fidoposbancoposta.compass.it

- Compass -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1e:ec:5e:2a:61:22:6e:05:00:00:00:00:50:ff:f2:5c was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Compass

Organization: Compass
Locality: Milano
Country: IT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:ec:5e:2a:61:22:6e:05:00:00:00:00:50:ff:f2:5c
Serial Number (int): 41104131836308933346653644001697067612
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: e0:19:c9:c5:cb:16:19:b8:2a:df:7b:15:8b:f4:d4:03:ee:49:36:c3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 2c:4e:2e:40:16:b8:bd:99:97:ef:82:23:58:b6:af:27:0a:9f:67:75
Fingerprint (sha256): d9:4d:db:20:5e:ae:fc:ba:30:eb:fc:a2:79:5e:e2:bc:46:c6:54:ed:9b:49:fc:a3:53:d8:a6:d6:45:3d:f9:54

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate fidoposbancoposta.compass.it

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fidoposbancoposta.compass.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fidoposbancoposta.compass.it
www.fidoposbancoposta.compass.it
cartabancopostapiu.compass.it
fidoaffaribancoposta.compass.it
www.cartabancopostapiu.compass.it

Other certificates including the domain name compass.it

(limited to 100 certificates)
passcom.compassonline.it
wmbldi.compass.it
ds-richiesta.compass.it
richiesta.compass.it
m.compass.it
assicurazioni.compass.it
fidoposbancoposta.compass.it
cometa.compass.it
www.compass.it
mailsync.compass.it
lmm.compass.it
wmbldi.compass.it
www.compass.it
compasspay.compass.it
*.compass.it
passcom.compassonline.it
prestiti.compass.it
secure.compass.it
fidoposbancoposta.compass.it
cmiep.compass.it
compasspay.compass.it
www.compass.it
fidoposbancoposta.compass.it
www.compass.it
uploaddocumenti.compass.it
pdaH3G.compass.it
assicurazioni.compass.it
loginpage-ext.compass.it
richiesta.compass.it
www.compass.it
vodafone.compass.it
ariadipremi.compass.it
www.compass.it
richiesta.compass.it
fidoposbancoposta.compass.it
20annicarte.compass.it
www.compass.it
sviluppo.assicurazioni.compass.it
prestiti.compass.it
richiesta.compass.it
compasspay.compass.it
cartabancopostapiu.compass.it
ariadipremi.compass.it
ds-richiesta.compass.it
loginpage.compass.it
cartabancopostapiu.compass.it
promoepremi.compass.it
pdaH3G.compass.it
eap01.mediobanca.com
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
compasspay.compass.it
pdaH3G.compass.it
www.compass.it
pdaH3G.compass.it
compasspay.compass.it
fidoposbancoposta.compass.it
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
www.compass.it
welcome.compass.it
sviluppo.assicurazioni.compass.it
bol.compass.it

Certificate

The complete raw certificate details for fidoposbancoposta.compass.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/uVqwefV4Zrkcz4Am2z
Xv4WHRA7uLonXx+pMl5gMaKXHX9BpC94QFoypN3iAF9KWLivcMVGAj5TnB8BA9eG
SdnmKBXj9/hnvVyRZ9SZeKcrtkFUhLETu4wmmDACg0bDiOixzjpnTMY/Oljx6l21
PU1zGPcCB9hYqZmKwqHC8rdKEvdGw9wuZLV0Da94873UvKfvRzVLEE6EzYB6ut6N
h94kaumKlgBvCDjZuCKs6Hb3HLW7jRdhXakwwWhjAknTnQHsBFR0i+zexU1yb3J/
yaJkk9DuoVKxH9Pr57tGdvNvMVxZdPPIPAcJTESx2g4ZsK6vOds4jjvKw1CdTtMZ
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41104131836308933346653644001697067612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 08:14:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 08:44:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Compass'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fidoposbancoposta.compass.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25245483698518865782377041263136487430069563830832528714901366567186849214722884901618678069359312529304018675239009451897046000892738071700256947016881388922969719124787258543873836115618971012266249668804672181422469276235947017037186802583693562041454474522717552242537524072140641037299537905521209953894075760699112989212533849349538719162458024823500666629658966272168041316554466602868422964574364136143716199445959747316282866602793278624212190319901818966147238092855412579638927938530777118691085578344801928589701402678312889774438531146155200345440373386471808604053964222899293316753093356015554271582613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidoposbancoposta.compass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fidoposbancoposta.compass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartabancopostapiu.compass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidoaffaribancoposta.compass.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartabancopostapiu.compass.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e019c9c5cb1619b82adf7b158bf4d403ee4936c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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