*.iano.it
Issued by Actalis Domain Validation Server CA G3
About this certificate
This digital certificate with serial number 64:43:f3:1a:c7:c9:d2:95:a0:09:c7:e3:cc:f9:cb:fc was issued on by Actalis S.p.A..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.iano.it
Actalis S.p.A.
Organization:
Actalis S.p.A.
State / Province:
Bergamo
Locality: Ponte San Pietro
Country: IT
Locality: Ponte San Pietro
Country: IT
This certificate has expire since
Certificate Details
Serial Number (hex): 64:43:f3:1a:c7:c9:d2:95:a0:09:c7:e3:cc:f9:cb:fcSerial Number (int): 133275614215310838969526492746932145148
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 67:65:60:a3:78:cb:d6:8e:2d:71:95:11:3f:2e:8e:f6:d0:5a:b2:8c
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71
Fingerprint (sha1): 43:f4:19:ab:f1:f1:18:bf:d0:40:a6:c5:a2:70:f6:30:93:fc:a8:12
Fingerprint (sha256): be:72:c5:09:a7:e4:97:ea:37:1c:b2:87:e2:52:da:39:6c:f2:66:dc:18:29:85:e1:b0:38:b9:a5:f9:88:dc:4b
Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3
Revocation information
OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL
Check the revocation status for certificate *.iano.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.iano.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iano.it
*.iano.it
*.iano.it
Other certificates including the domain name iano.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.iano.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9jCCA96gAwIBAgIQZEPzGsfJ0pWgCcfjzPnL/DANBgkqhkiG9w0BAQsFADCB hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yMTEyMDUw OTE5NTFaFw0yMzAxMDUwOTE5NTFaMBQxEjAQBgNVBAMMCSouaWFuby5pdDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJezi3AHy6JnBdJlBcapBhDBORmj qE2l/EdP40EXGjAFZx1cn89Urprv//FNJoCsLu1CuvZDrNdGZYHWZmWIlx2wgZK+ FRzjZzUwZYW6uZinmhFmqTsgGLEiDgaLx4pxjTKf6WLQk8v6D/sRz395xgX723pP K/SdmXlLgdCyuF+j5tnnlenEPIQFEgr8gqj/eCrcHxJfqgj6yt9uF4/dWzHUovDK C0OlSWogkZwJICcxVXzO4DADLW+jz3QMcgwc65DRHztGnYXzYvWq4f/7/gg8vca3 mC5HPS9pefmq/3CeJy5CjDxhEFe/JVsoaMMdpP8Zw+DqOL3sGl0WR9smq+ECAwEA AaOCAdEwggHNMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUQoNtgHwJhGf9gFer 8Sb1d8gignEwfQYIKwYBBQUHAQEEcTBvMDoGCCsGAQUFBzAChi5odHRwOi8vY2Fj ZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxpcy1hdXRkdmczMDEGCCsGAQUFBzAB hiVodHRwOi8vb2NzcDA2LmFjdGFsaXMuaXQvVkEvQVVUSERWLUczMB0GA1UdEQQW MBSCB2lhbm8uaXSCCSouaWFuby5pdDBRBgNVHSAESjBIMDwGBiuBHwEXATAyMDAG CCsGAQUFBwIBFiRodHRwczovL3d3dy5hY3RhbGlzLml0L2FyZWEtZG93bmxvYWQw CAYGZ4EMAQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBIBgNVHR8E QTA/MD2gO6A5hjdodHRwOi8vY3JsMDYuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FV VEhEVi1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBRnZWCjeMvWji1xlRE/Lo720Fqy jDAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggIBAKYDw/BQBMRhyf4TXEMDpdu1sttRFVQmoNlXot7Jon848E9yXIUS 5+BGsTqxKta62MP1NnhYcfRE8Hcx/wEgHgdlDFSA871NCBCK44LOJJvII60CO1tE TQQUPePDNyqwSuKCUXfHZ9faQs+2Y3uwMp0e5tr5eF66QH581xQ8kT3zqAXGfEWL +jRQIFvOYwIP97sVFCGoiKPGLtPHpgSTecbttQ7NsY8GtoJXGOxShQkwmC9XitWa aB4zWi7dTcXg28NIz7ULdF4B0IMoGf3Q7mLBYGUKlKJWpkW9W3dD0T0r0c/+FteW 4gLUepuMbb5/8ysrm+ObanqB4i7gSF78r37uYDFlVw8TZYM2MmlqDwBY+BBBWjQJ nSu3QlKIi1dhl0Pqxdg7U2NNqydJ7N50wgd7lnQOFsNRD96AMoCKS+rNVuYx20uO 6Y7IDCH2gPtSHETN158yPtP1+Et1wi4HfvsmAb/1XJ6d14Pg0UX63Q2Gl5XPMBKG 58IwETidYN+IKaItoo2vx34RfpNbs08NdmHhbiwrF4ZVVVMO/xfmurDIUfZeJUgt JreVtiWQxipQjq0fo3Yu8pOjlhGJpco4rfQuwo5o/PmlUbsHUW8uP/FKkEjipMpc /cKVGSXMkAK7mSHuc2bLzcJzF/NpiYgvuSu7/CfXMBWCBCtq5X1FxJb0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7OLcAfLomcF0mUFxqkG EME5GaOoTaX8R0/jQRcaMAVnHVyfz1Sumu//8U0mgKwu7UK69kOs10ZlgdZmZYiX HbCBkr4VHONnNTBlhbq5mKeaEWapOyAYsSIOBovHinGNMp/pYtCTy/oP+xHPf3nG Bfvbek8r9J2ZeUuB0LK4X6Pm2eeV6cQ8hAUSCvyCqP94KtwfEl+qCPrK324Xj91b MdSi8MoLQ6VJaiCRnAkgJzFVfM7gMAMtb6PPdAxyDBzrkNEfO0adhfNi9arh//v+ CDy9xreYLkc9L2l5+ar/cJ4nLkKMPGEQV78lWyhowx2k/xnD4Oo4vewaXRZH2yar 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 133275614215310838969526492746932145148 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 09:19:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 09:19:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iano.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19150520830505792287915914739624614889853155508701649101182093355703608490875028706526284915708877765934170008611547899448494903465789199218939658779499295645970533747761436641954887386914824965734045637194731522843396426144799349269481480283824488308205952062014523496110808243985181278457897884533784445136149979677670909724942390301960158840208703163136675349668544210654101102346545831424242726151059025298007305509772459399903705784437482613144176420903623616686010268701841139533684454639145458920320289762404733607531513864930272580543664845971459966291365550078047676094313045417431778496853432830112286813153 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iano.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iano.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 676560a378cbd68e2d7195113f2e8ef6d05ab28c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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