Version: v3 Serial Number: 18297419142943872020015665806424879337 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc Organizational Unit: www.digicert.com CommonName: Thawte RSA CA 2018 Validity: Not Before: 2018-12-12 00:00 UTC Not After : 2021-02-09 12:00 UTC Subject: Country: IT Province: Milano Locality: Milano Organization: KPNQwest Italia S.p.A. CommonName: *.kpnqwest.it Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: A3:C8:5E:65:54:E5:30:78:C1:05:EA:07:0A:6A:59:CC:B9:FE:DE:5A Subject Key Identifier: D1:AD:A9:82:EE:D9:20:18:D0:AE:AB:8F:49:92:3C:FB:F8:1C:AF:0A CRL Distribution Points: http://cdp.thawte.com/ThawteRSACA2018.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://status.thawte.com Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: *.kpnqwest.it kpnqwest.it Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 365975898240302133156694451931338537107738 Signature Algorithm: ECDSA-SHA384 Issuer: Country: US Organization: Let's Encrypt CommonName: E6 Validity: Not Before: 2024-10-09 05:42 UTC Not After : 2025-01-07 05:42 UTC Subject: CommonName: 70.89.144.52.cust.ip.kpnqwest.it Subject Public Key Info: Public Key Algorithm: ECDSA Public Key: 67:D1:3A:A3:18:6D:C0:C5:1C:53:74:72:93:D3:42:5A: 31:A7:54:9F:44:DF:A7:5A:B6:90:D9:55:D0:6F:37:4A: 26:DB:BB:CC:DD:C4:01:47:9A:A5:6B:51:77:FE:52:9D: 1E:56:05:79:36:6D:60:C9:AB:C6:F0:46:13:AA:9A:38 Authority Key Identifier: 93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2 Subject Key Identifier: BE:D9:FC:D4:92:33:EA:20:5C:32:C2:F8:36:A0:E9:2A:57:EF:B8:D7 Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://e6.o.lencr.org Issuing Certificate URL: http://e6.i.lencr.org/ Key Usage: Digital Signature Extended Key Usage: Server Auth Client Auth DNS Names: 70.89.144.52.cust.ip.kpnqwest.it idiagrams.it ingconti.com matemitica.it www.idiagrams.it www.ingconti.com www.matemitica.it Certificate Signature Algorithm: ECDSA-SHA384 Certificate Signature: 30:64:02:30:3D:BC:34:41:7C:F5:84:F9:26:92:EE:63: 86:57:CE:AD:01:5D:BF:7E:50:40:6E:95:60:63:7B:B2: E0:CE:93:A4:64:56:86:E6:0A:36:78:E6:B6:18:2C:60: 39:66:4A:AB:02:30:2D:BB:EB:7F:11:20:A8:C6:CB:D6: 04:8F:ED:B5:1A:30:84:49:C8:08:78:0C:93:9E:CE:32: 71:C1:D8:08:72:84:E3:07:02:4F:9D:A6:9E:C6:25:C5: F8:FC:69:10:5A:74

Version: v3 Serial Number: 379187315106517294329375681732111080924930 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: Let's Encrypt CommonName: R11 Validity: Not Before: 2024-10-10 21:44 UTC Not After : 2025-01-08 21:44 UTC Subject: CommonName: esrever.kpnqwest.it Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9 Subject Key Identifier: 05:35:62:12:0D:3E:4F:D3:06:B4:6C:C4:A3:39:39:BD:1A:D2:C2:09 Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://r11.o.lencr.org Issuing Certificate URL: http://r11.i.lencr.org/ Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: esrever.kpnqwest.it Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 289203796565583763542164799259901126100783 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: Let's Encrypt CommonName: R10 Validity: Not Before: 2024-10-10 21:48 UTC Not After : 2025-01-08 21:48 UTC Subject: CommonName: www.kpnqwest.it Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8 Subject Key Identifier: D6:84:58:7D:C7:38:EF:54:DC:E0:1A:50:DD:A7:C4:DC:45:A6:A0:69 Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://r10.o.lencr.org Issuing Certificate URL: http://r10.i.lencr.org/ Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: www.kpnqwest.it Certificate Signature Algorithm: SHA256-RSA Certificate Signature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