*.espoarte.net

Issued by Actalis Domain Validation Server CA G2

About this certificate

This digital certificate with serial number 43:0e:cf:60:e8:c5:50:cb:16:04:c9:cb:cc:56:69:20 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.espoarte.net

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 43:0e:cf:60:e8:c5:50:cb:16:04:c9:cb:cc:56:69:20
Serial Number (int): 89135174010339470537119095320735017248
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8b:9d:3a:b5:36:39:eb:2f:11:49:11:c5:85:7a:99:ea:1c:42:42:44
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd

Fingerprint (sha1): 2f:28:f1:11:bb:0c:21:cc:87:2e:b6:93:53:81:c8:f6:2f:8e:73:9b
Fingerprint (sha256): cc:95:ce:fa:76:f3:bf:56:d5:a9:0f:ff:4a:2a:b9:19:5e:1b:1f:ea:85:f9:49:2a:19:a4:46:91:00:4b:86:a4

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL

Check the revocation status for certificate *.espoarte.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.espoarte.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.espoarte.net
espoarte.net

Other certificates including the domain name espoarte.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.espoarte.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttWz/MX0rF3ZOJQ2OIE8
OHgeWyt0AXP8jaiUlEtmx5zEbXi3mTWmSb8O1aRgWGWMfOfjgCZ5l5T0dL2nODCS
BybPMSzAieRRhByATg16MA6SSo5Z55jMEd4MJHM8pdPfT1/Mi2d+wWRHvf4W5gIM
TIEr1Mb/JYisS7wLv4d1aljVksoMi7c0FVqWJIipv+x2P/uRQepmUnueffrRuQtQ
05xCRkXw9Sp0i1rxEoCoO+P0mpQbBanME8LFjqPumKnhCRw8BqlKqKRUXkXUcmhf
JRhdNwm0p4f1zxr1spIx/VgZ4vWtFYKdRV0yrMa3HFxmbH4NPve1jxNpi67HLWZA
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89135174010339470537119095320735017248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 06:43:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 06:43:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.espoarte.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23080752418082322567783802283977894918096985512500288716794064921093553764441221473610729838553046214227470753958890704888885943470394494176858511781242712985004373067577493910032595610305834858226661319807692007975381214687442022408440861308774659256984843593414952615430859851006201327613468452331868934395969746465007513892231776968443811996189817094651178472218316725790374608327490641664822587059653323409360029807271997619447707199791959058766305374889135502985921691752025897033441666403902759568360236696061977075700071597299261821848412898117175505943858881115202034871668944784533953315859204837419348541479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espoarte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espoarte.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b9d3ab53639eb2f114911c5857a99ea1c424244
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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