DV SSL/TLS Certificate for *.nuovagtfabbro.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.nuovagtfabbro.it DV SSL/TLS Certificate

This certificate with serial number 41:ac:0d:cd:53:98:a0:78:a3:f9:5c:62:43:29:60:d5 for *.nuovagtfabbro.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.nuovagtfabbro.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 41:ac:0d:cd:53:98:a0:78:a3:f9:5c:62:43:29:60:d5
Serial Number (int): 87293174724657455330574611279203885269
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 6b:7b:e7:82:74:4b:10:50:c3:da:dc:1e:83:60:40:ee:a5:d8:b6:f1
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 58:af:46:1f:8d:b3:b5:ce:b3:37:3e:d4:f7:9b:3d:90:c8:68:c1:31
Fingerprint (SHA-256): 84:3c:c0:c0:f1:c5:b8:fe:db:3f:71:f2:66:51:25:a4:2c:d8:bf:3c:54:58:57:2b:51:6c:9d:18:d6:c8:ad:1f

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.nuovagtfabbro.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.nuovagtfabbro.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.nuovagtfabbro.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NX5TNRxaOC2Q9x5itHh
5dlyInLruO90M+syklDfubCvu9OXqMSDk3AgEokYMPOCoGCq96LBbv36gMWlfl1w
5CYJx2mKFp2MdG+vhUAaAo7PRUX9brJ/DpCX8fb0aIPVRC0ozJxc9JA5ZOULVGgM
eT++V9B7WHG1DstdTqmyswfmEBdYuz0fEDRGiicCGz61hbnctcmYxTYI6sxCMOnE
wca4SIGkQf1OU2t3GVop7X3g1hlpJ7FAtBVreptRxQfQw4OLvA2E21oxJMnLtQe9
BS5TNbs9BD4cc3dGbQOLTqGfUQ8BWw5NSq67B3/inDx60+Dc4mM881dGpRZp84Ku
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87293174724657455330574611279203885269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 03:14:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-05-24 03:14:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nuovagtfabbro.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27877941519982536424645440110621869558318455889374599925561708178141595132190927418543573000662682022299253894885298746213550183992224023637144313943501883184520840138251367902281365618730917785362312725787216463838931425103204972404317796637884879319992949796819663457601762639616688769325511717396420543210076993551866512181959513134589325918228617388085179409078237242933258840206290063107912154900297061028476347561655060511176499092942457451175972596289858972445638144231546242012202416648318121222552527783798838834143862101883554420172017403315892333145942569425771402703814540116935387678880060125162166726351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuovagtfabbro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuovagtfabbro.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b7be782744b1050c3dadc1e836040eea5d8b6f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008fcb367b3ae0fe6f26d7689f1fe64f41977ed5e359d0e7a5185d85713ab9c2c7fbd8fe432adfca04692cb4f3348394f9d240147644457d2f87473b0313336ea6fefc348f015051b755d74fff98e58ab4fb5453bf4b9e65a6658358eecc834c738c0a986ff603ab948da8f9f0533043932d977653b4aaefc47426ae7c0cdb05eb6a93389f2665a675096baa862b1bb0f58225f3ee5f1efef678ea826e8436c3484015b6ec8c290c9dfb4998afef04a3ac889804559aff80a845e2b96ad55a5e47aedae9ab9c4f08c68ad2168a7e4c03d26d3e8cb107715d11114f80d4e7d2c639c7dd6c385ce6486f91c7c3852564cd9591c26c06baae814352939e99c399f7ef7c83fd0efe862d8818cc613f1c7fa67d2e6c080ed7b474df29083cdb22e125be9323264002ef00d9b99b6562738aed82c8158f343649cad072a4151bcb822532e55436f664a40165da2e0ce6b56485ea3ce044ff9d12af50cd8124579fcf0664b8d346a2ca3f5071b351ba975fc3c84616817f32759ba2f4fab79df99c89eb671be93dde62984170ac0b9eecf98bb00eb843549fcad8c2ebafd4452bce6b75f1236bc281f4fc6f70a9139bc150d73bf728d73db4e7c5422443e17dac84de901900adb16758e80776db7cc36a844555b10e08f45e4ac939b0823e7cf4cbb9aebec9a0e56ae01fdb5cfe29a186b5443330e5a0dfd4f5eb0a8f14829b6a83b0cee1