*.milanolimousine.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 2e:64:14:83:2b:7a:0a:2b:3a:48:40:73:3c:9d:d6:30 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.milanolimousine.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:64:14:83:2b:7a:0a:2b:3a:48:40:73:3c:9d:d6:30
Serial Number (int): 61664133532496367711850202201749050928
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b4:ec:2e:6f:7f:91:2b:68:d4:b9:6f:08:e8:d3:9e:bf:18:57:c9:8d
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): b1:d1:26:46:22:3b:1d:85:b8:ed:70:4c:fa:e7:4e:58:3b:76:d6:fc
Fingerprint (sha256): f0:9e:28:ae:a1:78:c6:0a:64:d3:03:83:8b:92:98:ca:41:0a:de:cc:59:e9:59:35:34:df:b0:eb:1d:c5:5b:19

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.milanolimousine.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.milanolimousine.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.milanolimousine.it
milanolimousine.it

Other certificates including the domain name milanolimousine.it

(limited to 100 certificates)
*.milanolimousine.it
*.milanolimousine.it
*.milanolimousine.it
*.milanolimousine.it
*.milanolimousine.it
*.milanolimousine.it
*.milanolimousine.it
*.milanolimousine.it

Certificate

The complete raw certificate details for *.milanolimousine.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Guf8Sx0/O0MQjRiJoSF
0BXCg1PcuePSpNm0zB5/8UQF7codl/b2RGx9+818n6oy3Hh7GCUUS1J7XFEovw7C
wS3h/kZZZPXDm+zxl57nlUL4SZocvZgoHzMVcBJpjdH0UwvnSNX6L8MfjgfxZ/OJ
Gr5SKwBIIQqaVrcc9Ryx22UvB/c1fDqZF3OhYJHseIDCWZIrHxAN871JCxGsN+P1
sAMkTVVJqSE52TRV8MCVfhPH5wk3InmZm3eLjcbNG8bht3y4GuqvriqeESWwue6l
9GhyHYBd84TTSXYpu0/RmG2twyjZx56L+KMzaeo7TIyD2b0F9xbqyBorNoQU/OdW
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61664133532496367711850202201749050928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 04:56:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 04:56:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.milanolimousine.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26310639186896555585548646941572095212819341285694852177708608989667414514785260292124163508084515277604836955098883327220809143199241730490163287713933750638089063780324601347747890478047881924511507436937576610101091804464138480520664384648138969505408625297922256515943498757647424309197065518369978546450464682888741473020734098545225299892490635661013665646184613753859716726183271841745268862248929222493350900660613170274436273453628058755025443791458011220388014768261608999940805570517547432299068500524863661530365207618241579947888776714728414311126683431604992844525115950949897683868629644579015938758173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milanolimousine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanolimousine.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4ec2e6f7f912b68d4b96f08e8d39ebf1857c98d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0045ace52688ff459629039da5efd707c126e2a4a8cd765790a28cdd9b32557927858e1f5383fa4397781367ade3190e36d8257a917e26ede450eb8e36e2c44d29e2614ae41483fc64d968d1442483594a65e51ca928e7d6515bb20988226187bb3e845eb1ecacec7993f8c649a1d104b5a1780bab2fe97282dca7682d7042478e3cea917de7c0ba19ac44060bc6300869e13b9d0acbe4cbb25798f1d34e18a8e2faad0b949b4db4083586eade42f0d1a7716b9016f26ef73c27f3eb5db3854be734f21d73987ead87dc22a696de651498a2dbdd45285deda322141300a07b67a145a7425b6fb715d4bc687bb40e6a90ef4a2b9e0a4ec29147a182476cb5e60a8f34470ec2369a4d30984a7ee2c073eec3345596cba452cc023a06022f9ad5938b64f2e963d3ab033a70278da996109399f0a580974a19de4b01921d0f8d236d6485b6e58ecfef060a20ddf09c8e1e9a70e468650d3637ea61dc9f5dc09ad45486efa87332e98ef1b6c9b6f881a3df937de9c35392aacbc8102ed0ff63af413d28ad87db9d285ffc5215013b2183f69051812c2f68fa539880e7060a651da0e122f9ab0b80bff07fbbe96211c97852cc7cfbb5f287d30a04cdd42b197d79c2f71aaa0ae4850f4cb2b8b81739955640908117f090305fba0368e5baf5a4a345cb3443a761411980e8a58aecd61ca09f0a52a6ebe079bdec6b7fd5db1d7679d83212