DV SSL/TLS Certificate for *.skinsoulstudio.cz

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.skinsoulstudio.cz DV SSL/TLS Certificate

This certificate with serial number 3a:8a:6b:62:27:c3:72:66:69:b1:2d:18:04:06:0b:d8 for *.skinsoulstudio.cz was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.skinsoulstudio.cz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 3a:8a:6b:62:27:c3:72:66:69:b1:2d:18:04:06:0b:d8
Serial Number (int): 77813938716496640124618635566180076504
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: c9:a6:48:c8:fc:12:b4:87:15:46:57:ed:c6:72:22:3d:80:2e:d3:35
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): ab:c0:f9:41:4c:5d:da:7c:b0:bd:66:66:e0:93:60:76:63:26:c0:ca
Fingerprint (SHA-256): f1:9b:e9:0d:a1:ec:11:f5:ba:74:79:fc:92:3d:19:a6:4a:2e:ca:40:ba:37:9f:6a:e6:11:4e:05:f6:0e:ab:ac

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.skinsoulstudio.cz
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.skinsoulstudio.cz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.skinsoulstudio.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xHIsFoHGEKtfLyg7++w
xwGYuYRotJIcTXnGLn1Drodinlt0+jlbip5OjdAAvYfLK4Oxhu0IUeW7WR1ayken
/QVWOF2E9Vd5dbfOXJkvprcW27q6+SKeAtKYQKSI7u6DqfoeMSkbp4hjBMINCkSb
3XrKXw+DZ3rqIOai6mCQmLGQ1lEhM0AxOcELA3N84iVXQXQ+N1P3vp2TpnU3Vack
M80y+5Zylv/YrZ5N924xuozk1xzDLJoiwPqWe7NsNQxVcVM56PGLmqcKiuTMYRmO
cqQCQb0eDknMOy2lkKgShvxbxYCF4GK+snyggrMVs5cMADjCy1KCW9Coa2iEGMUM
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 77813938716496640124618635566180076504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-22 14:21:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-12 06:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.skinsoulstudio.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27654958375678036348739704545249999416405163413606761208781743553860140346783799858754779863853527167150101040396459534630026644765363242749841414198132407473713347174823150830455666786245169230273692905912751187631385842377722517221943479645365820394381097915887911162174694655043619012681700002873511633739635942928801377587610336133216679891399194045626242417659641552586014216891353348249346102503037104775284190367772444392647926709694453218787344074216233194005325396954530051963420264528749706726909422687752241640735287524321561265723397538340133922280298951358178606082274806298412193711307861679629666684147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skinsoulstudio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinsoulstudio.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9a648c8fc12b487154657edc672223d802ed335
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700969764bf555897adf743876837084277e9f03ad5f6a4f3366e46a43f0fcaa9c600000193eec75c370000040300483046022100c21efd45b52400d686d2d4ede2adb4095cdb21d47996a11fe61b339d0fa3ea2e022100b4bb3bd362e21d68a79903c77764c1146fa33f3af78277e4bb53b9c0397fdfe30076000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e2100000193eec75c6d0000040300473045022100b6afa8eca2693ed4472a7db2232546a95f3d119d17c4fb5387cd00911abbc14b02207bcce4e9bb5000a104f4d95e1db6a9a8adbbdf010551d7bea968d56f79c365d3007700252f94c22b29e96e9f411a72072b695c5b52ff97a90d2540bbfcdc51ec4dee0b00000193eec75c4f0000040300483046022100d17e6392cb0d73b3a1f763970b3bff2ccfcba4149c3fde0a0781bb0cabe3e0c40221008e1f08e0dd24baf80d2c013c194ef9579250e4936989fbd29b2ebbf0f3150af1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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