zzeta.pointersoft.it

Issued by R3

About this certificate

This digital certificate with serial number 04:86:01:58:59:87:d7:4c:a6:fe:82:89:6e:05:f8:24:c5:35 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zzeta.pointersoft.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:86:01:58:59:87:d7:4c:a6:fe:82:89:6e:05:f8:24:c5:35
Serial Number (int): 394048768860462965279797958426103732553013
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:df:8d:a4:ca:9e:96:8c:91:8b:5e:33:89:40:f9:d5:ad:4a:ce:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:ab:d2:08:3f:15:07:17:7e:69:85:7b:ee:5c:f7:c7:36:c3:23:fa
Fingerprint (sha256): d8:4e:1e:87:96:d3:08:d9:ac:2f:d3:ec:c7:de:ef:bd:0e:77:22:42:0c:5c:64:e7:09:e8:1c:27:ed:5f:9e:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zzeta.pointersoft.it

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zzeta.pointersoft.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbonamenti.stampamedia.net
abbonamentidigitali.com
abbonamentidigitali.it
astebusiness.news
biplano.it
catalogoarredamento.com
cogest.info
directjob.it
edicola.ratio.it
edicoladigitale.it
idrogeno.info
ilpoligrafico.it
primapagina.info
print4pack.it
southern-european-print-congress.com
tettodilegno.it
veicolielettrici.com
videolavoro.it
webaziende.net
xplor.it
zusieditore.com
zzeta.pointersoft.it

Other certificates including the domain name pointersoft.it

(limited to 100 certificates)
zzeta.pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
www.pointersoft.it
howto.pointersoft.it
pointersoft.it
www.pointersoft.it
www.pointersoft.it
pointersoft.it
zzeta.pointersoft.it
www.pointersoft.it
zzeta.pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
zzeta.pointersoft.it
pointersoft.it
www.pointersoft.it
zzeta.pointersoft.it
pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it
www.pointersoft.it
pointersoft.it
pointersoft.it
www.pointersoft.it

Certificate

The complete raw certificate details for zzeta.pointersoft.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfqTIkO1v7LVvoNEYqje
V6l6K4MvzG/0UftXxTkNwztN1XClVKzJcccIUAIzd7M2HnDTA+aJeZnks+eAbftC
5/K1bHa9OtZTtWHAeIyLk1B+PKKbspViWhxP7estU7bRv0FQc9QbwTPPYLmR88a5
I7DR0f3ZzkvBczIIzvYQ/zEd/5UG6xeHOBNQYA+Fjiy4WGzza8szzWWeohUSz3LD
LxIknDDVM+5YHn11+7StjT9pIYHTI2DEbtvgtz38Vk0xpURG9pxYbV+LjD8ROZOx
Aq4Y4Tac6KOV9xGIYpctoH9jJ2iUvKD3jMFPf/WIQEHmEucdQhWVNEZASXHrimQb
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394048768860462965279797958426103732553013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 09:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 09:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zzeta.pointersoft.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22467742989324232149538501149112003424971909227108443385660016219045133703004389562606464076307532593561544940070588653658237213819796762127403585329161493602432825689925681032095909000483666150138050671549302002052179499486650524966070978305948349286429378249489957894163946662617891234621628959495751638271535245844027101443696163358854903912845869193253340486228177461758076040409203284377024121359462355425382577996397511134277060391598018059160090539915153440190086595414167381706399242017303095310241050657917258973749705882395835253571814357194572453918349804075150429944712837506219742293514206307611744410617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33df8da4ca9e968c918b5e338940f9d5ad4ace4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (427 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamenti.stampamedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamentidigitali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbonamentidigitali.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astebusiness.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biplano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogoarredamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogest.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directjob.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicola.ratio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicoladigitale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrogeno.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilpoligrafico.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primapagina.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print4pack.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southern-european-print-congress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tettodilegno.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veicolielettrici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videolavoro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaziende.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xplor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zusieditore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzeta.pointersoft.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c1fac154300000403004630440220690a8560bc14c5d26b35627af4b1df22fa1cab2c5f7f08fa0ba4e0748cfee99a02202e03cbedfe42efe507c234a7089b497bd7259667410f326e7b447e881228fde300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1fac17380000040300473045022100975158fa84e87c79490f4897abf60382962eb551f9ed0f15982b79fd05444e5f02202e1c2a7fd61cc834cf4d85bc5920097cb50d7424fa87e35e0586cdadcab0ce80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c927c4bf412d8d258868337295f8d6377fa4efd699b4dbdcaf0b4a05070301f51cb4db79520c689e112aaf76d16cb07abbc8df08e27b21bf9504833b68a1150f67623e62da60a5a4eeb0fd9bb66c58d80a2b5bff9d15d3e09f872892b3ca61d0388bf7576f08b0100143467b30ac72a601ad6298fdf1e02ce35c7f7c2b4f1195dd73fe7c7e705eb4abc6bc209ac09a02abf3b1c4dfc5948f3702290122bc0dd6f808954673717a39eb1f13079c72b9e8dbb6df6f17c64aa37a878fc56555c19b7ade149f46e0d94d33fbe118dc4a13384d1d4fe690dae69fe4a0e0a5bdd58b036af493d451c23ea3a0c62015b07671226777edc94bda44daa2ebd170e4f228e