*.valteco.eu

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 65:83:e8:6b:8b:65:4f:10:bf:1d:c3:c8:50:bf:ad:c9 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.valteco.eu

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 65:83:e8:6b:8b:65:4f:10:bf:1d:c3:c8:50:bf:ad:c9
Serial Number (int): 134936932502326893045263958860342734281
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0d:67:40:1a:ca:b2:d2:e5:a8:13:79:90:7f:e9:f1:64:1b:0a:90:1b
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): c9:e1:3e:a3:53:a5:b3:86:31:7c:c8:d7:83:26:79:2a:7a:44:5f:1d
Fingerprint (sha256): cf:a4:38:68:87:e2:b4:05:83:0e:c6:0f:ad:f0:99:f2:10:2c:25:df:f1:e4:94:24:2f:48:1d:18:78:2a:a1:6e

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.valteco.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.valteco.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.valteco.eu
valteco.eu

Other certificates including the domain name valteco.eu

(limited to 100 certificates)
*.valteco.eu
*.valteco.eu
*.valteco.eu
valteco.eu
*.valteco.eu
*.valteco.eu
valteco.eu
*.valteco.eu
valteco.eu
valteco.eu
valteco.eu
valteco.eu
*.valteco.eu
valteco.eu
*.valteco.eu
valteco.eu
valteco.eu

Certificate

The complete raw certificate details for *.valteco.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8fymbARK0hVaaV+dcbP
J/y4JDV924+vzhrKoIIyO6VqwcdLfj/lpdB5X/EF5cFDEAHc4r5uwdeUoKf6EhcV
Z08HQZkLcQSA4XY8wqs6OnunS8U9KjhtavlwPNYyjapj41fpm16lSe6Loim8e7La
/0LXugPYdxCSMDvVtthkWs2N3s/hWtoi1nS/zWaH+kSQxvhVQstTSvKoliFTqUCf
JNhiSmNUReCxkLwqan8nb2JAr5Ew28ha3WKIiJcGQoqJvYjuiEI1WA/RkvobWnoP
zx3nEF1Q3w5FnnEEa5cLSgdz/zsO088UgyrcNeYsW2Z4wqW6ge6/nfurcvk2tfau
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134936932502326893045263958860342734281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-05 05:23:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-05 05:23:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.valteco.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22190301233810208561324480974859798625783566642550608271665071912598966154278766505562094947023075984896410353002214204272547369412345081444340282898320179223469845601896708752072310643112432458463567684733328516309827834232302966364812302983524543837462277231325828454573320415305267586735483903123029647752523448956901899194327352871004747270203304308610006805219610434421929148705694408947138388895178203448877114991450759114814086487266497576476130591961998636795021522617077903026346046659789139231598813087080324912380584656291544824953179697968273088069181417923902071394273759893377783302944982080455139831463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valteco.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valteco.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d67401acab2d2e5a81379907fe9f1641b0a901b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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