DV SSL/TLS Certificate for *.cannellagatto.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.cannellagatto.it DV SSL/TLS Certificate

This certificate with serial number 65:a6:10:e3:be:bd:c4:f3:88:c2:6e:1f:8e:02:e6:17 for *.cannellagatto.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.cannellagatto.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 65:a6:10:e3:be:bd:c4:f3:88:c2:6e:1f:8e:02:e6:17
Serial Number (int): 135114291415171402636558732719519098391
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 0b:06:f1:9c:ad:fa:a8:7b:66:53:e1:fa:d4:11:0b:bd:13:b1:5d:8c
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): a3:56:70:ac:82:68:c4:d9:de:b0:dc:f7:e6:7b:17:e2:17:2a:d4:68
Fingerprint (SHA-256): bb:32:20:7d:32:17:86:36:93:66:61:ce:ee:71:c3:cf:af:3e:31:a8:e3:12:d6:a9:6e:48:c2:f8:e5:7d:a9:72

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.cannellagatto.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.cannellagatto.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.cannellagatto.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0U7RiRYLu07b86wzLOh
6tIs3BT3RlCBMO5X6gF7vLo/LQmyHClk2x5IfVlY2C8wXPGvHf6OZum0+GIaeBjT
JKg4AmggYlIw4OA/w8h1hz7dk5jOEOjqseG7nlOQZsrFdTLON4BHU9KbTz/ngn6G
lX7JOHnieADeBsogtZ3CXJvp2H5OUZlRvgxPNbpreg+KSq3Bqoe44vh1N0CSYqKq
gEJRbvLIVG66K/hXHrW8fwj5BUpF02B06kcwftU7g8m/FVmlmWrZVrYllkXlrK99
lwsS4ZjHBlY0TTpbUF+fOwR/syzMek/scDrBILCaUa6RjJkIMd8x0Wvx+F3ksJ8H
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135114291415171402636558732719519098391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:13:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:13:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cannellagatto.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21115936273619025463729068382548020616968466820826095609254985591712156670042316359260855349023539797054104398838835331122027510169467272322618669576477348511230306912042903989071269593140547534650385923510429783669920332137656088888062295575113015562090795126377365891984084880537979511008288090499550012743144519290674728308681366138673681842166873972700819038959790334513847975413656745884766767950260720566762986410626353058321268860742083375757718246461664929867506711019924495645006623553933877096491839813009431644954852492712374247263579846564665893242695441169099165911106984624600042914667830459013124786107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannellagatto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannellagatto.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b06f19cadfaa87b6653e1fad4110bbd13b15d8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700969764bf555897adf743876837084277e9f03ad5f6a4f3366e46a43f0fcaa9c60000019502b287f100000403004830460221009b9d4d8f0cb06d524f167f5bffa27e96afae152e0eb4e42f6661faad1288b367022100c2c6da335c0b4c0f5a7da8f29eb1e7efb054355ceb9d7d260c2e04a0be82b7bc007600499c9b69de1d7cecfc36decd8764a6b85baf0a878019d15552fbe9eb29ddf8c30000019502b288240000040300473045022079c8e8a8fe140674e7ddbf79eddf9d7031d50c605830d17eafd9f519b01ab2cc022100adb45cfa75787a0c619a9037f58246c673b105449d9ce8bb3d08c7bc1731bb93007500252f94c22b29e96e9f411a72072b695c5b52ff97a90d2540bbfcdc51ec4dee0b0000019502b288060000040300463044022032aaa40cb8ffa00483b932cf9b18e94a0f8d967048f105c70bf8b75e1053dac0022050591084af451a1bba6cafb140f91f1c029066084adf70a8259c1ba44e736ddc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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