webmail.pec.pasiandiprato.net

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 27:3f:bb:d1:24:fe:b7:24:f1:18:e7:01:37:9c:20:7b was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webmail.pec.pasiandiprato.net

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 27:3f:bb:d1:24:fe:b7:24:f1:18:e7:01:37:9c:20:7b
Serial Number (int): 52170815918430653913734311444431511675
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3a:6b:98:8c:01:00:5f:a9:79:15:09:70:6c:1f:9b:d0:7c:89:88:6d
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 7d:70:06:3b:99:2d:60:bf:c3:12:68:ef:de:7c:2f:bd:82:27:bb:9b
Fingerprint (sha256): d1:06:1d:66:9d:c4:69:8e:41:9f:1f:c3:4f:97:0f:7a:04:60:a0:d6:ad:1e:5c:16:88:dd:5e:07:61:69:f1:5b

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate webmail.pec.pasiandiprato.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.pec.pasiandiprato.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.pec.pasiandiprato.net

Other certificates including the domain name pasiandiprato.net

(limited to 100 certificates)
smtps.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
pop3s.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
imaps.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
webmail.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net
smtps.pec.pasiandiprato.net
gestionemail.pec.pasiandiprato.net

Certificate

The complete raw certificate details for webmail.pec.pasiandiprato.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ZMNfccUjcIeEFqeFUG
s/AA+lDvTm/zbPVb2PgqxbsAC6uEZHp3QpvJQRJS5OXU6n+SuteSh1VLqop/28dQ
owOW/RgBfk4mNM42a/as3CmG9dPUTesOUmWA7ehXGCITo84uXQDkAV6KPv2UyoYs
nKQ3FUJa4q/FQ/N0HFCwv0yiku5deemTKKBozIydOoFB2seZNHcHxoptqLvNuEQ2
Ltiq7Yke0mzC3//clqC+AXWH9fB1/53EHLfIG7ejJgpBJ8fqPvYsntYtxYFEVzey
6OLYLmnNNbxT1rv6GRXTha2f/tLj/HktJ+Df+GDrAxMWYZM9eTkmzCPG+P5+YWMr
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52170815918430653913734311444431511675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.pec.pasiandiprato.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17092616045627272272681590093228243715502988036367319358250219916416724152582118714414425639796509009677312420853823192666566935255546092659519441238474031976395251826924966638708521976642161407907637404593170967008773861149628886655100426784193219890970103003894594360671291820960601741324110629272871403823021748683359950992017109747307484206410800653587180259915514986359840540695550367805928974009971022311010350707145085756361417578191389643586173149220388911561513727127409652580822883817764311859291498572288159647895598703362660487433936571847043638313056302355864722356576016310353412102893538688423004679137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pec.pasiandiprato.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a6b988c01005fa9791509706c1f9bd07c89886d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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