*.avvocato360.it

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:05:fe:9d:ef:eb:3c:b8:08:3e:d7:11:35:4d:53:a0 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.avvocato360.it

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:05:fe:9d:ef:eb:3c:b8:08:3e:d7:11:35:4d:53:a0
Serial Number (int): 13323405687253976782664347564993500064
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:3e:cb:52:eb:23:9c:e2:50:a8:d2:ef:c6:e9:a5:1a:08:e5:0d:7b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 77:e7:5c:e5:89:ac:55:3a:87:2d:d2:15:57:46:d3:31:fe:c6:0a:a9
Fingerprint (sha256): e7:60:70:a9:d2:d7:23:b1:6a:91:88:37:b4:37:10:70:a2:be:22:02:77:74:1c:c2:68:51:04:b6:e2:a8:42:5e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.avvocato360.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.avvocato360.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.avvocato360.it
avvocato360.it

Other certificates including the domain name avvocato360.it

(limited to 100 certificates)
ajuda.mkfull.com.br
ajuda.mkfull.com.br
faq.able.co.jp
faq8now.8securities.co.jp
ajuda.mkfull.com.br
*.avvocato360.it
faq.test-able.jp
sni122b7gl.wpc.edgecastcdn.net
csmfaq.refuel4.com
faqchloe.8securities.co.jp
*.avvocato360.it
ajuda.mkfull.com.br
faq.drivehub.co
faqchloe.8securities.co.jp
ajuda.mkfull.com.br
sd.itsmcorp.com
ajuda.mkfull.com.br
ajuda.mkfull.com.br
ajuda.mkfull.com.br
support.omegaedi.com
ajuda.mkfull.com.br
ajuda.mkfull.com.br
help.steadyhq.com
ajuda.mkfull.com.br
wiki.intellyo.com
help.tidy.com
ajuda.mkfull.com.br
faq.utick.net
csmfaq.refuel4.com
faq.earpeace.com
*.avvocato360.it
faq.avvocato360.it
*.avvocato360.it
help.littlepok.com
faq.persfilter.nl
*.avvocato360.it
faq.nannycherie.com
formazione.avvocato360.it
faq.nannycherie.com
faq.projectcamp.us
ajuda.mkfull.com.br
*.avvocato360.it
faq.bettr.io
faq.projectcamp.us
ajuda.mkfull.com.br
mailing.avvocato360.it
faq.drivehub.co
alerts.isl.gov.si
*.avvocato360.it
faq.hcpinsights.pro
faq.oberfell.co
ajuda.mkfull.com.br
faq.drivehub.co
ajuda.mkfull.com.br
faq.nannycherie.com
faq.chintai.net
ajuda.mkfull.com.br
*.avvocato360.it
faq.drivehub.co
faq.earpeace.com
*.avvocato360.it
faq.avvocato360.it
ajuda.mkfull.com.br
help-me.intellyo.com
*.avvocato360.it
faq.wemark.com
faq.slimwiki.com
faq.refuel4.com
ajuda.mkfull.com.br
*.avvocato360.it
sni122b7gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.avvocato360.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aI4G2ORW8fXnGt6Fn8W
M/9CZYR+hHSYyAkEtMT0MFdZsqS+wJ4/kY52he962f2Ft6fZ/2EGS+tqWtiITK/B
w4fWHn6xt2KopJpCJXvEJ5FVpyyVNbKXcsGmv1A6QxAekfdGVEZZGtTCSXVnKV1z
OjPPCqHj0c+tcQCakqtv1AkYJxAwUJawA7+3NDf4y5312w0j5N0/scI89ABy2kNJ
l614lz4j6blALXiwqNBW1rJKOBz5VXDoHFzsvVWXcpPesbDgoz184de3ngIDg79B
517ynu5cPUY4pQjBXU2YE7Q+US6BnkJxu92FB0Z8uj9EVDKEvrGCsey8X//Sw0z8
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13323405687253976782664347564993500064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avvocato360.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27978658650590669487350603284149003555168556660098025633700405601224323874141281316962666884573899491163209981409709806185851638070273702859587003857599095084346288085279124553095160706746283345973416780175499881395840750579459009910162777777797004776749695203959436856884761919067523842046663817787200743512758942926318266407394946623488939939488510194523655292341741296674076870398013792330310860159816390275180963120056484533081470322913748426744013821287263001890788749262565277312292298464812389491753631047955453407130588393201096323438178829339814879664184240615046295225721752985357241783876233687975311768597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f23ecb52eb239ce250a8d2efc6e9a51a08e50d7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avvocato360.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avvocato360.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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