www.in.mediobanca.com

- Mediobanca Innovation Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 35:7c:ff:d4:1c:a8:50:7d:00:00:00:00:51:00:98:35 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mediobanca Innovation Services

Organization: Mediobanca Innovation Services
Locality: Milano
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:7c:ff:d4:1c:a8:50:7d:00:00:00:00:51:00:98:35
Serial Number (int): 71098117406747303997691790532391508021
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 87:98:5a:1d:f6:e0:e6:6d:da:e5:63:62:09:0e:bd:9e:a7:5e:00:d6
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c1:ec:1c:f5:dc:69:aa:09:9b:14:36:64:40:43:2a:ef:2a:16:1e:78
Fingerprint (sha256): d7:01:96:f4:fa:0a:65:45:43:80:89:4a:42:e1:23:6c:3b:27:e1:d5:4d:29:99:8c:d7:8e:e3:41:8f:85:44:a0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.in.mediobanca.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.in.mediobanca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.in.mediobanca.com
in.mediobanca.com

Other certificates including the domain name mediobanca.com

(limited to 100 certificates)
*.mediobanca.com
www.in.mediobanca.com
mediobancasustainablefinancehub.mediobanca.com
vdi.mediobanca.com
www.in.mediobanca.com
abaco.mediobanca.com
www.in.mediobanca.com
lifetime.mediobanca.com
lifetime-prd.int.mediobanca.com
lm.mis.mediobanca.com
events.mediobanca.com
mediobanca.com
www.mediobanca.com
*.int.mediobanca.com
mediobanca.com
*.int.mediobanca.com
*.mis.mediobanca.com
*.mis.mediobanca.com
xpise01.mis.mediobanca.com
mediobanca.com
mediobanca.com
intunegwexc.mis.mediobanca.com
www.mediobanca.com
digiventsm1.mediobanca.com
*.mis.mediobanca.com
idgfunc.mis.mediobanca.com
intranetmb.mediobanca.com
*.mis.mediobanca.com
research.mediobanca.com
xpise01.mis.mediobanca.com
xpise02.mis.mediobanca.com
dbw-fmipoc.mis.mediobanca.com
idgtoc.mis.mediobanca.com
events.mediobanca.com
*.mis.mediobanca.com
www.mediobanca.com
vdi.mediobanca.com
*.mis.mediobanca.com
board.mediobanca.com
*.mediobanca.com
mediobanca.com
idgtoc.mis.mediobanca.com
aodocs.integration.mediobanca.com
mdm.mediobanca.com
www.mediobanca.com
archiviostorico.mediobanca.com
abaco.mediobanca.com
intranetmb.mediobanca.com
lifetime-svi.int.mediobanca.com
eap01.mediobanca.com
lifetime.int.mediobanca.com
mediobanca.com
archiviostorico.mediobanca.com
lifetime-col.int.mediobanca.com
mxm.mis.mediobanca.com
aodocs-cert.integration.mediobanca.com
www.in.mediobanca.com
lm.mis.mediobanca.com
aodocs-cert.integration.mediobanca.com
xpise02.mis.mediobanca.com
mediobanca.com
www.in.mediobanca.com
*.mediobanca.com
idgfunc.mis.mediobanca.com
*.mediobanca.com
lifetime-svi.mediobanca.com
aodocs.integration.mediobanca.com
ndes.mis.mediobanca.com

Certificate

The complete raw certificate details for www.in.mediobanca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+in43pYZ5bDC9ccUGwh
onoXHXrJcXemcO4q6D7dqRGCBzgPvJGEQxFwEYn2xbESivAAy7wADdPUKxrAbYke
kED0Q+Gd6SFCdrbyrZ8cxNyyJo1LhYfD4eFJBvFqLuAheYz+Ggm3BITtm8O+CL8e
+pdkuDkCHypYrwNWNLex1INDaBnSf4E5G4emzHfz6LUBomNAPSxFgvbh+JNK8tWF
o2rkvETSbJVEWyp9YUuQosw+7e2Pb6twvdw9pS2LMrF6SeM64pqywvVDi+OJ/MY7
D2vgYEopleqIcXLoKMZu+FWg4o+m8dhgaX4iUZEDQRP/Rfp88e1zIGgd/GkF5dox
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71098117406747303997691790532391508021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 14:54:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 15:24:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mediobanca Innovation Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.in.mediobanca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30285681745088272951328387108312460815464291147267819938384393273550844311436723087483869947317059345627838752628864237695715952307773281506602209045672371947700934130628893329927571815530697369431106066056615016870424359560099030706626900231886897528678967518282335471369415724109143675684980603527274681112618908694015534086926514655844580175142902908379170071051953880459137010919883410585178879337181076836071213601911912290291142529751787654552956883173096892265750163388294854396602819054387254577186483479500848170155890061576559287725457542021554515630886489108213104161499162716203828117010929183545234174247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.in.mediobanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.mediobanca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87985a1df6e0e66ddae56362090ebd9ea75e00d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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