www.unicredit.it

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 72:95:ad:22:9c:6a:1d:ee:81:59:3f:d5:c6:f6:0e:f1 was issued on by Actalis S.p.A..

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 72:95:ad:22:9c:6a:1d:ee:81:59:3f:d5:c6:f6:0e:f1
Serial Number (int): 152309155350429005068938495147367599857
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d8:4e:79:15:02:65:07:99:5c:d1:dd:09:47:90:b8:8c:72:60:fa:f0
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 39:f2:2f:5e:ce:de:2b:bc:05:03:fe:15:22:02:cb:bb:40:8d:c8:52
Fingerprint (sha256): dc:08:d7:8e:10:23:23:c1:43:95:40:f7:d2:17:45:c0:a1:d6:8e:6c:7b:83:74:42:fe:ad:a6:44:96:64:35:ce

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate www.unicredit.it

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.unicredit.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.unicreditcard.it
online.unicreditcorporate.it
gdo.unicreditimpresa.it
confidi.unicredit.it
www.unicreditfactoring.it
landing.unicredit.it
forms.unicredit.it
homebanking-ucfin.unicredit.it
www.unibanking.it
onlinesmallbusiness.unicredit.it
unicredit.it
openaccount.unicredit.it
ilmiodono.it
lifedesk.unicredit.it
mkt.unicredit.it
unicred.it
online-private.unicredit.it
www.geticket.it
www.ilmiodono.it
openaccount-online.unicredit.it
unigeb.unicreditcorporate.it
www.landing.unicredit.it
geb.unicredit.it
www.ucf.it
online-retail.unicredit.it
online-smallbusiness.unicredit.it
geticket.it
www.unicredit.it
formsucfin.unicredit.it

Other certificates including the domain name unicredit.it

(limited to 100 certificates)
gestionedelibere.unicredit.it
www.unicredit.it
processihr.unicredit.it
api.f4p.uat.unicredit.it
res-findata-uj-v3.unicredit.it
content.unicredit.it
www.empbw.unicredit.it
openaccount.unicredit.it
online-smallbusiness.unicredit.it
more.unicredit.it
www.premiocerto.unicredit.it
unica.unicredit.it
tls12.unicredit.it
ebanking.qc.unicreditgroup.de
globe.unicredit.it
akamai-san133.exacttarget.com
assistenza.unicredit.it
ucilearning.unicredit.it
finance.unicredit.it
www.unicredit.it
media.investimenti.unicredit.it
bankingonline-uccmb.unicredit.it
corporateportal.unicreditgroup.eu
mail.unicredit.it
clubgrandiaziende.unicredit.it
msite.unicredit.it
shop.unicredit.it
mbv.unicredit.it
pagamenti.unicredit.it
shop.unicredit.it
m.unicredit.it
trasparenza.unicredit.it
push.unicredit.it
onlineretail.unicredit.it
push2.onemarkets.de
www.circoloUdine.unicredit.it
geb.unicredit.it
unicredit.it
finance.unicredit.it
www.circoloBari.unicredit.it
m-uat.unicredit.it
imprendo.unicredit.it
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
clubgrandiaziende.unicredit.it
lifedesk.unicredit.it
mailing.unicredit.it
www.circoloGenova.unicredit.it
www.landing.unicredit.it
res-findata-m-v2.unicredit.it
guest-wifi-mi.unicredit.it
mlocator.unicredit.it
digital.api.unicredit.it
www.landing.unicredit.it
ebank1.unicredit.it
assistenza.unicredit.it
ucilearning.unicredit.it
dimensionesociale.unicredit.it
mailing.unicredit.it
online-subitobanca.unicredit.it
online-retail.unicredit.it
www.unicredit.it
push2.onemarkets.de
sha2.unicredit.it
www.unicredit.it
corporateportal.unicreditgroup.eu
push.unicredit.it
openaccount-online.unicredit.it
trasparenza.unicredit.it
confidi.unicredit.it
www.buddybank.com
more.unicredit.it
ucilearning.unicredit.it
onlineretailbank.unicredit.it
www.unicredit.it
cyberfunds.unicredit.it
www.unicredit.it
unicredit.it
pagamenti.unicredit.it
newrsvp.unicredit.it
likeu.validazione.unicredit.it
mail.unicreditgroup.eu
click.aziende.unicredit.it
processihr.unicredit.it
onlineretailbank.unicredit.it
private.unicredit.it
online-retail.unicredit.it
www.unicredit.it
www.investimenti.unicredit.it
invoicecomm.unicredit.it
www.landing.unicredit.it
ial.unicredit.it
bankingonline-uccmb.unicredit.it
in-formati.unicredit.it
ebanking.unicreditgroup.de
www.circoloAncona.unicredit.it
mailing.unicredit.it
online-smallbusiness.unicredit.it
confidi.unicredit.it
www.circoloVerona.unicredit.it

Certificate

The complete raw certificate details for www.unicredit.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPGKYXHU+FA7tMAHBT+L
UG8rMu0JRFPVyEHj+xJusxEmWcDFguSXuU+bD+9rfpxvq4iiy8Y3mQBzr7lRf77t
/+vs69qRlOwQ8KMCw9sbULOH55ggjGpBMlA1n8tFH7EcKX0s1n5oOlUdoHKV5XQ1
I49nj1rUI/NwkgCgKu1xfJV/pVs6RbHRz7kGTjUIHRw9JvBwKgrnL7zG2+CNSsw/
HxWY8KoOoNI5Z6nTrA4amcdKLwz8HhCjHLSX9veYCil6k318mipybEWjj1EB0MlI
gR1CBodinBxaaAtCOts67uJnrdMDt4XUqFTuf4mzJzIonEZgBXixiDRo0oxEmBST
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152309155350429005068938495147367599857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 14:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-12 14:00:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.unicredit.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20317236878691419560449614109200008857758462748757337998243226461458515182053716019375366941064966199452360803333892625467072240186075065045489655497777054678660839999479921054990677707941549216887076552003258276419368835150164917053980225077571725769071378386402252595835717994904539432075717649737597507101796809928979528590955512317539399285423450674909686191149224776510196994532184484917681191599181994128263479515988352241044665306776818399511262358937754577127825722487982121056049071494759534789986759300607812083883749122534177430269993498022503089427461228042299849351656918405415815331818792273092082439009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (669 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.unicreditcard.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.unicreditcorporate.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdo.unicreditimpresa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confidi.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicreditfactoring.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homebanking-ucfin.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unibanking.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinesmallbusiness.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openaccount.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilmiodono.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifedesk.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicred.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-private.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geticket.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilmiodono.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openaccount-online.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unigeb.unicreditcorporate.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landing.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geb.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-retail.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-smallbusiness.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geticket.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsucfin.unicredit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d84e7915026507995cd1dd094790b88c7260faf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018e330013290000040300483046022100b9ea1449f53af9c6a8832d04f3e6b9da42d87d319d0fe39b57eac0d57744689b022100a7a4cd35dea040518ae39ddc8fbceb6459f33f1b478c4d4f213b30f4d7e753f7007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e330014410000040300483046022100e03dfe85e660b6a25bee550b777d7a4a62d120580e7b2ceee591db21143aa9af022100f1d087a25628042fdfc0fa5e8f6a433162c8e293afa10c52e52e5a2b6a1e9b1b007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018e330013e40000040300483046022100c8f42f0d45e37b9633058c21314f8a7d033f09c18ca55379f6a02b5ba348515c022100febeeb49968d3fae0bfbb3520b9007fe5f6fffebd888fb7e467b3a0c99d1bcd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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