www.tecnimont.it

Issued by R10

About this certificate

This digital certificate with serial number 03:0b:93:b5:fa:e7:b3:6f:6e:b5:21:14:55:08:9c:19:e1:5b was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.tecnimont.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:0b:93:b5:fa:e7:b3:6f:6e:b5:21:14:55:08:9c:19:e1:5b
Serial Number (int): 265276305241482479459124666225706493665627
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:67:05:10:27:12:a3:9d:12:14:59:be:1d:66:b9:31:f6:f6:24:cc
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 42:b4:b0:35:cc:b0:8b:51:d5:1d:6a:85:f7:65:3b:fd:fd:96:ae:a4
Fingerprint (sha256): b8:02:3a:ef:06:82:66:51:c9:58:7b:3c:53:94:31:3f:ad:70:48:b7:5a:24:41:d5:6e:df:0c:9e:55:61:83:b2

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate www.tecnimont.it

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tecnimont.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.fabrizioelisabetta.com
cpcalendars.fabrizioelisabetta.com
cpcontact.fabrizioelisabetta.com
fabrizioelisabetta.com
kt-met.com
met-development.com
mta-sts.are.met-ts.com
mta-sts.dev.speena.it
mta-sts.external.are.met-ts.com
mta-sts.external.fondazionemaire.com
mta-sts.external.groupmaire.com
mta-sts.external.groupmaire.it
mta-sts.external.kt-met.it
mta-sts.external.kt-tech.it
mta-sts.external.maire.it
mta-sts.external.mairetecnimontfoundation.com
mta-sts.external.met-development.com
mta-sts.external.met-ts.com
mta-sts.external.mst-italy.it
mta-sts.external.neosiarenewables.it
mta-sts.external.nextchem.it
mta-sts.external.sema-globalfacilities.it
mta-sts.external.tecnimont.it
mta-sts.external.tecnimontkz.kz
mta-sts.fondazionemaire.com
mta-sts.groupmaire.com
mta-sts.groupmaire.it
mta-sts.kt-met.it
mta-sts.kt-tech.it
mta-sts.maire.it
mta-sts.mairecapitalmarketsday.it
mta-sts.mairetecnimont.com
mta-sts.mairetecnimont.it
mta-sts.mairetecnimontfoundation.com
mta-sts.met-development.com
mta-sts.met-ts.com
mta-sts.mst-italy.it
mta-sts.neosiarenewables.it
mta-sts.nextchem.it
mta-sts.qual.speena.it
mta-sts.resident.kt-met.it
mta-sts.resident.tecnimont.it
mta-sts.sap.tecnimont.it
mta-sts.sema-globalfacilities.it
mta-sts.speena.it
mta-sts.tecnimont.it
mta-sts.tecnimontkz.kz
tecnimont.it
webdisk.fabrizioelisabetta.com
whm.fabrizioelisabetta.com
www.fabrizioelisabetta.com
www.kt-met.com
www.met-development.com
www.tecnimont.it

Other certificates including the domain name tecnimont.it

(limited to 100 certificates)
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it

Certificate

The complete raw certificate details for www.tecnimont.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTUW8T9fdFPoB87Vj3Vl
jj7ltd0sscgmovyRuw7upa/+60l6BU7d+OjsQDnizpa7APC5qjhJFWB0N6AEGQak
K0uAt5wfPGIbtHNbh/ND52wVY1gFR3Ri6h7Wf5HujFARiEss83VUx1KL+GwTdlMp
OQ6Cw5XvDO0qcp/xRCIY7DAcoRNMIPB20OM584IVjLliD39Q9+jpJt8DP41z2ByD
zH00rXhBY+4TAeMBD9ZE/9pod1ktpOlttQp9vXLV9uRrgvLrvvgKjwWARJmo5wXX
J0VLe+GEeIOz6z6gh5Lt9mVe6RQx0eoCD8qnbnN6a6i4ntZLdHbbcM9jhdnrGNpY
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265276305241482479459124666225706493665627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 13:04:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-19 13:04:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnimont.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19340640126483141208179895190114250388442080346437749650822083975884066350639524892398078426593795859862675680232347593325469427661390484201144040421592710366490483309245408883076896398297755946834541486234281263091800097490041667470201351641201413647444250916903847575563215191806311817877032679126757114798281636520439499012402542045093816475788020970496255776916685605684189053114647157896199335150541898063593529835769398191949532639787017719727144775293995418161997872313384686920307411821418811837900346804455009330725760262238507753303998664945115808199173629620862378301373395491189694989725033558213660399843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d36705102712a39d121459be1d66b931f6f624cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1500 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontact.fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kt-met.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.are.met-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.dev.speena.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.are.met-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.fondazionemaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.groupmaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.groupmaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.kt-tech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.maire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.mairetecnimontfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.met-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.mst-italy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.neosiarenewables.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.nextchem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.sema-globalfacilities.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.tecnimontkz.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.fondazionemaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.groupmaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.groupmaire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.kt-tech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.maire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairecapitalmarketsday.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mairetecnimontfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.met-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mst-italy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.neosiarenewables.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.nextchem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.qual.speena.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.resident.kt-met.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.resident.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.sap.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.sema-globalfacilities.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.speena.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.tecnimontkz.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabrizioelisabetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kt-met.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.met-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnimont.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001903b1cd4840000040300483046022100f9a88254cd69a023dc81806db155bd4f5b3b1b84b29440d735c2bbc8d4c5ad42022100d5493b62214a2df3fecbe4ee11d3c8d006ae9d193b2f60a73077170485e3e89d0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca000001903b1cd508000004030047304502202be5946e554fed233b4b0cae745ffb9d4ef696f48d8a14a61a4be638c529ba470221009ea44a6a2f1ca95c54f4995178a64af91bf4f31041df4e3efbc2d6217ba208aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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