DV SSL/TLS Certificate for *.viminale-re.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.viminale-re.it DV SSL/TLS Certificate

This certificate with serial number 68:d7:4f:a2:c6:68:fe:a3:9b:fc:7a:01:84:5b:3a:87 for *.viminale-re.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.viminale-re.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 68:d7:4f:a2:c6:68:fe:a3:9b:fc:7a:01:84:5b:3a:87
Serial Number (int): 139357670592942217243928343830071032455
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 07:d5:de:dc:93:5f:5d:eb:2f:bc:d1:8b:a9:02:d2:8a:a7:be:68:7d
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 1d:8f:f6:c8:c5:2d:35:ec:dc:ef:b8:78:5c:f6:69:0c:00:6d:f0:ca
Fingerprint (SHA-256): 4a:8d:c3:e9:21:8e:0c:3b:7e:01:b6:da:a8:02:31:be:13:76:64:8a:5f:f6:4c:dc:f3:3a:26:16:cd:6c:c7:e8

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.viminale-re.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.viminale-re.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.viminale-re.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG4JXCca6meUwbXu/AMV
CZc1gbXgT/nLleRDaL3pecMkgALo+CRCQ0aPaq3vYgZLgkxZrk6MHpfJuUSpVKeY
GRXqigvdwUlBItVmYMy3KFaFgDtjulzDZ7xk9fnml1NeKKoLMS9SNXRyHan9OT8I
ORP6N+54bNd7I9VVJ+EDkAJnAh/2D0+kyuQdEYnuws0B9BHDMpWZWYCL/4FBI3tR
H+yuOdzdwH5Y2oYpogvui1WKMomtI5nSbvOtkglxnwY0p73qN6bEly7ghluMeRSs
Q9Z6hQqBWYbQ4BAMpGkCNWH/q5CCQhsLGOtx4jmafyKxMaX2HVSNcRbwxKdUN5Rh
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139357670592942217243928343830071032455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 03:19:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-05-24 03:19:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.viminale-re.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20757343065684922940285150943796471674226199654137651144583273943192831330040266322160398508054602533803905686235765476154999192496954718604580039620978863116943611360380863103152428829650518077947242435686542664200345154439163555934473751768480052268753836814461494297523923581895325600825140641672755329561461132670912651189690014311165660002685746462693805636360797868842529431583199583012695506178157212140576465461245431778659149794094331159774693683838252391338712810127789882401811566635842726207345793851912508161723737013012519242637271020130366056736704310818262388286062397580957802312292990623715501039941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viminale-re.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viminale-re.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07d5dedc935f5deb2fbcd18ba902d28aa7be687d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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