DV SSL/TLS Certificate for *.lavagettonesestriere.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.lavagettonesestriere.it DV SSL/TLS Certificate

This certificate with serial number 4b:3e:6a:e8:87:29:e7:cb:49:80:f9:b7:0a:78:73:38 for *.lavagettonesestriere.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.lavagettonesestriere.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 4b:3e:6a:e8:87:29:e7:cb:49:80:f9:b7:0a:78:73:38
Serial Number (int): 100016190447280677068274562055699723064
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: d5:08:92:6e:84:6a:22:68:4c:8e:9e:02:97:28:8e:12:84:ae:fd:b7
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 38:35:ae:dc:f1:42:2b:f5:03:c3:4d:8b:1a:9a:96:5e:a4:3a:17:fb
Fingerprint (SHA-256): d2:75:c5:3f:93:ad:e0:b4:54:05:ba:cd:7b:8f:d1:49:4b:02:68:45:e0:a8:3e:69:2f:8f:fe:1d:49:40:50:7f

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.lavagettonesestriere.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.lavagettonesestriere.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.lavagettonesestriere.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DJzE9FUFO5q6TAzCa/8
eeFvXQO/Dg56k0xkP1AUL8uJGakd+fAp4n9IL7qs3tRsJNYTYmxm23dC5ce46wFG
W67BYHa3DfFyIkbCxPMtBC3sw9juf3gZWz5KTD6wJ+I0m3G2RnqxbTVJbd8G7b/F
CfTrmp/itNg8et58DT1124x9JCsBb9zw6ZG04xazbWdTol2KbnlD/TrjGfSNBmhm
iRKntBtPd/kK2JMVoUTYHMymBhd/suCU6nprPE34xs5GOe7wc0is7iT7/dsjkOtp
6pfvaKQ4v3Z8Wi82sxK9enH54fEc7gAqLBUAB5JTGqTOiAUkOPTo9qI8XTnRyBKW
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100016190447280677068274562055699723064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 04:15:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-17 04:15:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lavagettonesestriere.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29817117558066242236733636759534688161307436677125931646224728155123747725418791886321696966805077454939319156631576868695085071738274472324126419008113222034659968132738809435000503145298498018718029641503880013891119088308674904498188176820707491856095735309119530313234088071113634990103961530178835556903734474528522811992201659637362317786620814034681600167652186418319891581714713270896656024088518937617646947717731061595592181212338127652637592283707856513906450595203709245062319888120553822571436356132009083636883951741208234103527048712755345083319928797698672475015192092108248396130764308497323416262393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavagettonesestriere.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavagettonesestriere.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d508926e846a22684c8e9e0297288e1284aefdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0092dbe0de0fdbe80ad2f590005ac79e3ed3067341c0952e526702318900c5493c2bf9051999d80a0b9662407fb10609e5966f948e20e5675fd63a6128357504a2134c15e899f91ec1abebd7c20254e72472576e8ca3d1849b9ad267fa73eb7c4d9178d9b9359f365c6a630112d8bf226ffe43a62b77f2c84fd5091ae4d55a1007a8b07d9b205ba31c4bbe16576668d9d0f1dcdad380f83496ff6b81d1dcc0d9fd4d42013e14af0e7af4b0dff76c398300b28f659ad3bad0d123eea331efe1ef1e0fb524f6367d8b3fb7aa8cff9058e11b373c37e3460042f4c4740a598c847e86cb61f2f7606b0162fbc9b2da54442c8078dbc21ddff12decb849f745a9d3b617ea561749687c77f1ee14280eb9b33cf07af282bb8ce5b04620af2297e1bdbdef9871055fdb087719583f6645548a89aab6df99f1a03f1dd6403a041dbdfc5cc34d390452ef8f8663054f39216045754a04fe5204134defc07ce7fe844e69c97500755ce431d23dda6cc581fb37d2d9c45e4a1625276653010fea9355ce5f72efb9f354110a534cab2eac449a42379fcad93e40d0622baef1d84919fdf6723c2086d7aa62978e426b0f066620c2520b5cdfd679bf64a3ac2cc6f2930d684141128525577c4a30000905ce321e41ba534c3349e03358e21ce8af90cdbf2d6a17c03d26baa8134af037269d87b9e10ec687b3aba2692f01eb44e0f41d1e9957daf7