddocumenti.compass.it
pdaH3G.compass.it
assicurazioni.compass.it
loginpage-ext.compass.it
richiesta.compass.it
www.compass.it
vodafone.compass.it
ariadipremi.compass.it
www.compass.it
richiesta.compass.it
fidoposbancoposta.compass.it
20annicarte.compass.it
www.compass.it
sviluppo.assicurazioni.compass.it
prestiti.compass.it
richiesta.compass.it
compasspay.compass.it
cartabancopostapiu.compass.it
ariadipremi.compass.it
ds-richiesta.compass.it
loginpage.compass.it
cartabancopostapiu.compass.it
promoepremi.compass.it
pdaH3G.compass.it
eap01.mediobanca.com
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
compasspay.compass.it
pdaH3G.compass.it
www.compass.it
pdaH3G.compass.it
compasspay.compass.it
fidoposbancoposta.compass.it
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
www.compass.it
welcome.compass.it
sviluppo.assicurazioni.compass.it
bol.compass.it

Certificate

The complete raw certificate details for pdaH3G.compass.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTXczwVdZCPuAHOqV8v1
9YdPdVXNm9TsnwwGUakxpR6HAmH+SKFdFAmllgshNxe0sHiyhJqLW8RFQ50MAFAj
BzVzJD+G4n8Le5AiFEiYRYb6dg51uNrwEutdUU/VRzXD42gAwG9f2bFiYKkcc4zQ
9S0TRxsqZxQHRTakS83zLUE9RvfhBYLfVNk6fuKiSiutYzVyGx08f3uUVQvMEnzh
daa1hOrIG/AyHXT8YhoGlLXToD3F5VbZt2hOO/NnnKZZvxzsfzBkHTsIIObz5YIX
Z4hLRDc9sQK1EHVZPm7g59QjsByB+MHpLdZ6tznUJ0JIqNF/gc4QLH1otp2/o5CI
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128214073249105409812260533866171851844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 12:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 12:36:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Compass'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pdaH3G.compass.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22370740584380412523272372421466081630281089095290252890446991529326861185976500974052433780913323529197031518919837871171098124586337929348829213615077992288075888662841838593850881181554333645250067953870013333168392563953449265313145715695189596503899273645380049162760957122099131287100027933616890326444804540208763505095786178901254412243458948497473171248583331681684624082834271194899001585485444286690207647152965456224497944786623327558176793021032819301675655381843723526197665803484873695286978578357044434207733434358148682429437988652748969226642658908452499705652580133004572889584606164963784213432517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdaH3G.compass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdaH3G.compass.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be5e182442e939303f8d23b771ee628d8aecef1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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