zzeta.pointersoft.it

Issued by R3

About this certificate

This digital certificate with serial number 03:67:58:b4:df:77:9d:57:03:e8:12:fc:76:e8:84:e0:f1:7f was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zzeta.pointersoft.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:58:b4:df:77:9d:57:03:e8:12:fc:76:e8:84:e0:f1:7f
Serial Number (int): 296503852797655197837444284118948198281599
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:b9:a4:0b:b9:78:12:bd:52:9b:6d:d7:7c:68:2d:85:38:0c:05:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:28:90:ba:3d:14:06:83:51:4e:d8:39:0f:95:04:f3:56:74:73:d6
Fingerprint (sha256): bc:16:af:3f:fc:69:26:72:60:d2:9a:e6:a7:6c:24:49:87:47:af:46:9f:3d:34:e0:b3:05:0c:4a:33:12:3d:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zzeta.pointersoft.it

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zzeta.pointersoft.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbonamenti.stampamedia.net
abbonamentidigitali.com
abbonamentidigitali.it
astebusiness.news
biplano.it
catalogoarredamento.com
cogest.info
directjob.it
edicola.ratio.it
edicoladigitale.it
idrogeno.info
ilpoligrafico.it
primapagina.info
print4pack.it
relatori.ratio.it
southern-european-print-congress.com
tettodilegno.it
veicolielettrici.com
videolavoro.it
webaziende.net
xplor.it
zusieditore.com
zzeta.pointersoft.it

Other certificates including the domain name pointersoft.it

(limited to 100 certificates)
zzeta.pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
www.pointersoft.it
howto.pointersoft.it
pointersoft.it
www.pointersoft.it
www.pointersoft.it
pointersoft.it
zzeta.pointersoft.it
www.pointersoft.it
zzeta.pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
zzeta.pointersoft.it
pointersoft.it
www.pointersoft.it
zzeta.pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it

Certificate

The complete raw certificate details for zzeta.pointersoft.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WgTsBAqA+Hn4tbT4ExL
x/a2/qHiuEoZ38RKWc0pdtbS7uNG+rGbM7PbEq82vUPxhIGQH5H8FVxm4p/O5cTr
4qojCrsIWuG441e1Qne8Rwwjxro/HEwo8R9DZFpOJ2JRzJrUZm5jux6TeY8HCYFt
qRPoilAcAmPdiPbxbjZEVnFfs09xsfJCjMWcch1dWZDAqVjJqaV4Q3elCCIx3QGd
Jx/aybMFItO6/Tw44FokOHVtdiMkmpi0YSRIDDqLitPezuvLHnDTMaFl7ahScxQZ
cRDjv3+pcoXbPadD9n+CmwD0Lg9mUtP/qksWoQknRv0ZvhHumaOEorQ6052vdX0f
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296503852797655197837444284118948198281599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 07:58:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 07:58:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zzeta.pointersoft.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27445034412424476299225992020542445119587150016236853503180316820053461417445139598854965696530599833565848770796781638370572133548778793056051081378755445429383940636600220973315050238381391375715293566177160065428368299309055307594726100631023662294264891257707432263165448104684998643881819850614529040015369772058632171553713874481731725765486196339263780446834739785854502563419113489976234776425913110069969527544802988184156643405894230523870324617762169238248808514443466621488645241086275221964574783134770350667878251260175658761604591858728031243797429858695223865267461357095442030871811501728194841353989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7b9a40bb97812bd529b6dd77c682d85380c0567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamenti.stampamedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamentidigitali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamentidigitali.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astebusiness.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biplano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogoarredamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogest.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directjob.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicola.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicoladigitale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrogeno.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilpoligrafico.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primapagina.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print4pack.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relatori.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southern-european-print-congress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tettodilegno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veicolielettrici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videolavoro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaziende.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xplor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zusieditore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzeta.pointersoft.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1bcabbd90000040300473045022100acd65ac2daebbfeff74f7ceb19cc75f7fcee9776367098649b527620214897d702205f0f4df908be2c316432b65902f3054dd14b42ed2785c253014c669009f1d543007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d1bcabbda0000040300473045022027cba7edc116be8df0bb206fed5f2f35e725c75dea5d4c2d1a10c61fb602fdf7022100f462a5ce95bc95fcd3580892b32df01cef11e67aed0232dd108394d5b032408f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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