actalis-authovg3: CN=Actalis Organization Validated Server CA G3,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacert.actalis.it/certs/actalis-authovg3 (DER format)
  • Serial number: 122596603330065533063916080066717517137
  • SHA-1 Fingerprint: bad74f4d7ab128a49460692416540b5aeaa6b46a
  • SHA-1 Fingerprint: ba:d7:4f:4d:7a:b1:28:a4:94:60:69:24:16:54:0b:5a:ea:a6:b4:6a
  • SHA-256 Fingerprint: 931aaa1ec9b2ba0fa59a82302f4f830628c86d9b2d2a50a4d1b2ce895c4cc648
  • SHA-256 Fingerprint: 93:1a:aa:1e:c9:b2:ba:0f:a5:9a:82:30:2f:4f:83:06:28:c8:6d:9b:2d:2a:50:a4:d1:b2:ce:89:5c:4c:c6:48
  • Signature hash algorithm: sha256
  • Subject: CN=Actalis Organization Validated Server CA G3,O=Actalis S.p.A.,L=Ponte San Pietro,ST=Bergamo,C=IT
  • Not valid before: 2020-07-06 07:20:55
  • Not valid after: 2030-09-22 11:22:02
  • Issuer:
    • Issuer name: CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacert.actalis.it/certs/actalis-authovg3 --output cert.crt

Download certificate through wget:

wget -q http://cacert.actalis.it/certs/actalis-authovg3 --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:3f:37:ad:fc:28:fe:0f:cf:d3:ab:f8:3f:85:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
        Validity
            Not Before: Jul  6 07:20:55 2020 GMT
            Not After : Sep 22 11:22:02 2030 GMT
        Subject: C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis S.p.A., CN=Actalis Organization Validated Server CA G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b3:bd:c2:87:eb:76:a3:09:b7:6b:24:e4:ca:ac:
                    b4:38:fb:82:4e:2c:9b:c5:3c:92:e1:c5:38:cb:4b:
                    76:44:64:b0:08:d8:cb:87:fa:dc:ba:d3:b4:ca:8a:
                    e2:67:15:6d:3e:b3:4c:70:84:50:e7:8e:01:42:11:
                    c5:b7:fc:a9:5b:b7:be:b7:cc:16:2a:b1:da:af:70:
                    64:2b:04:94:6e:a3:70:a4:35:8f:d5:b5:ec:ec:82:
                    53:56:11:d7:58:60:26:ec:09:35:16:1a:eb:06:6b:
                    57:93:c4:2d:77:34:f3:0c:3b:b1:7c:50:4a:ee:c0:
                    8b:37:42:5d:aa:8a:9b:d5:5d:73:df:0b:16:a8:0b:
                    eb:e0:a9:52:08:55:b4:e4:d8:78:6d:a5:a6:fe:45:
                    ce:99:bf:14:f9:74:7a:91:49:ae:a1:5b:e2:6b:78:
                    81:86:8b:51:4f:30:07:4c:ef:52:59:69:20:8d:37:
                    22:af:f9:e1:06:fc:8b:d9:1a:2a:92:06:32:3f:f9:
                    39:d1:bc:e7:69:53:86:16:71:56:cd:f9:74:5e:7a:
                    cc:fe:c6:a5:7c:20:61:3b:4f:f5:bc:d6:a8:53:c7:
                    a5:47:a0:2d:6d:d0:85:02:ea:60:43:2f:79:1a:e1:
                    48:45:54:bc:9f:f7:05:d1:0b:a9:7c:f8:d4:97:e9:
                    06:48:bc:ef:18:07:3e:ea:83:44:6a:5a:40:84:a2:
                    12:ff:e3:f4:b8:e0:f3:46:b4:bd:12:ad:16:5f:58:
                    92:8f:a2:87:b5:03:0d:37:86:4a:b1:2e:27:b2:eb:
                    d8:09:a8:67:01:cd:10:c1:0c:a8:76:e0:16:89:4f:
                    f2:9e:15:3d:59:32:04:7b:55:48:a0:40:c4:ef:d3:
                    4f:38:8d:bf:f3:44:6a:6d:9a:9d:a4:02:94:69:fd:
                    05:be:ea:95:5e:11:1c:8e:22:49:bb:e7:74:c3:d6:
                    0d:6f:b8:2e:ad:de:b1:91:a4:97:7a:65:bf:7c:fe:
                    22:74:18:8d:91:df:1a:09:50:1d:b2:11:90:62:7e:
                    b2:87:e9:da:d0:bb:b9:20:6f:3c:67:69:12:20:57:
                    17:0e:dc:32:ce:37:31:91:6f:3a:a7:09:0e:e8:67:
                    a4:12:89:95:04:d2:9c:bf:40:9e:cb:64:a6:7f:cb:
                    a1:a5:99:35:e5:34:82:7b:21:43:ad:90:56:1f:d3:
                    ac:0e:cb:7f:4e:78:73:a4:dd:79:e8:7b:b0:dc:cd:
                    d1:45:d1:1e:82:dd:f7:7d:cc:8f:ca:48:2d:d0:74:
                    e1:c6:b1:2f:f4:3c:0e:ce:1b:3a:94:24:39:44:d4:
                    09:3b:b6:6f:64:5d:59:8a:a8:13:14:e2:7a:be:cd:
                    71:32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0

            Authority Information Access: 
                OCSP - URI:http://ocsp05.actalis.it/VA/AUTH-ROOT

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.actalis.it/area-download

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary

                Full Name:
                  URI:http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL

            X509v3 Subject Key Identifier: 
                9F:8A:B1:B5:F1:B1:DE:82:F4:27:7C:BE:88:CD:DE:A9:43:81:A3:4B
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: sha256WithRSAEncryption
         25:bc:a0:32:72:89:e4:ce:9b:ca:be:44:72:da:b4:e4:e0:ea:
         c0:d3:2d:93:2f:13:10:5d:ce:e7:98:3a:44:78:71:6e:57:fa:
         39:e8:19:e2:e8:b8:f8:49:47:34:e2:17:8f:27:1b:7a:e5:06:
         b8:50:38:2d:27:02:0b:d7:e7:23:54:67:9f:c4:c8:d9:0e:ce:
         3f:96:16:89:f1:1f:9e:b7:69:f7:db:7f:b4:9c:d0:85:f7:62:
         ed:94:dd:45:16:59:19:5f:71:fa:0a:df:47:f4:6d:8d:3d:82:
         dc:bb:7d:5f:89:5c:6e:e4:b1:4d:e6:b7:3c:70:30:c2:2d:00:
         dd:b6:11:47:52:f9:72:23:e6:78:09:d8:b4:6f:64:a5:ab:7c:
         fd:1b:82:db:6a:31:89:96:79:15:d8:d4:eb:0a:d1:5a:40:12:
         44:b8:88:c0:d7:05:21:87:ef:a5:46:cc:58:49:5a:09:48:6a:
         68:1d:b2:62:f5:85:f2:8d:36:a6:76:98:6f:86:ef:4c:28:38:
         71:56:9b:56:7a:23:52:eb:97:1f:cd:4b:79:08:61:b1:25:cb:
         c1:c7:70:49:d7:b0:d0:d2:f8:cc:28:8d:0a:7d:90:88:36:69:
         cf:66:e2:09:60:e0:82:26:e6:5b:1b:14:50:5e:80:6e:a3:07:
         9f:0b:1d:4b:cb:ec:29:78:85:40:91:de:01:d3:40:84:0f:a4:
         c2:9a:98:01:d8:54:88:27:63:45:35:1d:b5:13:54:b9:c2:ef:
         64:43:75:38:0b:d5:63:2a:20:f7:16:02:7e:1b:64:aa:05:d0:
         44:e3:00:34:ff:99:ff:ec:9a:65:a8:5a:3f:f5:60:6a:4f:d5:
         d3:4b:1e:1d:d8:7b:17:e0:7a:87:91:d5:77:07:61:fb:5e:c4:
         da:39:7e:68:c4:df:ca:f0:45:72:0d:87:ff:d4:23:ca:5e:13:
         63:c3:56:ff:ab:f4:0c:f2:b9:da:c5:6d:f1:ad:f9:23:ee:f1:
         2c:62:cf:a2:10:25:e3:3e:a9:11:fd:8e:c6:08:cc:35:f5:d7:
         09:74:b7:de:c9:91:83:3d:5d:2d:01:68:f1:4a:40:6f:7a:df:
         f3:8c:e4:5d:aa:84:23:a4:22:d8:ff:b9:a6:26:d5:15:08:a0:
         45:b9:f8:45:c1:3e:2b:66:bf:9e:6d:8c:fe:8f:96:65:34:a2:
         a3:e1:3e:61:76:9c:9c:d9:3b:d5:57:0e:f3:66:e2:3a:87:fe:
         8c:12:93:88:2d:d7:8b:ba:c0:97:2a:66:99:ef:90:14:1c:3d:
         17:52:7c:f6:28:37:b2:65:7f:1d:a3:7c:b4:ed:25:7d:3a:6f:
         9b:b6:6f:cd:de:53:90:cb

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26