DV SSL/TLS Certificate for *.penelopeumbria.org

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.penelopeumbria.org DV SSL/TLS Certificate

This certificate with serial number 63:42:cd:b7:59:4f:20:36:b9:b6:fb:fb:3b:e5:71:c2 for *.penelopeumbria.org was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.penelopeumbria.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 63:42:cd:b7:59:4f:20:36:b9:b6:fb:fb:3b:e5:71:c2
Serial Number (int): 131940435595732281882853659560047374786
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: fe:25:7d:dd:ac:21:e1:65:73:d4:66:ad:6a:eb:4e:d9:1b:7e:b7:7a
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 91:d8:05:f2:5a:9d:29:77:b7:0b:3e:48:03:6b:5b:d0:3e:1f:30:97
Fingerprint (SHA-256): 2f:15:e5:aa:5f:1b:2b:c4:63:ff:c2:af:55:99:d7:46:60:2e:f7:85:0b:32:df:30:1d:d3:c8:52:39:f6:50:00

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.penelopeumbria.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.penelopeumbria.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.penelopeumbria.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB4TAxpKnDZ8ut8cwRda
jyLBTv+o1ea91go/nmbQo5/CglaVgl5g0Ttw65Lzfzx+vj+LHYibInZAD23tuJ8u
5f+tZs51/uKptjJJQbev0U2J3jBm1kBfIvuzSR7tjeuoaHaVXcrXARUyBtNYevSq
53sZnfJU1XMmRUxZc4o+EkQatP5i97a1bTmVXpk/PAT9O9BC29Tm2pTH7u4vcIVv
WWW66IdkN/E1m7vYakburBbvmNJvVzNuOkJXnl3dphD/HXimJvJ85U+grZD5J7Oj
lW+qwNlkQ/ngsZuSbMSzE92zMzJrmBtWa4gEt/nzboZNNCjYEt9u2Af2weXsdsw7
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131940435595732281882853659560047374786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 03:11:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-05-24 03:11:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.penelopeumbria.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19203052528179725178895093188545651141900845456682101679405513244207871731603532187188036486352197877533815587843166470145697359111417341698397057405832922911211064879881911240241517079903392852381656266558877246629535788937038577140018880636387453566716816403538380538752555133314470841797331287647857709513338578736259015820622228237016476315166897400725475861158952462095153493534665626113949748155960637115180776689125485904691664483198260938589866925601161268460019718841810387640812205352392540294076031507825127610367118121445755269931276290731085269497826980710600505466200018416539480958754030047092978498549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penelopeumbria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penelopeumbria.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe257dddac21e16573d466ad6aeb4ed91b7eb77a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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