www.buddybank.com

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 21:5c:c6:89:f9:d6:f2:20:62:b3:23:8e:b3:91:98:be was issued on by Actalis S.p.A..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 21:5c:c6:89:f9:d6:f2:20:62:b3:23:8e:b3:91:98:be
Serial Number (int): 44346242020568836413617815423873554622
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 87:61:e0:69:cb:48:de:e5:c9:61:df:18:4a:12:6b:f4:99:c9:75:45
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 98:b6:68:6d:53:f3:09:54:86:f8:ae:cb:4a:2e:8c:d7:23:3c:0c:1e
Fingerprint (sha256): db:6d:77:ae:a0:e2:ca:0b:8d:f9:32:97:25:65:0d:80:74:1a:3f:61:7f:8a:eb:c9:ef:8a:44:2d:39:7b:ea:db

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate www.buddybank.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buddybank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buddybank.com
buddybank.it
www.buddy.unicredit.it
buddybank.com
www.buddy.unicredit.com
assets.buddybank.com
buddy.unicredit.com
www.buddybank.it
buddy.unicredit.it

Other certificates including the domain name buddybank.com

(limited to 100 certificates)
www.buddyunicredit.it
sipedge.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.buddybank.com
api.buddybank.com
www.buddy-q0.intranet.unicredit.eu
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
sipedge.unicreditgroup.eu
uat.unicredit.eu
www.buddybank.com
liveperson-uat.buddybank.com
uat.unicredit.eu
meetRP.unicreditgroup.eu
www.buddyunicredit.it
SIPextIT.unicreditgroup.eu
www.buddybank.com
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
api.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
uat.unicredit.eu
meetRP.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
www.buddybank.com
liveperson.buddybank.com
www.buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
api-uat.buddybank.com
meetRP.unicreditgroup.eu
api.buddybank.com
sipedge.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
sipedgeit.unicreditgroup.eu
SIPextIT.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
www.buddyunicredit.it
www.buddyunicredit.it
meetRP.unicreditgroup.eu
www.buddybank.com
meetRP.unicreditgroup.eu
www.buddybank.com
www.buddybank.com
www.buddybank.com
*.cloud.buddybank.com
meetRP.unicreditgroup.eu

Certificate

The complete raw certificate details for www.buddybank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSREQhfStsNK0BIhMB5n
UdkDah8BOvgN7ydCQFXG6DmGC/Rgl619Ln5IlYD0SCK4eCfqiAkyvG93q6Vx0r1F
dl47ZTMxRVWIuW1KFZfS1uZBMCqMVSsah9YE5Moh3iPyeDJ/nktNk7urYVNps+uj
IFlV4lwYuW3QZyV/rM4fmqw6v2oEXU/0lDy84ClKvH+CcdywQt9MMxtrhOlfXBBj
KWCEh96rXhRRUlSrMjg5GAGJ/M5dCwygkRIyBQjHmtjbbPrBkP5+bQahDHq9PmNk
PdrX/2spKoEtQusBz8D5jNXTahcz/VR9arFeannXzo6cNIhNiLZmhC8mBTUgTyfH
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44346242020568836413617815423873554622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 11:59:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 11:59:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.buddybank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24381876601964435332009701324136570637206268817530340880313324749950258932670141714446524412363962267245722414950428155494082720266527497124275646996615330823474512130719041767397689734158562606491448403422792723107846685681646128483841274097912847023007799060661375700667217731890827341378541730906395982984721114946917155774762510327577800875827663677758636237466790548800214136853108073612111006875645053560093434152225806929987330590973037522997186056520902733815611337074209651929836578619373199228051122206046131615742786685181917641061524042096137219785105130804813189840452015450431334826946225585298663262037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddybank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddy.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddy.unicredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy.unicredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddybank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy.unicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8761e069cb48dee5c961df184a126bf499c97545
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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