dipendentistatali.it

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number b0:08:08:e3:3d:5c:ec:cb:13:97:c7:ac:11:12:56:02 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dipendentistatali.it

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b0:08:08:e3:3d:5c:ec:cb:13:97:c7:ac:11:12:56:02
Serial Number (int): 233985845896074117202563727718094099970
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d9:c5:07:ed:96:d8:7a:2e:94:1b:e9:46:5a:a3:85:31:0e:28:82:d4
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 67:b1:22:13:5b:7f:5d:31:f2:fd:c6:e7:30:2e:53:09:ef:6f:d2:c0
Fingerprint (sha256): f6:47:1c:3e:f1:a4:c7:3f:39:c2:d3:21:fa:1b:a7:f0:36:37:43:88:6e:cd:58:aa:d2:91:31:c2:7f:de:79:1e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/f5xfzKW9N_U
CRL Distribution Point: http://crls.pki.goog/gts1p5/jDRdccxfDkA.crl

Check the revocation status for certificate dipendentistatali.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dipendentistatali.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dipendentistatali.it
*.dipendentistatali.it

Other certificates including the domain name dipendentistatali.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for dipendentistatali.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOxAze+VZJFAjkfnMGR1
O1UVAPdsDz1g9sLohuN9/YBz1jvxd9298sr44tH0MUSMR80kjnL/uur246BYWA23
jDgbKrspf7h7hnuvaa8H6QUlD0C09bIFGWkgNwoI/i5w1A8bAn9AeBucxyvldtM1
Y9IaVstBCbZJJ65tHzs9Gp5mooXm83cNVEz+n7HKsCy1UewVV/f2KJR2inL1I/pt
0sQUzodOzkvO4F7QLrxfVnD++gZbNVLfbjPpD1ga1DSKqgq2fumfP6+qvmbZeRyi
h5GfFAyvsqq23G3sxnAARUwN0+5VyNJzXVw9nbc5aWDsEmC1j5T5yyFzLMqYYn5U
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233985845896074117202563727718094099970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 12:03:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 12:03:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dipendentistatali.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20314629561096344901240835916972215466421688547904403920524939775859336546191032065216494890472197874840011335524717752951441817736116598816912465205381893291086214025635656911700488919999759668965172905522441031288550157623921038914021720595830222020110493181622880788042674729356874432157399874142211438902356209774858108360156563092097794632257257919217328090465124066826676498519137690677467854633894492588497729479284840062567046074630485565822191026841088879135967035477752093218012663620644272223444438521121697252241311631564767658474110551437172220371388868519552822883579637803398998567583376207571471717423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9c507ed96d87a2e941be9465aa385310e2882d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/f5xfzKW9N_U'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dipendentistatali.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dipendentistatali.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jDRdccxfDkA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018affef563e0000040300483046022100d28251acabb77d1c4d747347ab3e6eeedfe38f9adfdef35c3caca6e94e7d1f2b022100a97991ddce7afb257d3355d7b65a7e9fb4093c11d956bd414cf8f6c5af15ac07007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018affef561a0000040300473045022100c8c23300584c46085ad1c69fb9f95721e929b929bee7f34d0b6999239a7e43b502200975826ebd90d82a9ea759914e972316d7f9bf8c9bd5f50197cbad391ec807e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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