ETSI 2014 - TSL HR - PDF/A-1b generator Firmato digitalmente da Ufficio ND: c=IT, o=DigitPA, givenName=Ufficio, sn=Sicurezza, serialNumber=97103420580 Data: 2016.01.14 15:40:11 +01'00' ITALIA (ITALY) : Trusted List Tsl Id: ID100001 Valid until nextUpdate value: 2016-03-23T17:00:00Z PDF generated on: Thu Jan 14 15:17:35 CET 2016 ITALIA (ITALY) - Trusted List ID: ID100001 Page 1 ETSI 2014 - TSL HR - PDF/A-1b generator TSL Scheme Information TSL Id ID100001 TSLTag http://uri.etsi.org/19612/TSLTag TSL Version Identifier 4 TSL Sequence Number 72 TSL Type http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUgeneric Scheme Operator Name Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale Street Address [ en ] Via Liszt, 21 Locality [ en ] Rome Postal Code [ en ] 00144 Country Name [ en ] IT Street Address [ it ] Via Liszt, 21 Locality [ it ] Roma Postal Code [ it ] 00144 Country Name [ it ] IT PostalAddress PostalAddress ElectronicAddress URI http://www.agid.gov.it/chiedi-allesperto URI mailto:[email protected] Scheme Name Name [ en ] ITALIA (ITALY) - Trusted List ID: ID100001 IT:Supervision/Accreditation Status List of certification services from Certification Service Providers, which are supervised/accredited by the referenced Scheme Operator’s Member State for compliance with the relevant provisions laid down in Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures. Page 2 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ it ] IT:Elenco dello status di supervisione/accreditamento dei servizi di certificazione fomiti dai prestatori di servizi di certificazione soggetti a supervisione/accreditamento da parte del gestore del regime dello Stato membro di cui in riferimento ai fini del controllo della conformità alle pertinenti disposizioni della direttiva 1999/93/CE del Parlamento europeo e del Consiglio, del 13 dicembre 1999, relativa ad un quadro comunitario per le firme elettroniche. URI [ en ] http://www.agid.gov.it/qualified-certification-service-providers URI [ it ] http://www.agid.gov.it/identita-digitali/firme-elettroniche Scheme Information URI Status Determination Approach http://uri.etsi.org/TrstSvc/TrustedList/TSLType/StatusDetn/EUappropriate Scheme Type Community Rules URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/EUcommon URI [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/IT Scheme Territory IT Policy Or Legal Notice TSL Legal Notice [ en ] The applicable legal framework for the present TSL implementation of the Trusted List of supervised/accredited Certification Service Providers for Italy is Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures and its implementation in Italy laws. TSL Legal Notice [ it ] Le norme applicabili alla presente TSL contenente i certificatori accreditati in Italia sono la Direttiva 1999/93/CE del Parlamento e del Consiglio europeo del 13 Dicembre 1999 e le norme di recepimento nazionali. Historical Information Period 65535 Pointer to other TSL - EUROPEAN UNION 1.EU TSL - MimeType: application/pdf TSL Location https://ec.europa.eu/information_society/policy/esignature/trusted-list/tl-hr.pdf EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: 1492226578499537332866138882233785298979252 ITALIA (ITALY) - Trusted List ID: ID100001 Page 3 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFKzCCBBOgAwIBAgISESFCgSJf+NfOVIYHRWWewAm0MA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNV BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9iYWxTaWduIE9y Z2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcNMTUwMzAzMDg1MTAyWhcN MTgwNDIwMTAwNTA1WjBnMQswCQYDVQQGEwJCRTEQMA4GA1UECBMHQmVsZ2l1bTERMA8GA1UEBxMI QnJ1c3NlbHMxHDAaBgNVBAoTE0V1cm9wZWFuIENvbW1pc3Npb24xFTATBgNVBAMTDGVjLmV1cm9w YS5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFBF1FjO2VA4nIvT3MtXToyfWMN FYRvJc2SIJF3pcZNZcUK9wwNL3j/lOB5+eABCTDShJf8fQgmyEcAU7gXhFw9DFgfnXsmmA1a79zz bs5KWzkmAwEE4lfSYcbJoCuUavD79oaR4v3yv7GZMVab8nXuqWvecwzQWT6sl+rx0ogh1bbeKO9w Q5lbEgRw1MLlyFH2kUieMhjCwO2nQJ9UMTaLu7px4LpZ7tlaVetY7UpMPiGAD34kct1YIoJWJllY bbz7jmALmRAdLvvu5y6Ice4H4j0kDJ/l3zLiVeCiORqrx8ngiiS1LfNSckvz2sbzjVJvXbqxYAEy tZQvwxEXdPMCAwEAAaOCAdAwggHMMA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAEQjBAMD4GBmeBDAEC AjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAX BgNVHREEEDAOggxlYy5ldXJvcGEuZXUwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9n c29yZ2FuaXphdGlvbnZhbHNoYTJnMi5jcmwwgaAGCCsGAQUFBwEBBIGTMIGQME0GCCsGAQUFBzAC hkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc29yZ2FuaXphdGlvbnZhbHNo YTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3Jn YW5pemF0aW9udmFsc2hhMmcyMB0GA1UdDgQWBBQ9lw0pOEotT5cKTF8vxu3W6ZCUhzAfBgNVHSME GDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYafDANBgkqhkiG9w0BAQsFAAOCAQEArSonov8KbE8+5Vwe wgBHhILHANLIiRmLVJ1siaRXVXL6abmMo8CjW2+VtzAQdnDkzUY6CNATs0y0qkbEcS7fvtvp8QqA iv71+jij6iDT9r9IJ1suNDeQWz6Mng98ecMVsDUzLYieeZXH049tA3hrAnscVRTu7kpT06CGbcJn oNdG7yvxx2Bs9ciVBExrqKMppVHwup23hw/IphHmifPRmXPQ3Fa5FKrqnWJw1BRBLGLOqC1mkj7J uVX108KHlwa5cGiohctnOH9dfyuQPWQecbrobwDgHl4O0Ra+bU/Z4J85YPOB/+F7rOQxRFCpv43z Pdg65pNoPppjFDE4TD2bhg== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: GlobalSign Organization Validation CA - SHA256 - G2 Issuer O: GlobalSign nv-sa Issuer C: BE Subject CN: ec.europa.eu Subject O: European Commission Subject L: Brussels Subject ST: Belgium Subject C: BE Valid from: Tue Mar 03 09:51:02 CET 2015 Valid to: Fri Apr 20 12:05:05 CEST 2018 Public Key: Certificate Policies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olicy OID: 2.23.140.1.2.2 CPS pointer: https://www.globalsign.com/repository/ Subject Alternative Name ec.europa.eu Basic Constraints IsCA: false Extended Key Usage id_kp_serverAuth CRL Distribution Points http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl Authority Info Access http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt http://ocsp2.globalsign.com/gsorganizationvalsha2g2 Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 3D:97:0D:29:38:4A:2D:4F:97:0A:4C:5F:2F:C6:ED:D6:E9:90:94:87 Page 4 ETSI 2014 - TSL HR - PDF/A-1b generator Authority Key Identifier 96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C Key Usage: digitalSignature - keyEncipherment Thumbprint algorithm: SHA-256 Thumbprint: E2:B6:C3:00:9A:FA:80:BC:AB:2E:B5:FE:C5:A2:C4:AE:06:06:AC:A2:05:BA:4E:D6:2F:2F:B7:6C :C1:1E:08:DA TSL Type http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUlistofthelists Scheme Operator Name Name [ en ] European Commission Name [ it ] Commissione Europea [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/EUlistofthelists Scheme Type Community Rules URI Scheme Territory EU Mime Type application/pdf 2.EU TSL - MimeType: application/vnd.etsi.tsl+xml TSL Location https://ec.europa.eu/information_society/policy/esignature/trusted-list/tl-mp.xml EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: 1240117 X509 Certificate -----BEGIN CERTIFICATE----MIIGIjCCBQqgAwIBAgIDEuw1MA0GCSqGSIb3DQEBCwUAME4xCzAJBgNVBAYTAkxVMRYwFAYDVQQK Ew1MdXhUcnVzdCBTLkEuMScwJQYDVQQDEx5MdXhUcnVzdCBHbG9iYWwgUXVhbGlmaWVkIENBIDIw HhcNMTUwNjI2MDgzOTAwWhcNMTgwNjI2MDgzOTAwWjCCASExCzAJBgNVBAYTAkZSMQswCQYDVQQH EwJMVTEnMCUGA1UEChMeRXVyb3BlYW4gQ29tbWlzc2lvbiBMdXhlbWJvdXJnMRMwEQYDVQQLEwow OTQ5MzgzMzQyMScwJQYDVQQDEx5QaGlsaXBwZSBKZWFuIFJlbmF1ZCBTY2huZWlkZXIxEjAQBgNV BAQTCVNjaG5laWRlcjEdMBsGA1UEKhMUUGhpbGlwcGUgSmVhbiBSZW5hdWQxHTAbBgNVBAUTFDEw MzAzOTY0MjEwMDUxNzM1NTA5MS4wLAYJKoZIhvcNAQkBFh9QaGlsaXBwZS5zY2huZWlkZXJAZWMu ZXVyb3BhLmV1MRwwGgYDVQQMExNQcm9mZXNzaW9uYWwgUGVyc29uMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAqPe/8PxHct9t5mYusk70ZSqhLUDooOZOx+PvGzWtCtnjoRgKDVfT/5E0 QJXo6mYPNOyPPW08g9/fA5Q7CHxvtB1SapHdcEX7UDl1e1KlIQF8U+VnYKcnnh90LM01qx1nKvdO oGouI4wmZ88tZveavQeJ5ynHwYARRay5Osm2sUdqnheEZMKLjIuwdd8ivD6pB0+l/vJU26wsN4rg So9tEjF7GMt/kutHXLMuqCxoCNflOkuWtMuTbxAuAwSQcperWgy4WuE39jQqLMp2x0JnQit3fKh/ e36T9BJby1zxeqkZnCTrxgkKhUrnROm5nbjhjEUPVhPl76L79pyCoY6wSwIDAQABo4ICMjCCAi4w DAYDVR0TAQH/BAIwADBiBggrBgEFBQcBAQRWMFQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmx1 eHRydXN0Lmx1MC0GCCsGAQUFBzAChiFodHRwOi8vY2EubHV4dHJ1c3QubHUvTFRHUUNBMi5jcnQw ggEeBgNVHSAEggEVMIIBETCCAQMGCCuBKwEBCgMBMIH2MIHHBggrBgEFBQcCAjCBuhqBt0x1eFRy dXN0IFF1YWxpZmllZCBDZXJ0aWZpY2F0ZSBvbiBTU0NEIENvbXBsaWFudCB3aXRoIEVUU0kgVFMg MTAxIDQ1NiBRQ1ArIGNlcnRpZmljYXRlIHBvbGljeS4gS2V5IEdlbmVyYXRpb24gYnkgQ1NQLiBT b2xlIEF1dGhvcmlzZWQgVXNhZ2U6IFN1cHBvcnQgb2YgUXVhbGlmaWVkIEVsZWN0cm9uaWMgU2ln bmF0dXJlLjAqBggrBgEFBQcCARYeaHR0cHM6Ly9yZXBvc2l0b3J5Lmx1eHRydXN0Lmx1MAgGBgQA izABATAiBggrBgEFBQcBAwQWMBQwCAYGBACORgEBMAgGBgQAjkYBBDALBgNVHQ8EBAMCBkAwHwYD VR0jBBgwFoAU75a/fWU6VbTScPgM7Eri8ycGmlIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2Ny bC5sdXh0cnVzdC5sdS9MVEdRQ0EyLmNybDARBgNVHQ4ECgQIRwFCfpjvc7YwDQYJKoZIhvcNAQEL BQADggEBAGs5hvi6PQMFQIt3xQI9ScwctWsEV6Dq3ife/bZ6UiTg5DPnm5fWTcfsbYff54PB9Bcd joTGrLCG6dD6Uyn6Qq2oD2Y9L6EuZnCtwzKWbzrVc7+aJ/n4bF/puxpMvjNnuYUlxQH6yfsAoNpS 1Xk2euqF+cQeaZt+AqdfYnLdiRBlyxUXtQYg8ROhHTIcmJNZu+qTzDSOLhBv3vyrgPwPY/KKMMQP bYBDdh4C2ltqCo9Qe0LDJvlomkqOXDbV/y5FgI2OjlF1eX9jxFnAEjI5xkpIYnLHT2QAdmy7RPlB ku4LwM8qEWpRQK6EoRomaeD48fwhS8Y7vk+KvCXzfsRs4SA= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: LuxTrust Global Qualified CA 2 ITALIA (ITALY) - Trusted List ID: ID100001 Page 5 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: LuxTrust S.A. Issuer C: LU Subject T: Professional Person Subject E: [email protected] Subject SERIAL NUMBER: 10303964210051735509 Subject GIVEN NAME: Philippe Jean Renaud Subject SURNAME: Schneider Subject CN: Philippe Jean Renaud Schneider Subject OU: 0949383342 Subject O: European Commission Luxembourg Subject L: LU Subject C: FR Valid from: Fri Jun 26 10:39:00 CEST 2015 Valid to: Tue Jun 26 10:39:00 CEST 2018 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:A8:F7:BF:F0:FC:47:72:DF:6D:E6:66:2E:B2:4E:F4:65:2A:A1:2D:40:E8:A0:E6:4E:C7:E3:EF:1B:35:AD:0A:D9:E3:A 1:18:0A:0D:57:D3:FF:91:34:40:95:E8:EA:66:0F:34:EC:8F:3D:6D:3C:83:DF:DF:03:94:3B:08:7C:6F:B4:1D:52:6A:91:DD:70:45:FB:50:39:75:7B:52:A5:21:01:7C:53:E5:67:60:A7:27:9E:1F:74:2C:CD:35:AB:1D:67:2A:F7:4E: A0:6A:2E:23:8C:26:67:CF:2D:66:F7:9A:BD:07:89:E7:29:C7:C1:80:11:45:AC:B9:3A:C9:B6:B1:47:6A:9E:17:84:64:C2:8B:8C:8B:B0:75:DF:22:BC:3E:A9:07:4F:A5:FE:F2:54:DB:AC:2C:37:8A:E0:4A:8F:6D:12:31:7B:18:C B:7F:92:EB:47:5C:B3:2E:A8:2C:68:08:D7:E5:3A:4B:96:B4:CB:93:6F:10:2E:03:04:90:72:97:AB:5A:0C:B8:5A:E1:37:F6:34:2A:2C:CA:76:C7:42:67:42:2B:77:7C:A8:7F:7B:7E:93:F4:12:5B:CB:5C:F1:7A:A9:19:9C:24:EB:C 6:09:0A:85:4A:E7:44:E9:B9:9D:B8:E1:8C:45:0F:56:13:E5:EF:A2:FB:F6:9C:82:A1:8E:B0:4B:02:03:01:00:01 Basic Constraints IsCA: false Authority Info Access http://ocsp.luxtrust.lu http://ca.luxtrust.lu/LTGQCA2.crt Certificate Policies Policy OID: 1.3.171.1.1.10.3.1 CPS text: [LuxTrust Qualified Certificate on SSCD Compliant with ETSI TS 101 456 QCP+ certificate policy. Key Generation by CSP. Sole Authorised Usage: Support of Qualified Electronic Signature.] CPS pointer: https://repository.luxtrust.lu Policy OID: 0.4.0.1456.1.1 QCStatements - crit. = false id_etsi_qcs_QcCompliance id_etsi_qcs_QcSSCD Authority Key Identifier EF:96:BF:7D:65:3A:55:B4:D2:70:F8:0C:EC:4A:E2:F3:27:06:9A:52 CRL Distribution Points http://crl.luxtrust.lu/LTGQCA2.crl ITALIA (ITALY) - Trusted List ID: ID100001 Page 6 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Key Identifier 47:01:42:7E:98:EF:73:B6 Key Usage: nonRepudiation Thumbprint algorithm: SHA-256 Thumbprint: 51:83:DB:F2:C6:1C:BF:29:EE:6A:36:CB:5B:14:8F:A9:B3:D8:2F:FD:6F:9B:80:4C:85:C6:C2:30:2F :76:AC:AD EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: 694395474722160626358886281620874695673047986886 X509 Certificate -----BEGIN CERTIFICATE----MIIGgTCCBGmgAwIBAgIUeaHFHm5f58zYv20JfspVJ3hossYwDQYJKoZIhvcNAQEFBQAwgZIxCzAJ BgNVBAYTAk5MMSAwHgYDVQQKExdRdW9WYWRpcyBUcnVzdGxpbmsgQi5WLjEoMCYGA1UECxMfSXNz dWluZyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTE3MDUGA1UEAxMuUXVvVmFkaXMgRVUgSXNzdWlu ZyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBHMjAeFw0xMzEwMzAxMjI3MTFaFw0xNjEwMzAxMjI3 MTFaMHoxCzAJBgNVBAYTAkJFMRAwDgYDVQQIEwdCcnVzc2VsMRIwEAYDVQQHEwlFdHRlcmJlZWsx HDAaBgNVBAoTE0V1cm9wZWFuIENvbW1pc3Npb24xFDASBgNVBAsTC0luZm9ybWF0aWNzMREwDwYD VQQDDAhFQ19ESUdJVDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgkkqvJmZaknQC7 c6H6LEr3dGtQ5IfOB3HAZZxOZbb8tdM1KMTO3sAifJC5HNFeIWd0727uZj+V5kBrUv36zEs+VxiN 1yJBmcJznX4J2TCyPfLk2NRELGu65VwrK2Whp8cLLANc+6pQn/5wKh23ehZm21mLXcicZ8whksUG b/h8p6NDe1cElD6veNc9CwwK2QT0G0mQiEYchqjJkqyY8HEak8t+CbIC4Rrhyxh3HI1fCK0WKS9J jbPQFbvGmfpBZuLPYZYzP4UXIqfBVYctyodcSAnSfmy6tySMqpVSRhjRn4KP0EfHlq7Ec+H3nwuq xd0M4vTJlZm+XwYJBzEFzFsCAwEAAaOCAeQwggHgMFgGA1UdIARRME8wCAYGBACLMAECMEMGCisG AQQBvlgBgxAwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5ubC9kb2N1 bWVudGVuMCQGCCsGAQUFBwEDBBgwFjAKBggrBgEFBQcLAjAIBgYEAI5GAQEwdAYIKwYBBQUHAQEE aDBmMCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wOAYIKwYBBQUH MAKGLGh0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZldWNhZzIuY3J0MEYGCiqGSIb3 LwEBCQEEODA2AgEBhjFodHRwOi8vdHNhMDEucXVvdmFkaXNnbG9iYWwuY29tL1RTUy9IdHRwVHNw U2VydmVyMBMGCiqGSIb3LwEBCQIEBTADAgEBMA4GA1UdDwEB/wQEAwIGQDAfBgNVHSMEGDAWgBTg +A751LXyf0kjtsN5x6M1H4Z6iDA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnF1b3ZhZGlz Z2xvYmFsLmNvbS9xdmV1Y2FnMi5jcmwwHQYDVR0OBBYEFDc3hgIFJTDamDEeQczI7Lot4uaVMA0G CSqGSIb3DQEBBQUAA4ICAQAZ8EZ48RgPimWY6s4LjZf0M2MfVJmNh06Jzmf6fzwYtDtQLKzIDk8Z tosqYpNNBoZIFICMZguGRAP3kuxWvwANmrb5HqyCzXThZVPJTmKEzZNhsDtKu1almYBszqX1UV7I gZp+jBZ7FyXzXrXyF1tzXQxHGobDV3AEE8vdzEZtwDGpZJPnEPCBzifdY+lrrL2rDBjbv0Veildg OP1SIlL7dh1O9f0T6T4ioS6uSdMt6b/OWjqHadsSpKry0A6pqfOqJWAhDiueqgVB7vus6o6sSmfG 4SW9EWW+BEZ510HjlQU/JL3PPmf+Xs8s00sm77LJ/T/1hMUuGp6TtDsJe+pPBpCYvpm6xu9GL20C sArFWUeQ2MSnE1jsrb00UniCKslcM63pU7I0VcnWMJQSNY28OmnFESPK6s6zqoN0ZMLhwCVnahi6 pouBwTb10M9/Anla9xOT42qxiLr14S2lHy18aLiBSQ4zJKNLqKvIrkjewSfW+00VLBYbPTmtrHpZ UWiCGiRS2SviuEmPVbdWvsBUaq7OMLIfBD4nin1FlmYnaG9TVmWkwVYDsFmQepwPDqjPs4efAxzk gUFHWn0gQFbqxRocKrCsOvCDHOHORA97UWcThmgvr0Jl7ipvP4Px//tRp08blfy4GMzYls5WF8f6 JaMrNGmpfPasd9NbpBNp7A== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: QuoVadis EU Issuing Certification Authority G2 Issuer OU: Issuing Certification Authority Issuer O: QuoVadis Trustlink B.V. Issuer C: NL Subject CN: EC_DIGIT Subject OU: Informatics Subject O: European Commission Subject L: Etterbeek Subject ST: Brussel Subject C: BE Valid from: Wed Oct 30 13:27:11 CET 2013 ITALIA (ITALY) - Trusted List ID: ID100001 Page 7 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Public Key: Certificate Policies Sun Oct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olicy OID: 0.4.0.1456.1.2 Policy OID: 1.3.6.1.4.1.8024.1.400 CPS pointer: http://www.quovadisglobal.nl/documenten QCStatements - crit. = false id_etsi_qcs_QcCompliance Authority Info Access http://ocsp.quovadisglobal.com http://trust.quovadisglobal.com/qveucag2.crt Authority Key Identifier E0:F8:0E:F9:D4:B5:F2:7F:49:23:B6:C3:79:C7:A3:35:1F:86:7A:88 CRL Distribution Points http://crl.quovadisglobal.com/qveucag2.crl Subject Key Identifier 37:37:86:02:05:25:30:DA:98:31:1E:41:CC:C8:EC:BA:2D:E2:E6:95 Key Usage: nonRepudiation Thumbprint algorithm: SHA-256 Thumbprint: F1:BC:DD:11:7B:15:54:17:38:13:A4:21:83:C5:4D:B9:7E:3A:7E:10:9D:0A:FA:98:F4:BC:D3:26:75 :4A:03:51 EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: 505234932823532549198528995630307842349301805796 X509 Certificate -----BEGIN CERTIFICATE----MIIGgDCCBGigAwIBAgIUWH+El24rfQt9YeTtrAZC9UzssuQwDQYJKoZIhvcNAQEFBQAwgZIxCzAJ BgNVBAYTAk5MMSAwHgYDVQQKExdRdW9WYWRpcyBUcnVzdGxpbmsgQi5WLjEoMCYGA1UECxMfSXNz dWluZyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTE3MDUGA1UEAxMuUXVvVmFkaXMgRVUgSXNzdWlu ZyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBHMjAeFw0xNTEyMDQxMjA5MzVaFw0xODEyMDQxMjA5 MjRaMHkxCzAJBgNVBAYTAkJFMRAwDgYDVQQIEwdCcnVzc2VsMRIwEAYDVQQHEwlFdHRlcmJlZWsx HDAaBgNVBAoTE0V1cm9wZWFuIENvbW1pc3Npb24xEzARBgNVBAsTCkRHIENPTk5FQ1QxETAPBgNV BAMMCEVDX0NORUNUMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXQoPmP4DPSZDKuH cecqX6durKKczAuiEimbZAuuOgMQ9P7g2EIWrACuwNLXKxFXikxOSJWg+nYytJ/ty+1njYa8Nmhp 4MYc4UoF3WzQCiz63atK9AuNOMrODBaAGrQNYqXyuEet+i5NaibRYPEtptXzoY0Pif6Zv3qauBlC Jnf7kbGkHq9sh8sEXnMaWGjm0EHna8NTh1LjnzCb6N2capQDt+RRrUiBee3YMST3Fo3kKQTKaBvv cYAJ4Mgs/9+Dvwm52dIaMc1vaP1MN2dUW45EWDKtaRfV9flkAy0iT8P8qvUkyGn1XBXnM/gyohOq 9cSaP09vPMX6ArmFPlQSiwIDAQABo4IB5DCCAeAwWAYDVR0gBFEwTzAIBgYEAIswAQIwQwYKKwYB BAG+WAGDEDA1MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLm5sL2RvY3Vt ZW50ZW4wJAYIKwYBBQUHAQMEGDAWMAoGCCsGAQUFBwsCMAgGBgQAjkYBATB0BggrBgEFBQcBAQRo MGYwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTA4BggrBgEFBQcw AoYsaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV1Y2FnMi5jcnQwRgYKKoZIhvcv AQEJAQQ4MDYCAQGGMWh0dHA6Ly90c2EwMS5xdW92YWRpc2dsb2JhbC5jb20vVFNTL0h0dHBUc3BT ZXJ2ZXIwEwYKKoZIhvcvAQEJAgQFMAMCAQEwDgYDVR0PAQH/BAQDAgZAMB8GA1UdIwQYMBaAFOD4 DvnUtfJ/SSO2w3nHozUfhnqIMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucXVvdmFkaXNn bG9iYWwuY29tL3F2ZXVjYWcyLmNybDAdBgNVHQ4EFgQUQX94XsDFzQFNiSGpboQqB53MiyAwDQYJ KoZIhvcNAQEFBQADggIBAJfRbSpp2RTfVtyu4G1TDVXE6RgoIQ5XrUASAmhDWktT5PJReSg5INMF xi3jSPAO7p29bEU32wllZGPVN+A9b2SZmhHyYx9ZoBTMekKlx0qHkU4FfcicIznXo9EVplMtgjpl qRltiLqxwXU5uIxKJ2R6BJwjokUWcpei1ifs14SgAve8firXwiG1kFcoClfLjyj4SuDFxT+0e/dh fGfQMfvVBp4xa5tOGYDS7kzf7xvftYlPHW1AbEzjuPmViGgen8ZD/WkuqzdygizOocFQNshGH/mF nQxT4ILAubWJX5gcvmjaZ9N/Lxh041Ra2s8YK5l1DHBcZzz6y2j9OhxPgCvzz3/71DsiGVaK/TO5 HxJNcjKlkBblXE4dgy3wqjpUzqkVltC+Xli23Ljny4tenz0QNOx3SQBA1R/hZE5QKD0L0wOc4Np1 VxGZbCWGFqta8KKhEA19KlW03Yix9aqe86iNKoJm3n/4BBgdYGu5c+DnqKWj3D7NnxCVZwuLOKzW SCEisl2kHdgnZ3Qix5Vc5QYWexSHeQfCuJAARCDvhdnOidUyiZRnQ6R4VHt0GgNQcYKrmz+UdEro SeQCuSvXIh+LIEJpayWSo9vxi3OgO2IRSi+7Kh5h7LAfWcIwpVY8u0BpRoNJg5xMjvF49GDJc1Qe KdlqCBm05N4c2d5t5/aa -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: QuoVadis EU Issuing Certification Authority G2 Issuer OU: Issuing Certification Authority ITALIA (ITALY) - Trusted List ID: ID100001 Page 8 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: QuoVadis Trustlink B.V. Issuer C: NL Subject CN: EC_CNECT Subject OU: DG CONNECT Subject O: European Commission Subject L: Etterbeek Subject ST: Brussel Subject C: BE Valid from: Fri Dec 04 13:09:35 CET 2015 Valid to: Tue Dec 04 13:09:24 CET 2018 Public Key: Certificate Policies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olicy OID: 0.4.0.1456.1.2 Policy OID: 1.3.6.1.4.1.8024.1.400 CPS pointer: http://www.quovadisglobal.nl/documenten QCStatements - crit. = false id_etsi_qcs_QcCompliance Authority Info Access http://ocsp.quovadisglobal.com http://trust.quovadisglobal.com/qveucag2.crt Authority Key Identifier E0:F8:0E:F9:D4:B5:F2:7F:49:23:B6:C3:79:C7:A3:35:1F:86:7A:88 CRL Distribution Points http://crl.quovadisglobal.com/qveucag2.crl Subject Key Identifier 41:7F:78:5E:C0:C5:CD:01:4D:89:21:A9:6E:84:2A:07:9D:CC:8B:20 Key Usage: nonRepudiation Thumbprint algorithm: SHA-256 Thumbprint: 59:C8:0D:CC:74:29:CC:FD:8C:2B:15:90:FE:88:5F:B4:F6:C7:7F:7C:9C:BB:4B:82:A6:2C:B1:C2:7 F:F4:E2:46 EU TSL digital identities TSL Scheme Operator certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 9 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 39412537426916277225789487251870326397 -----BEGIN CERTIFICATE----MIIHSDCCBTCgAwIBAgIQHaaUHzn5vENUk+T/aHIefTANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDEyMTkwODQyMzla Fw0xODEyMTkwODQyMzlaMEwxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMR8wHQYDVQQDDBYoU0lHTikgQUdOSUVTWktBIEJBSk5PMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAog6nQQcoPlHOrwXYDD+wj38lwn1zbalTTJL7yW3N7OgO9/eSCIY5nGgfnsla pC36vSO9RbSxW3cV4CJCf2nGZdsZHxNJpf4IG4CEsByui30UGFANtBPlFj/r5avf0OrDGKTI2H/6 sN2swgs43grcRFQ5yt/ZPhOIgjXjzK4s36IFMBG1GGRQUSDJo+uv3cbuBcNjdFro3Zmm9TypDv19 4f1NwXRbFOon1WtaIsJNKzw4+MKCAyD9BBVATQxGLYeCT2tZt3DFbSSXZbBfSnfwGe7eMc99S12H r/MwAPJhUwZZpienadVNlMNWxwutxcDO5HrmOdtxv8Vh9MKlAwvN4QIDAQABo4IDPzCCAzswWwYD VR0RBFQwUoEcQUdOSUVTWktBLkJBSk5PQEVDLkVVUk9QQS5FVaQyMDAxFDASBgkrBgEEAaxmAQIM BUJBSk5PMRgwFgYJKwYBBAGsZgEBDAlBR05JRVNaS0EwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC BkAwHQYDVR0OBBYEFIe8EqP5sxbiNrSKwgNC00FsSfkjMB8GA1UdIwQYMBaAFEft+GPwma9e/n4O XFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0 dHA6Ly93d3cuY2VydC5mbm10LmVzL2RwY3MvMIGLBggrBgEFBQcCAjB/DH1RdWFsaWZpZWQgY2Vy dGlmaWNhdGUuIFVuZGVyIHRoZSB1c2FnZSBjb25kaXRpb25zIGFzc2VydGVkIGluIHRoZSBGTk1U LVJDTSBDUFMgKDEwNiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLjAI BgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5j ZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jc3BSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93 d3cuY2VydC5mbm10LmVzL2NlcnRzL0lTQUNBLmNydDBGBggrBgEFBQcBAwQ6MDgwCAYGBACORgEB MAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHE MIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5jZXJ0LmZubXQuZXMvQ049Q1JMMSxjbj1J U0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/ YmFzZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL3d3dy5jZXJ0LmZu bXQuZXMvY3Jsc19JU0FjYS9DUkwxLmNybDANBgkqhkiG9w0BAQsFAAOCAgEAd2CyyRljkbR+hxMw njwzNE9q6nw29uLWx4c/kWfWGNxyjO/mbE2KhgXfUm7e441Ih87PX1p8jpTeOhtfvL8CxmsqyDg5 6GBNq5NprbagpmKHiNCP77baZiLMFfEvc915ktLlYQEH+wIe5i0gMPmRWjA2urB/M+fXwLgqQdOE e4e0NSLr7YJqHeL1sWQsS4r1zK8ZGv1uJ0v+vAmYXwFtaYYht/c9X+QtVxYaflDcBVnPBxj3xUG7 vQHe7g5/RPX4vvzAZNV9d5IBk+sCX05dRfRqsym4qw1sw4j0W2nxAfQwk3bfW6NP5SgOHfC9sh2L rC3F/wlvePY8piTXFUkRzlsEb8zWM2vfz3QRNgGbxCz3DY3kFavdEL/gnNHOg5Q4tn2TVV7YfXLE gu7zN+IqBOdlAtbJXEu60FiF9Cs35IGqwWlbeOK8QvogFYDxlgIPrs3ijEA1WHyY+GH1mofSA7u3 0wEvooCzohFf4DBv06I4q9aCNBnTo4yki1yFhBm71r60hlAas6aK6TZ+NUoFWwPypMP617SlHdy8 QlFx1s3V+rIt2hxUUGddid/FXDKtuUCRqKqx6x8J8bI7DecZsCS7ijPCApjJ84HB8UASRzdGtEwc 97hvnAqXjpCS/tHAVcVvmP3isNDu4WtV2LQfL/TIY8zMxUebv/E5JyB3KAw= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA Issuer O: FNMT-RCM Issuer C: ES Subject CN: (SIGN) AGNIESZKA BAJNO Subject O: EUROPEAN COMMISSION Subject C: BE Valid from: Fri Dec 19 09:42:39 CET 2014 Valid to: Wed Dec 19 09:42:39 CET 2018 Public Key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ubject Alternative Name [email protected] Basic Constraints IsCA: false Subject Key Identifier 87:BC:12:A3:F9:B3:16:E2:36:B4:8A:C2:03:42:D3:41:6C:49:F9:23 Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: 1.3.6.1.4.1.5734.3.4.1 CPS pointer: http://www.cert.fnmt.es/dpcs/ CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: 0.4.0.1456.1.1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 10 ETSI 2014 - TSL HR - PDF/A-1b generator Authority Info Access http://ocspISAca.cert.fnmt.es/ocspISAca/OcspResponder http://www.cert.fnmt.es/certs/ISACA.crt QCStatements - crit. = false id_etsi_qcs_QcCompliance id_etsi_qcs_RetentionPeriod: 15 id_etsi_qcs_LimiteValue Value: 200 Currency: EUR id_etsi_qcs_QcSSCD CRL Distribution Points ldap://ldapISAca.cert.fnmt.es/CN=CRL1,cn=ISA%20CA,o=FNMTRCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint http://www.cert.fnmt.es/crls_ISAca/CRL1.crl Key Usage: nonRepudiation Thumbprint algorithm: SHA-256 Thumbprint: 55:F5:07:DE:3A:84:C6:3F:29:F0:46:93:F7:30:AD:D1:73:CA:DF:A0:9B:76:AB:07:F5:F9:74:84:12: FD:9A:AA TSL Type http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUlistofthelists Scheme Operator Name Name [ en ] European Commission Name [ it ] Commissione Europea [ en ] http://uri.etsi.org/TrstSvc/TrustedList/schemerules/EUlistofthelists Scheme Type Community Rules URI Scheme Territory EU Mime Type application/vnd.etsi.tsl+xml List Issue Date Time 2016-01-13T23:00:00Z Next Update date Time 2016-03-23T17:00:00Z Distribution Points URI https://applicazioni.cnipa.gov.it/TSL/IT_TSL_signed.xml URI https://applicazioni.cnipa.gov.it/TSL/IT_TSL_HR.pdf ITALIA (ITALY) - Trusted List ID: ID100001 Page 11 ETSI 2014 - TSL HR - PDF/A-1b generator 1 - TSP: Banca d'Italia TSP Name Name [ en ] Banca d'Italia Name [ it ] Banca d'Italia Name [ en ] Banca d'Italia Name [ en ] VATIT-00950501007 Name [ it ] Banca d'Italia Name [ it ] VATIT-00950501007 Street Address [ it ] via nazionale 91 Locality [ it ] rome Postal Code [ it ] 00184 Country Name [ it ] IT Street Address [ en ] via nazionale 91 Locality [ en ] rome Postal Code [ en ] 00184 Country Name [ en ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.bancaditalia.it/footer/firmadigitale URI mailto:[email protected] TSP Information URI URI [ en ] http://www.bancaditalia.it/footer/firmadigitale URI [ it ] http://www.bancaditalia.it/footer/firmadigitale ITALIA (ITALY) - Trusted List ID: ID100001 Page 12 ETSI 2014 - TSL HR - PDF/A-1b generator 1.1 - Service : CN=Banca d'Italia,OU=Servizi di certificazione,O=Banca d'Italia/00950501007,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Banca d'Italia,OU=Servizi di certificazione,O=Banca d'Italia/00950501007,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1203955915 X509 Certificate -----BEGIN CERTIFICATE----MIIFbTCCBFWgAwIBAgIER8LoyzANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEjMCEGA1UE CgwaQmFuY2EgZCdJdGFsaWEvMDA5NTA1MDEwMDcxIjAgBgNVBAsMGVNlcnZpemkgZGkgY2VydGlm aWNhemlvbmUxFzAVBgNVBAMMDkJhbmNhIGQnSXRhbGlhMB4XDTA4MDIyNTE1NDIwM1oXDTE4MDIy NTE2MTIwM1owbzELMAkGA1UEBhMCSVQxIzAhBgNVBAoMGkJhbmNhIGQnSXRhbGlhLzAwOTUwNTAx MDA3MSIwIAYDVQQLDBlTZXJ2aXppIGRpIGNlcnRpZmljYXppb25lMRcwFQYDVQQDDA5CYW5jYSBk J0l0YWxpYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQsJb4cj0MSURQSx9KAG0Od V2hsUVIR8AxIBX1G53KX1FHKMW/cNAPobnU5YmUKRMOJuGoO2xsSSVQ3oTiOOrM4FDxI1luguehI otq4PDSux0hHnFHJ1w5VQBBtQY6g2bVCXyKApJcoYiTKZXU8EgnG/rGJkT2cz6zuIcVMvCnfXczc I7e5p9eUheMuzTSvu+LDZMktiYzY902QvLboGwo6eTQ7pJvXLPAy1JxUOQDtIenQmWUBfxZKpA1c xXQfyanzyshG6+N6xZqjdyq7egBkagIElZyhCX2NZk0+7llWOd59PaYv4R/kDAZ8LWVo9zos5WCc RV17iuUAQ3CS9GMCAwEAAaOCAg8wggILMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQD AgEGMEsGA1UdIAREMEIwQAYGK0wmAQEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuYmFuY2Fk aXRhbGlhLml0L2Zpcm1hZGlnaXRhbGUwggF3BgNVHR8EggFuMIIBajCB26CB2KCB1YaBnGxkYXA6 Ly9sZGFwLmZpcm1hZGlnaXRhbGUuYmFuY2FkaXRhbGlhLml0L2NuPUJhbmNhJTIwZCdJdGFsaWEs b3U9U2Vydml6aSUyMGRpJTIwY2VydGlmaWNhemlvbmUsbz1CYW5jYSUyMGQnSXRhbGlhLzAwOTUw NTAxMDA3LGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdIY0aHR0cDovL3d3dy5maXJtYWRp Z2l0YWxlLmJhbmNhZGl0YWxpYS5pdC9jcmwvY3JsLmNybDCBiaCBhqCBg6SBgDB+MQswCQYDVQQG EwJJVDEjMCEGA1UECgwaQmFuY2EgZCdJdGFsaWEvMDA5NTA1MDEwMDcxIjAgBgNVBAsMGVNlcnZp emkgZGkgY2VydGlmaWNhemlvbmUxFzAVBgNVBAMMDkJhbmNhIGQnSXRhbGlhMQ0wCwYDVQQDDARD UkwxMB0GA1UdDgQWBBTO3hKM9+wAqtM3BkQsBeeI6/UPMDANBgkqhkiG9w0BAQUFAAOCAQEAXGpa OMP5wICaotmxtDUrAOnBP6ydJnvjDMx632hRVCzviR9O3Ic3Zod9Q3FBt66zTvJXA8YstaYr3Mqz p6GnqGfK3bpFKliwotRXxgWyTpJmbW/h9WmqrsSUBc2TIZizRi+cpxEiTOLcNToHKEtNziAqe3ZP XdOfvDOl8jGXuLDiverLsdDQfOPCkSj/VJmQd7S6LyEZBi/j/LdolgwMIgfjTn7OCBF9Muk3bxkq do9PqFEX/hoeUI58LQqNZkfnvUVx+P6qaBwliZz3iBSWq/P+j7WM6UH0sZvCk8h6LLN0NRWnBqmQ j6XsWfa46iIgKBzp8aXTgUzF1cRKnUmclg== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Banca d'Italia Issuer OU: Servizi di certificazione Issuer O: Banca d'Italia/00950501007 Issuer C: IT Subject CN: Banca d'Italia Subject OU: Servizi di certificazione Subject O: Banca d'Italia/00950501007 Subject C: IT Valid from: Mon Feb 25 16:42:03 CET 2008 ITALIA (ITALY) - Trusted List ID: ID100001 Page 13 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Sun Feb 25 17:12:03 CET 2018 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.38.1.1.1 CPS pointer: http://www.bancaditalia.it/firmadigitale CRL Distribution Points ldap://ldap.firmadigitale.bancaditalia.it/cn=Banca%20d'Italia,ou=Servizi%20di%20certificazione,o= Banca%20d'Italia/00950501007,c=IT?certificateRevocationList http://www.firmadigitale.bancaditalia.it/crl/crl.crl C=IT,O=Banca d'Italia/00950501007,OU=Servizi di certificazione,CN=Banca d'Italia,CN=CRL1 Subject Key Identifier CE:DE:12:8C:F7:EC:00:AA:D3:37:06:44:2C:05:E7:88:EB:F5:0F:30 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: ED:7D:70:D0:17:E3:B5:C2:15:03:43:27:FD:9A:2D:53:BD:46:4A:F7:BF:3D:E8:C1:73:AC:AB:47:E 7:FB:9E:A0 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2008-02-25T16:42:03Z 1.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 1.2 - Service : CN=Banca d'Italia,OU=Servizi di certificazione,O=Banca d'Italia/00950501007,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Banca d'Italia,OU=Servizi di certificazione,O=Banca d'Italia/00950501007,C=IT Service Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 14 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 1204168849 X509 Certificate -----BEGIN CERTIFICATE----MIIHfjCCBWagAwIBAgIER8YokTANBgkqhkiG9w0BAQsFADBvMQswCQYDVQQGEwJJVDEjMCEGA1UE CgwaQmFuY2EgZCdJdGFsaWEvMDA5NTA1MDEwMDcxIjAgBgNVBAsMGVNlcnZpemkgZGkgY2VydGlm aWNhemlvbmUxFzAVBgNVBAMMDkJhbmNhIGQnSXRhbGlhMB4XDTE0MTEyNDA4NDMzM1oXDTM0MTEy NDA5MTMzM1owbzELMAkGA1UEBhMCSVQxIzAhBgNVBAoMGkJhbmNhIGQnSXRhbGlhLzAwOTUwNTAx MDA3MSIwIAYDVQQLDBlTZXJ2aXppIGRpIGNlcnRpZmljYXppb25lMRcwFQYDVQQDDA5CYW5jYSBk J0l0YWxpYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOy1RGN3Y4OdakRUDSleNk+0 a490mkUr7/R67G9nkQbZL11dQchzc5RvKXeJVEty5kDqw3tnst39N2NnsASYTlScDhNoDaeTWYQt vDXI3/ur6KDyYwuYOJh9iN3zMPLUNby9Qn5hhgFAO1e2t4pUU1AS3BCnqH5Ec54BNvF9lfsgSzmw 3jFZxM9RF/kTEKzzgbv9OM87sao8+RxG8rC/euhIAdM7chu2rFmFVYkBQKl0AE1rLaKGGHfKJNzy GSInIO0jKmS1PRJAtxgidLkdeL6egrQK2qQ+PyIMXc+HLVHqOpys/dXmDcRyLknTyB1nDiiYhPyZ AmYfcyMEKw3YZEMgYOL5tKS6V36Lcc8ce68hNnw17EBlpWIj1rugjdV3d45d4kUMF4m8ySs3J65k 4Z8jloLXSRTdWVrLy4OiSdYSoF5b277Jfgqd2iBAL3VUDq/MxuytQJIhOyt0l6dGN9H5jlftKFX0 ettcdS+k8HpkPYKvjzVs3nKKrAvO1yZg50F1dMTeeZvr7ljnY7aOwH0lWhiscXZQfog9GKBJ/7w0 9L1J+omqGU99h64xH5DUQP6s4rakDefJp21wsm2IJlAa3wcHoSz10b/M+2qEJKIv1YcE/46BFd2c UhYNfEsTrZaUStvs1aNk8Yzu+GwDkxQdf5zwRv2A8KBOq3RHvNs5AgMBAAGjggIgMIICHDASBgNV HRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjBLBgNVHSAERDBCMEAGBitMJgEBATA2MDQG CCsGAQUFBwIBFihodHRwOi8vd3d3LmJhbmNhZGl0YWxpYS5pdC9maXJtYWRpZ2l0YWxlMIIBiAYD VR0fBIIBfzCCAXswgeyggemggeaGgaxsZGFwOi8vbGRhcC5maXJtYWRpZ2l0YWxlLmJhbmNhZGl0 YWxpYS5pdC9jbj1XaW5Db21iaW5lZDEsY249QmFuY2ElMjBkJ0l0YWxpYSxvdT1TZXJ2aXppJTIw ZGklMjBjZXJ0aWZpY2F6aW9uZSxvPUJhbmNhJTIwZCdJdGFsaWEvMDA5NTA1MDEwMDcsYz1JVD9j ZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0hjVodHRwOi8vd3d3LmZpcm1hZGlnaXRhbGUuYmFuY2Fk aXRhbGlhLml0L2NybC9jcmwxLmNybDCBiaCBhqCBg6SBgDB+MQswCQYDVQQGEwJJVDEjMCEGA1UE CgwaQmFuY2EgZCdJdGFsaWEvMDA5NTA1MDEwMDcxIjAgBgNVBAsMGVNlcnZpemkgZGkgY2VydGlm aWNhemlvbmUxFzAVBgNVBAMMDkJhbmNhIGQnSXRhbGlhMQ0wCwYDVQQDDARDUkwxMB0GA1UdDgQW BBS+Cd4P2q6Bf9mDaStIFFC0h3L2gTANBgkqhkiG9w0BAQsFAAOCAgEAS9Jsohkbg6KcU7x24cuB 0NWk4goGx3fLbThEcutwNPPx6+ihHGgO53mLH/kAgkwXj9ml48OQepzDoSbrgvcVsEwqB9QXEf0g iwyu+XuGphAaQWz/wWHzjuATxhLtUNMjGM9fvmP5SAJ93Japa/43fghBRbCNAVqC6dvq602bqcPh qmyl5ONKZesMeq+GEbpEMcaCWDEAU6loUUtMrgeY4Gc+nJ4D8G1lT9ME/oh5bsSZcA8+eBDdEfNm mWRANxMyAXslqxThgq8QBRhKSoGdNqrKz2r20ayWsCh4jgCmlmJ8G/d7zeTX1yTQTLxzYCJ4oj7z bw30bcmyq0CBKf7Ly7eg01b7AJ0+PZr8P0yWu0qOfZz4LQBn+wZaIWR6tHc5xEXCFnxOlCi9nSGC qbd5XuLjb7nuuQ03iudPynQUh/PPDSPXZ9z7FY+jx/rhwnwLWO6imiQl5k5f4ho/uh3PdZ8ueKlM 6vJRahKFx+62lG/XbOeEcW3+xdqYjvGx0y2Cm3Y1OJtaRqtKsrdtKk3BQc/wu0HJb/YQVxU2MZef nOZMajOsNBgLOm9vMZnN8XVfZglnYaFErobS2A2yfwlbEzz6Z7ZXv0LXn10/yf4AnLydxt2ITI9P XnSQDkRJ4GoyfS/Qv6bUFm2fJ8YG8ZnK/e/CiFS2HQKR9GCTCG0e4RU= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Banca d'Italia Issuer OU: Servizi di certificazione Issuer O: Banca d'Italia/00950501007 Issuer C: IT Subject CN: Banca d'Italia Subject OU: Servizi di certificazione Subject O: Banca d'Italia/00950501007 Subject C: IT Valid from: Mon Nov 24 09:43:33 CET 2014 Valid to: Fri Nov 24 10:13:33 CET 2034 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.38.1.1.1 CPS pointer: http://www.bancaditalia.it/firmadigitale ITALIA (ITALY) - Trusted List ID: ID100001 Page 15 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.firmadigitale.bancaditalia.it/cn=WinCombined1,cn=Banca%20d'Italia,ou=Servizi%20di %20certificazione,o=Banca%20d'Italia/00950501007,c=IT?certificateRevocationList http://www.firmadigitale.bancaditalia.it/crl/crl1.crl C=IT,O=Banca d'Italia/00950501007,OU=Servizi di certificazione,CN=Banca d'Italia,CN=CRL1 Subject Key Identifier BE:09:DE:0F:DA:AE:81:7F:D9:83:69:2B:48:14:50:B4:87:72:F6:81 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B2:92:24:C3:20:AD:97:D9:D1:E6:DA:A0:14:B3:9F:0A:35:77:D4:AE:97:AE:FE:02:F4:DB:B0:59: D0:8C:36:40 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2014-11-24T08:43:33Z 1.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2014-11-24T08:00:00Z Page 16 ETSI 2014 - TSL HR - PDF/A-1b generator 2 - TSP: Infocert S.p.A. TSP Name Name [ en ] Infocert S.p.A. Name [ it ] Infocert S.p.A. Name [ en ] INFOCERT SPA Name [ en ] NTRIT-07945211006 Name [ it ] INFOCERT SPA Name [ it ] NTRIT-07945211006 Street Address [ en ] via morgagni 30/h Locality [ en ] rome Postal Code [ en ] 00161 Country Name [ en ] IT Street Address [ it ] via morgagni 30/h Locality [ it ] rome Postal Code [ it ] 00161 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI https://www.firma.infocert.it/documentation URI mailto:[email protected] TSP Information URI URI [ en ] https://www.firma.infocert.it/documentation URI [ it ] http://www.firma.infocert.it/documentazione/manuali.php ITALIA (ITALY) - Trusted List ID: ID100001 Page 17 ETSI 2014 - TSL HR - PDF/A-1b generator 2.1 - Service : CN=InfoCert Firma Qualificata,OU=Certificatore Accreditato,serialNumber=07945211006,O=INFOCERT SPA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=InfoCert Firma Qualificata,OU=Certificatore Accreditato,serialNumber=07945211006,O=INFOCERT SPA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE9DCCA9ygAwIBAgIBATANBgkqhkiG9w0BAQUFADCBgzELMAkGA1UEBhMCSVQxFTATBgNVBAoM DElORk9DRVJUIFNQQTEUMBIGA1UEBRMLMDc5NDUyMTEwMDYxIjAgBgNVBAsMGUNlcnRpZmljYXRv cmUgQWNjcmVkaXRhdG8xIzAhBgNVBAMMGkluZm9DZXJ0IEZpcm1hIFF1YWxpZmljYXRhMB4XDTA3 MDcyMDA2MTczMVoXDTE5MDcyMDA2MTMzOFowgYMxCzAJBgNVBAYTAklUMRUwEwYDVQQKDAxJTkZP Q0VSVCBTUEExFDASBgNVBAUTCzA3OTQ1MjExMDA2MSIwIAYDVQQLDBlDZXJ0aWZpY2F0b3JlIEFj Y3JlZGl0YXRvMSMwIQYDVQQDDBpJbmZvQ2VydCBGaXJtYSBRdWFsaWZpY2F0YTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANHoS7gRCxRZZDsymUiqmzvxwc6U+ZOhqrDVCc2AfNuU8xLL SaNWdUaSYFiA3EIDFm/7ueKTJtGfb3omipLDvGZhMJ6sE5PdV02WQMBpALGE4Zy/5zTlQAyCcUHe 3zKvvNYxw6UyYnXewuWaNalC3iai5+Tex1fBXKgBhetq9SE2KMQ3QvGROpQueP119atWdnDL38Pv gMougnBHoe+UHdKeHwzn9/Gk8W1KSj1EuqefgAtUhLM7Pnvq8Pflxa4HW5/Tn5Jw4wOY0s4Oqd/3 k0NI60FpFkhTogpjb6j6iGTAI4rBO8FGHtKVYPMWSJmajt5/b9y9dtERJPMPiiaP61MCAwEAAaOC AW8wggFrMA8GA1UdEwEB/wQFMAMBAf8wWAYDVR0gBFEwTzBNBgRVHSAAMEUwQwYIKwYBBQUHAgEW N2h0dHA6Ly93d3cuZmlybWEuaW5mb2NlcnQuaXQvZG9jdW1lbnRhemlvbmUvbWFudWFsaS5waHAw gacGA1UdHwSBnzCBnDCBmaCBlqCBk4aBkGxkYXA6Ly9sZGFwLmluZm9jZXJ0Lml0L2NuJTNkSW5m b0NlcnQlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91JTNkQ2VydGlmaWNhdG9yZSUyMEFjY3JlZGl0 YXRvLG8lM2RJTkZPQ0VSVCUyMFNQQSxjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAO BgNVHQ8BAf8EBAMCAQYwJQYDVR0SBB4wHIEaZmlybWEuZGlnaXRhbGVAaW5mb2NlcnQuaXQwHQYD VR0OBBYEFDD8IXx80nxtvIzDuhNQ93qgK8W2MA0GCSqGSIb3DQEBBQUAA4IBAQBo0sfnnhfctq28 DH+U29vWFqTK3CKjEyq1g5uRqYnmtHykm6EVf/sZtK/YFyFUeiKaOJhXuzfnHTMT5T+e2SIh7aME /g8TW1wV49w9ZOY1SR0rV61g4hdPNZ1aEgpOCP6DmfDj8kZLq7wMqzJ5vED5KZw7YTonx5p9FPvC 9QyH8yBTpgzdMYSbnRplWbKs2GSx1qC2NV4+S39gWHOpCFoa9A+isAVPWA8tbDRtRN+3st/nOf6O EaE4+FXYuQ5C/LFjy8KnX+lPdoVVelJ53+enRWYedWjPzzAfILAtZQtPxt8291iH5v8N4CQ9jou1 /Et6MjJHARcZH1ooL6JRfSBE -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: InfoCert Firma Qualificata Issuer OU: Certificatore Accreditato Issuer SERIAL NUMBER: 07945211006 Issuer O: INFOCERT SPA Issuer C: IT Subject CN: InfoCert Firma Qualificata Subject OU: Certificatore Accreditato Subject SERIAL NUMBER: 07945211006 Subject O: INFOCERT SPA ITALIA (ITALY) - Trusted List ID: ID100001 Page 18 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Valid from: Fri Jul 20 08:17:31 CEST 2007 Valid to: Sat Jul 20 08:13:38 CEST 2019 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.firma.infocert.it/documentazione/manuali.php CRL Distribution Points ldap://ldap.infocert.it/cn%3dInfoCert%20Firma%20Qualificata,ou%3dCertificatore%20Accreditato, o%3dINFOCERT%20SPA,c%3dIT?certificateRevocationList Issuer Alternative Name [email protected] Subject Key Identifier 30:FC:21:7C:7C:D2:7C:6D:BC:8C:C3:BA:13:50:F7:7A:A0:2B:C5:B6 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 9A:CB:16:F2:26:00:76:B2:0A:A0:D1:32:A7:B1:86:AC:83:D4:35:A4:F4:7B:5D:EA:AC:B5:EC:55: 33:2E:52:A2 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2007-07-20T08:17:31Z 2.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 2.2 - Service : CN=InfoCert Time Stamping Authority,OU=TSA,serialNumber=07945211006,O=INFOCERT SPA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] ITALIA (ITALY) - Trusted List ID: ID100001 A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). Page 19 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=InfoCert Time Stamping Authority,OU=TSA,serialNumber=07945211006,O=INFOCERT SPA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEwjCCA6qgAwIBAgIBATANBgkqhkiG9w0BAQUFADBzMQswCQYDVQQGEwJJVDEVMBMGA1UECgwM SU5GT0NFUlQgU1BBMRQwEgYDVQQFEwswNzk0NTIxMTAwNjEMMAoGA1UECwwDVFNBMSkwJwYDVQQD DCBJbmZvQ2VydCBUaW1lIFN0YW1waW5nIEF1dGhvcml0eTAeFw0wNzA3MjAwNjUzMzVaFw0xOTA3 MjAwNjUyMTBaMHMxCzAJBgNVBAYTAklUMRUwEwYDVQQKDAxJTkZPQ0VSVCBTUEExFDASBgNVBAUT CzA3OTQ1MjExMDA2MQwwCgYDVQQLDANUU0ExKTAnBgNVBAMMIEluZm9DZXJ0IFRpbWUgU3RhbXBp bmcgQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUrTmASiWv7HXBOO 9YpXNhCO9G6bkwasXYvwv4o9+FMlQmAZg12ZtBl0AkfS10THt/AvgL5m22g/ZAnkrM8azWoJvY8j 3R7tiOBpV2JrSYh+zPWgTp7kBCJOelNfSJ+T3VS+Mpx9Ty107B+/NubfmZ8qssLs8Ks6a7680T7M vPkl8tcBbnJg7z6H9+fjzOt327DYDR5vwTuN9fkah/4FwgLph+Xnm/8f37e4d5ZI4zQg2vhO1EeI Ag4DzlWmc8rHCwNQgkLqAHSyIcROVIEqiCaftPr7gs5afAi5UeFfL42qDpyJ9sKtD04UhLFDEB8W 9QaeDfwysx5lv60bjhM8ewIDAQABo4IBXzCCAVswDwYDVR0TAQH/BAUwAwEB/zBYBgNVHSAEUTBP ME0GBFUdIAAwRTBDBggrBgEFBQcCARY3aHR0cDovL3d3dy5maXJtYS5pbmZvY2VydC5pdC9kb2N1 bWVudGF6aW9uZS9tYW51YWxpLnBocDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAbGRhcDovL2xk YXAuaW5mb2NlcnQuaXQvY24lM2RJbmZvQ2VydCUyMFRpbWUlMjBTdGFtcGluZyUyMEF1dGhvcml0 eSxvdSUzZFRTQSxvJTNkSU5GT0NFUlQlMjBTUEEsYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlv bkxpc3QwDgYDVR0PAQH/BAQDAgEGMCUGA1UdEgQeMByBGmZpcm1hLmRpZ2l0YWxlQGluZm9jZXJ0 Lml0MB0GA1UdDgQWBBShA+cIS+wJWJVSbY8kLW8eDBppfzANBgkqhkiG9w0BAQUFAAOCAQEAAyNQ jJBLamFCjubel2FOu4IC+TpZCST/sVWsjyr68FDimXQqqFuwPb4tcSmAjw/EEvysXa5u4/+rRWN1 F1E27cI1g7i0b85V6Lwp4+g9zc2cg+oODef69moh389MktzxmQjv+99XGyeu5EUP+lEbR4vR2e10 vkdcfVouBI9fDMoeEPmsCudAVQgF4MOgW0DTbD+mJwYzdU2IMve/CnBS5BoLiSC3uMZwn0QdNBx+ +0XNVH2WJbLxO/NPiY+wnRvQGA4dG4ZctURlz7zkxZxQusC0v9y7cZc/QVDg0pOTj9FI1YJTQYA6 hCkCVuVnhYsCglx+/OD2KdD/tZDpBBsiJA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: InfoCert Time Stamping Authority Issuer OU: TSA Issuer SERIAL NUMBER: 07945211006 Issuer O: INFOCERT SPA Issuer C: IT Subject CN: InfoCert Time Stamping Authority Subject OU: TSA Subject SERIAL NUMBER: 07945211006 Subject O: INFOCERT SPA Subject C: IT Valid from: Fri Jul 20 08:53:35 CEST 2007 Valid to: Sat Jul 20 08:52:10 CEST 2019 ITALIA (ITALY) - Trusted List ID: ID100001 Page 20 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.firma.infocert.it/documentazione/manuali.php CRL Distribution Points ldap://ldap.infocert.it/cn%3dInfoCert%20Time%20Stamping%20Authority,ou%3dTSA,o%3dINFO CERT%20SPA,c%3dIT?certificateRevocationList Issuer Alternative Name [email protected] Subject Key Identifier A1:03:E7:08:4B:EC:09:58:95:52:6D:8F:24:2D:6F:1E:0C:1A:69:7F Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 95:9C:66:FA:C7:2E:CF:7A:FA:3A:0C:F6:CF:36:64:69:8F:5F:D0:6A:38:5D:BE:AF:31:7E:02:F5:A B:E7:CE:29 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2007-07-20T08:53:35Z 2.3 - Service : CN=InfoCert Firma Qualificata 2,serialNumber=07945211006,OU=Certificatore Accreditato,O=INFOCERT SPA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=InfoCert Firma Qualificata 2,serialNumber=07945211006,OU=Certificatore Accreditato,O=INFOCERT SPA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 21 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFJjCCBA6gAwIBAgIBATANBgkqhkiG9w0BAQsFADCBhTELMAkGA1UEBhMCSVQxFTATBgNVBAoM DElORk9DRVJUIFNQQTEiMCAGA1UECwwZQ2VydGlmaWNhdG9yZSBBY2NyZWRpdGF0bzEUMBIGA1UE BRMLMDc5NDUyMTEwMDYxJTAjBgNVBAMMHEluZm9DZXJ0IEZpcm1hIFF1YWxpZmljYXRhIDIwHhcN MTMwNDE5MTQyNjE1WhcNMjkwNDE5MTUyNjE1WjCBhTELMAkGA1UEBhMCSVQxFTATBgNVBAoMDElO Rk9DRVJUIFNQQTEiMCAGA1UECwwZQ2VydGlmaWNhdG9yZSBBY2NyZWRpdGF0bzEUMBIGA1UEBRML MDc5NDUyMTEwMDYxJTAjBgNVBAMMHEluZm9DZXJ0IEZpcm1hIFF1YWxpZmljYXRhIDIwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoW5eA0k3AcU+/v2uKclEhGrxXlqOUptAQJLSjysP 7IaKKtGxIeX8HNavxRaDkLkQNElql+t4GgIPyJk4lzHbH72c1Ls2SH06X7uCo5iGRH3+FU1Scbcr zviAPB+yeqUZ1cKkGyyGQ1wBsorxpREUeajkW2wsDiY/DYyeTG1I3ECOk/2sZW1U/xGWeVIlNCg9 lkqrjvwu6swKVg3LPRiDL4Cqzsh4w9VZzJeDvKfer6lp/fRRduY5fSajtttgCoERrw0hZH/PkkmD CcnbLSjx59Knu3jHip5prgGVU29MKANf573VZAAZfau/lAxf1K91DEXxtPWknEUULt3beGefAgMB AAGjggGdMIIBmTAPBgNVHRMBAf8EBTADAQH/MFgGA1UdIARRME8wTQYEVR0gADBFMEMGCCsGAQUF BwIBFjdodHRwOi8vd3d3LmZpcm1hLmluZm9jZXJ0Lml0L2RvY3VtZW50YXppb25lL21hbnVhbGku cGhwMCUGA1UdEgQeMByBGmZpcm1hLmRpZ2l0YWxlQGluZm9jZXJ0Lml0MIHVBgNVHR8Egc0wgcow gceggcSggcGGKmh0dHA6Ly9jcmwuaW5mb2NlcnQuaXQvY3Jscy9maXJtYTIvQVJMLmNybIaBkmxk YXA6Ly9sZGFwLmluZm9jZXJ0Lml0L2NuJTNESW5mb0NlcnQlMjBGaXJtYSUyMFF1YWxpZmljYXRh JTIwMixvdSUzRENlcnRpZmljYXRvcmUlMjBBY2NyZWRpdGF0byxvJTNESU5GT0NFUlQlMjBTUEEs YyUzRElUP2F1dGhvcml0eVJldm9jYXRpb25MaXN0MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU k90h/APQFQpyraPM1ZoJnTiLnekwDQYJKoZIhvcNAQELBQADggEBAJYdIAO8JCHr9dTT/kpy5AZp go8XoIQW/q9tNQPwZkdd/bAfgLibolvbk7ZTsiVlVv35Bb9rhM58SKP1Xa9c26Cf8y4zhoplVbhf KRGVCLj1u1EXdPhCUQb8WWcM0AyLOXj3qhbMh77UL0K9eaRrwTAENbl43Jy65HPHubNnk9U9wIUU tLgRHl5Oog1ZUSV5oLEkeSwzHyk5ZQnv24BzU9UXJ/amAt2ff1Krr3/PsY4Juwgtpg1Nqq8tid5L +lN7qJ8xXfxMuUX2aWkWftCBL8H75U7NnYm/Zx6XyRaULFzCDw0RBSHaWGPH+t5X7ZMMERXn8Z/2 LTYWuj9w1+WeieY= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: InfoCert Firma Qualificata 2 Issuer SERIAL NUMBER: 07945211006 Issuer OU: Certificatore Accreditato Issuer O: INFOCERT SPA Issuer C: IT Subject CN: InfoCert Firma Qualificata 2 Subject SERIAL NUMBER: 07945211006 Subject OU: Certificatore Accreditato Subject O: INFOCERT SPA Subject C: IT Valid from: Fri Apr 19 16:26:15 CEST 2013 Valid to: Thu Apr 19 17:26:15 CEST 2029 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.firma.infocert.it/documentazione/manuali.php Issuer Alternative Name [email protected] CRL Distribution Points http://crl.infocert.it/crls/firma2/ARL.crl ldap://ldap.infocert.it/cn%3DInfoCert%20Firma%20Qualificata%202,ou%3DCertificatore%20Accre ditato,o%3DINFOCERT%20SPA,c%3DIT?authorityRevocationList Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 93:DD:21:FC:03:D0:15:0A:72:AD:A3:CC:D5:9A:09:9D:38:8B:9D:E9 Page 22 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B6:89:BF:CF:DA:EE:07:84:05:38:39:71:E8:48:C3:D0:77:45:7C:D0:EC:6B:68:55:50:F1:0E:D2:50: F8:FD:C5 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2013-04-19T16:26:15Z 2.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2013-04-19T16:26:15Z 2.4 - Service : CN=InfoCert Time Stamping Authority 2,serialNumber=07945211006,OU=TSA,O=INFOCERT SPA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=InfoCert Time Stamping Authority 2,serialNumber=07945211006,OU=TSA,O=INFOCERT SPA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 3 ITALIA (ITALY) - Trusted List ID: ID100001 Page 23 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIE8jCCA9qgAwIBAgIBAzANBgkqhkiG9w0BAQsFADB1MQswCQYDVQQGEwJJVDEVMBMGA1UECgwM SU5GT0NFUlQgU1BBMQwwCgYDVQQLDANUU0ExFDASBgNVBAUTCzA3OTQ1MjExMDA2MSswKQYDVQQD DCJJbmZvQ2VydCBUaW1lIFN0YW1waW5nIEF1dGhvcml0eSAyMB4XDTEzMDQxOTE0MzAzM1oXDTI5 MDQxOTE1MzAzM1owdTELMAkGA1UEBhMCSVQxFTATBgNVBAoMDElORk9DRVJUIFNQQTEMMAoGA1UE CwwDVFNBMRQwEgYDVQQFEwswNzk0NTIxMTAwNjErMCkGA1UEAwwiSW5mb0NlcnQgVGltZSBTdGFt cGluZyBBdXRob3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMGCgTctLyqk SCYVrgbWh+JF6kw5DEtsNd6rNYy4dDxnvnUof5QaSCCgHzMUiPrTimWai8xToqzz42nUrH9n1ncz kDZe+YcwTW5c+anwq42GkRe3ggs07ueMzW/L/4Tcz3TqsOEcYIbPURWch5ZF+1QoFMaO87HOxCy9 C4Gg2WQqEXkK/oGJ7Qycfkzt7rqLxQf8zrLGsMYTZ8PuCIf4mfmAOlQUoRjYyT+aG3+Cx/B9Mzv5 JVT7NhRAC8KyDr59VYKWrnHVi4jk9j1cK4fsbnJNvfR9V7zBau/R5pUF88pKzxdkLAtcra8m80bS yB8gW5xIloDyLPuhjotWx99imT8CAwEAAaOCAYswggGHMA8GA1UdEwEB/wQFMAMBAf8wWAYDVR0g BFEwTzBNBgRVHSAAMEUwQwYIKwYBBQUHAgEWN2h0dHA6Ly93d3cuZmlybWEuaW5mb2NlcnQuaXQv ZG9jdW1lbnRhemlvbmUvbWFudWFsaS5waHAwJQYDVR0SBB4wHIEaZmlybWEuZGlnaXRhbGVAaW5m b2NlcnQuaXQwgcMGA1UdHwSBuzCBuDCBtaCBsqCBr4YoaHR0cDovL2NybC5pbmZvY2VydC5pdC9j cmxzL3RzczIvQVJMLmNybIaBgmxkYXA6Ly9sZGFwLmluZm9jZXJ0Lml0L2NuJTNESW5mb0NlcnQl MjBUaW1lJTIwU3RhbXBpbmclMjBBdXRob3JpdHklMjAyLG91JTNEVFNBLG8lM0RJTkZPQ0VSVCUy MFNQQSxDJTNESVQ/YXV0aG9yaXR5UmV2b2NhdGlvbkxpc3QwDgYDVR0PAQH/BAQDAgEGMB0GA1Ud DgQWBBQHNhYYtQ79d49daCXyOP1vNCb19zANBgkqhkiG9w0BAQsFAAOCAQEATsuZSBCoj4BogNTF /u734EI+Zau4p4QY9bF7K2bH52xgD+GRPdR9JQKAXx42pvAekVTZwn8yAYBb1ClXWF4bvvPJmLJV h9sXy0258I9889k0/3Pr6hQ9nuF+fnxCCAXDsKgR0tbJHYBZdCSpC/xbRU0bTm0nYTzkQkXZvv8o fiUMZdTYRZ12XwnVIo9QXISzpz14IN2YHvF5WaCkxzbyqbLwOy2dTeHr+CF7nWCwz2QhosfD+gUf qnsI2tp8LHVjmhaD8Xd9i7XghdszyrAiVEZCLOGG8iiiUzqZE2VmytVHRzSI+Bx1aO5laPlXOLKh drz9hxU3tOu4VqW/r1NGSA== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: InfoCert Time Stamping Authority 2 Issuer SERIAL NUMBER: 07945211006 Issuer OU: TSA Issuer O: INFOCERT SPA Issuer C: IT Subject CN: InfoCert Time Stamping Authority 2 Subject SERIAL NUMBER: 07945211006 Subject OU: TSA Subject O: INFOCERT SPA Subject C: IT Valid from: Fri Apr 19 16:30:33 CEST 2013 Valid to: Thu Apr 19 17:30:33 CEST 2029 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.firma.infocert.it/documentazione/manuali.php Issuer Alternative Name [email protected] CRL Distribution Points http://crl.infocert.it/crls/tss2/ARL.crl ldap://ldap.infocert.it/cn%3DInfoCert%20Time%20Stamping%20Authority%202,ou%3DTSA,o%3 DINFOCERT%20SPA,C%3DIT?authorityRevocationList Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 07:36:16:18:B5:0E:FD:77:8F:5D:68:25:F2:38:FD:6F:34:26:F5:F7 Page 24 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FC:8B:FE:53:A3:34:F6:F7:62:F5:EA:9A:FF:47:E0:1A:A6:2D:F6:20:E5:5E:8C:E9:BE:CB:71:3B:B 7:07:55:A7 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2013-04-19T16:30:33Z 2.5 - Service : CN=InfoCert Time Stamping Authority TS,OU=TSA,serialNumber=07945211006,O=INFOCERT SPA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=InfoCert Time Stamping Authority TS,OU=TSA,serialNumber=07945211006,O=INFOCERT SPA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE4DCCA8igAwIBAgIBATANBgkqhkiG9w0BAQUFADB2MQswCQYDVQQGEwJJVDEVMBMGA1UECgwM SU5GT0NFUlQgU1BBMRQwEgYDVQQFEwswNzk0NTIxMTAwNjEMMAoGA1UECwwDVFNBMSwwKgYDVQQD DCNJbmZvQ2VydCBUaW1lIFN0YW1waW5nIEF1dGhvcml0eSBUUzAeFw0wNzA2MjYxMzEyMzNaFw0x OTA2MjYxMzExMzJaMHYxCzAJBgNVBAYTAklUMRUwEwYDVQQKDAxJTkZPQ0VSVCBTUEExFDASBgNV BAUTCzA3OTQ1MjExMDA2MQwwCgYDVQQLDANUU0ExLDAqBgNVBAMMI0luZm9DZXJ0IFRpbWUgU3Rh bXBpbmcgQXV0aG9yaXR5IFRTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyigNtx7g z4o99uFsm5kb2R3YDOADzlhyiroI40FrMbzWo4KyLMZkliiY7458g5rBYPa/SdjKuoX7o+XS9VzN tkjxfxBTTEBEZUmf7IW0YcmPDkVdj009j9oFUIqO26y7TZDbtj+DyxgzgTpvo9I/yhsM8AhQMg0T ftneiDqtKJXZIWVBnOiSG2yzjqckQNqLRE3Gk16myuGZS/h75CBBSJnkr5sEr+hXRR7+2j+Ocqtq HH8QOOsFQnYmNhLyspOeH6nebJpdhyT86cGyPKR9SrTVux6q4GvxcEljlRa4Jj5wHm4PHPkGAAEM lswJefu3iVtFAbvYpzaqHAfvPTV5UQIDAQABo4IBdzCCAXMwDwYDVR0TAQH/BAUwAwEB/zBYBgNV HSAEUTBPME0GBFUdIAAwRTBDBggrBgEFBQcCARY3aHR0cDovL3d3dy5maXJtYS5pbmZvY2VydC5p dC9kb2N1bWVudGF6aW9uZS9tYW51YWxpLnBocDCBrwYDVR0fBIGnMIGkMIGhoIGeoIGbhoGYbGRh cDovL2xkYXAtaWNlLXRzLmludHJhLmluZm9jZXJ0Lml0OjUxMDMyL2NuJTNkSW5mb0NlcnQlMjBU aW1lJTIwU3RhbXBpbmclMjBBdXRob3JpdHklMjBUUyxvdSUzZFRTQSxvJTNkSU5GT0NFUlQlMjBT UEEsYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3QwDgYDVR0PAQH/BAQDAgEGMCUGA1Ud EgQeMByBGmZpcm1hLmRpZ2l0YWxlQGluZm9jZXJ0Lml0MB0GA1UdDgQWBBQ8t5JwBMTwLm0QUOS+ vQcoljKICDANBgkqhkiG9w0BAQUFAAOCAQEAXxkNSN6UXgNcOIDHFXZvFoxJjScRqsokLbuhtT2w +YnfjC78qG3EY0uG0lr1klYW1hOuEHzqYYhg5LS8HAxJu3G3IX0SLh4UWSHuJF1A+kRmFUBnObEA 7w2ea4qnFXcvZgYATY7KlHDaf7hIAy+05CH0eOkDlYyZoA9PFsgw2tVScY+XKI71DJzlTKqAdzzW /7+DoQvcVcr0QfzPJQDxjQXnowPZbmYjTweb7ItsASoneoI2ij7jJEFNjc+nu8pirColOXHJFjg5 mCLPSsUd4tjlz1I/6wDCfgHf8+v+FNYcuyPVitMyVetAMtrRzMN6c3wJhL2V05VTO27M8oVt3w== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: InfoCert Time Stamping Authority TS ITALIA (ITALY) - Trusted List ID: ID100001 Page 25 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer OU: TSA Issuer SERIAL NUMBER: 07945211006 Issuer O: INFOCERT SPA Issuer C: IT Subject CN: InfoCert Time Stamping Authority TS Subject OU: TSA Subject SERIAL NUMBER: 07945211006 Subject O: INFOCERT SPA Subject C: IT Valid from: Tue Jun 26 15:12:33 CEST 2007 Valid to: Wed Jun 26 15:11:32 CEST 2019 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.firma.infocert.it/documentazione/manuali.php CRL Distribution Points ldap://ldap-icets.intra.infocert.it:51032/cn%3dInfoCert%20Time%20Stamping%20Authority%20TS,ou%3dTSA,o %3dINFOCERT%20SPA,c%3dIT?certificateRevocationList Issuer Alternative Name [email protected] Subject Key Identifier 3C:B7:92:70:04:C4:F0:2E:6D:10:50:E4:BE:BD:07:28:96:32:88:08 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:56:10:9D:A9:16:A8:51:D6:E0:95:19:F6:17:37:DA:7A:50:26:F3:BA:ED:F0:80:BE:01:7F:78:90: 42:7B:AD Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. ITALIA (ITALY) - Trusted List ID: ID100001 Page 26 ETSI 2014 - TSL HR - PDF/A-1b generator Status Starting Time 2007-06-26T15:12:33Z 2.6 - Service : CN=InfoCert-OpenTrust Qualified Electronic Signature CA,OU=For issuance in InfoCertOpenTrust Personal Signature Remote SSCD,O=InfoCert SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=InfoCert-OpenTrust Qualified Electronic Signature CA,OU=For issuance in InfoCertOpenTrust Personal Signature Remote SSCD,O=InfoCert SpA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1492267875341825666613069053855210757964380 X509 Certificate -----BEGIN CERTIFICATE----MIIHuDCCBaCgAwIBAgISESFhkp3mN7F97LpKMKNXnEJcMA0GCSqGSIb3DQEBCwUAMIGvMQswCQYD VQQGEwJJVDEVMBMGA1UECgwMSW5mb0NlcnQgU3BBMUowSAYDVQQLDEFGb3IgaXNzdWFuY2UgaW4g SW5mb0NlcnQtT3BlblRydXN0IFBlcnNvbmFsIFNpZ25hdHVyZSBSZW1vdGUgU1NDRDE9MDsGA1UE Aww0SW5mb0NlcnQtT3BlblRydXN0IFF1YWxpZmllZCBFbGVjdHJvbmljIFNpZ25hdHVyZSBDQTAe Fw0xNTA2MTgwMDAwMDBaFw0zNTA2MTgwMDAwMDBaMIGvMQswCQYDVQQGEwJJVDEVMBMGA1UECgwM SW5mb0NlcnQgU3BBMUowSAYDVQQLDEFGb3IgaXNzdWFuY2UgaW4gSW5mb0NlcnQtT3BlblRydXN0 IFBlcnNvbmFsIFNpZ25hdHVyZSBSZW1vdGUgU1NDRDE9MDsGA1UEAww0SW5mb0NlcnQtT3BlblRy dXN0IFF1YWxpZmllZCBFbGVjdHJvbmljIFNpZ25hdHVyZSBDQTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBANuUcW34zGZPrAcfU7G3UW1lH35s3Y8yv+nZxGvv075TmZhPX/+pczAVk8/u PfviwjqfP+TF5cr5j78kYgBa8nX72PwqNQkf6uO8CIrLhBkfxkN/Q2WRdLVptJ9/d5bFANqYY4ba bSh7+Gl+qkDdzpedRWdNASSzmKz0n63QVyaaL09tuC7qlgqhsKN3JtesWn2CgApkN9xyZx4BoL47 XEr3dFPGZeKnbSueeiVprYoBqphk/2hdOjUdX/BG/IrFReS5v9wS2xhzqIUQg68KOgfikawz5Iuu MybizIO+f3zaUPMk/56AyLdVDfL5SKebX/+l43FK0kf5sj1SyFvTlbGp2lH22vCNhUDV6XiO3Wm2 0TDakpQSrBoKAkaaqNSV5mQ3oC9XvDF7ENs0tMMa3c/8Psbo28UN2NVEfMBxWYCKPzDdT+o9SPMV LeHrWtLL22nVgPQpp+ip9v1dX4gjfXZHakaHD32tjVdUE6RvYEsW5ZvQ4/4v1w8F3ok/TohUCqV7 2rSplSvdj6osFKqoFVup/uCeUMaYPy4wbDWWZitObPvjJfGX3Gaz/EMDw6AXgYn3RQ/0dmFA2PGE VqlrmAWfGb3sLAvBVjZFlxbvSncPuG/qSDZmsltrBYvN3eANKn5vdXJwjIfz4mM2pd8QbHGfB/EE AxVYVbkVd+C2gC0vAgMBAAGjggHKMIIBxjAOBgNVHQ8BAf8EBAMCAQYwWAYDVR0gBFEwTzBNBgRV HSAAMEUwQwYIKwYBBQUHAgEWN2h0dHA6Ly93d3cuZmlybWEuaW5mb2NlcnQuaXQvZG9jdW1lbnRh emlvbmUvbWFudWFsaS5waHAwEgYDVR0TAQH/BAgwBgEB/wIBADCCAQQGA1UdHwSB/DCB+TBAoD6g PIY6aHR0cDovL2NybC5vdC5pbmZvY2VydC5pdC9jcmxzL1JlbW90ZVNpZ25hdHVyZS9xZXMvQVJM LmNybDCBtKCBsaCBroaBq2xkYXA6Ly9sZGFwLm90LmluZm9jZXJ0Lml0L2NuPUluZm9DZXJ0JTJE T3BlblRydXN0JTIwUXVhbGlmaWVkJTIwRWxlY3Ryb25pYyUyMFNpZ25hdHVyZSUyMENBLE9VPUlu Zm9DZXJ0JTIwUmVtb3RlJTIwU2lnbmF0dXJlLE89SW5mb0NlcnQlMjBTcEEsQz1JVD9hdXRob3Jp dHlSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUTZr4U8u4mOq/GcHxIsXW7YzukFUwHwYDVR0jBBgw FoAUTZr4U8u4mOq/GcHxIsXW7YzukFUwDQYJKoZIhvcNAQELBQADggIBANRQsTiE0wyDfx5hk6Fq 9w3XNttq/B2cCMJtEg4N2Ne9rVACNPLseTdWcdVMOtuEVSwbvaoNqxGxWANMAIfvCwV143zZfkyG FpmPpXEdyiIyku0KQE7CafxchrSbgwoDliNx/dxWwi67kw5qJoAOZxzf3pU2nG/l+if+qFt9biJf YbwESo3KO4i+ohhSdAL/YDHA6YTvZ2daqfNfVMU9EVMHpqyFpjftTC4fL1T2cmYD+fnI9E50Tk6n 2L+TpX8f1cbWnzWr//Fw08G6mX4kMsiJhgarfzl2/1kRYaDF8istwl4y1AW5trNn2tr+uCqQuzEb Cfu84irKXx4PIJbqjTiyHhXf03CRHE8kdqso9UQaCwUanz/NtoK9fAxraOlTQsB3gFCEiAc7R1gf 4/T6zxXPp3PWlVuFM0VFApK/aa0EZPP/O8Qc27zvSNWgCNSyjNZP9W1xDFbd/bRrxn3oz/TPv5pc yfjePCBT0l8osDlxpjX8SqcNDrcHc5KzTM6Pe6bS5oz86pl6vH7PMMTetX7AKizDPCOe/GFvPoak mLB4Be57cPqZOEbVTBsdfvzuLB5bjgmujL3h0MUz9T11kCtvrcHBjtLcDJey/qZhKtqgQT0MsuG8 m2/XXv4IQdCsWt2cmrNw+Adfsschpz3MWPPqfKFNnOmVeQkshUK77FCW -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: InfoCert-OpenTrust Qualified Electronic Signature CA Issuer OU: For issuance in InfoCert-OpenTrust Personal Signature Remote SSCD Issuer O: InfoCert SpA Issuer C: IT Subject CN: InfoCert-OpenTrust Qualified Electronic Signature CA Subject OU: For issuance in InfoCert-OpenTrust Personal Signature Remote SSCD ITALIA (ITALY) - Trusted List ID: ID100001 Page 27 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: InfoCert SpA Subject C: IT Valid from: Thu Jun 18 02:00:00 CEST 2015 Valid to: Mon Jun 18 02:00:00 CEST 2035 Public Key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ertificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.firma.infocert.it/documentazione/manuali.php Basic Constraints IsCA: true - Path length: 0 CRL Distribution Points http://crl.ot.infocert.it/crls/RemoteSignature/qes/ARL.crl ldap://ldap.ot.infocert.it/cn=InfoCert%2DOpenTrust%20Qualified%20Electronic%20Signature%20 CA,OU=InfoCert%20Remote%20Signature,O=InfoCert%20SpA,C=IT?authorityRevocationList Subject Key Identifier 4D:9A:F8:53:CB:B8:98:EA:BF:19:C1:F1:22:C5:D6:ED:8C:EE:90:55 Authority Key Identifier 4D:9A:F8:53:CB:B8:98:EA:BF:19:C1:F1:22:C5:D6:ED:8C:EE:90:55 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 17:A9:9D:41:9C:55:F5:91:14:CE:85:22:B4:18:A7:B0:7B:66:B6:6A:BE:6F:CB:6E:49:A7:48:FC:0B: FF:B5:B9 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2015-06-18T00:00:00Z Page 28 ETSI 2014 - TSL HR - PDF/A-1b generator 3 - TSP: Actalis S.p.A. TSP Name Name [ en ] Actalis S.p.A. Name [ it ] Actalis S.p.A. Name [ en ] Actalis Name [ it ] Actalis Name [ en ] VATIT-03358520967 Name [ it ] VATIT-03358520967 Street Address [ en ] via torquato taramelli 26 Locality [ en ] milano Postal Code [ en ] 20124 Country Name [ en ] IT Street Address [ it ] via torquato taramelli 26 Locality [ it ] milano Postal Code [ it ] 20124 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI https://portal.actalis.it/Info/qcsp-english URI mailto:[email protected] TSP Information URI URI [ en ] https://portal.actalis.it/Info/qcsp-english URI [ it ] https://portal.actalis.it/ ITALIA (ITALY) - Trusted List ID: ID100001 Page 29 ETSI 2014 - TSL HR - PDF/A-1b generator 3.1 - Service : CN=Actalis Qualified Certificates CA G1,OU=Qualified Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis Qualified Certificates CA G1,OU=Qualified Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 2282968413477109370 X509 Certificate -----BEGIN CERTIFICATE----MIIGLzCCBRegAwIBAgIIH667rSa9fnowDQYJKoZIhvcNAQELBQAwgZQxCzAJBgNVBAYTAklUMSMw IQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzExMC8GA1UECwwoUXVhbGlmaWVkIENl cnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEtMCsGA1UEAwwkQWN0YWxpcyBRdWFsaWZpZWQg Q2VydGlmaWNhdGVzIENBIEcxMB4XDTEwMDgxNjEwMjMxMVoXDTIyMDgxNjEwMjMxMVowgZQxCzAJ BgNVBAYTAklUMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzExMC8GA1UECwwo UXVhbGlmaWVkIENlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEtMCsGA1UEAwwkQWN0YWxp cyBRdWFsaWZpZWQgQ2VydGlmaWNhdGVzIENBIEcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2FprOXm3KJmv6nNWhm+SAz+NQpDgAIo32CvlFd80Lbrqp8sBJBPrG48gRz5Fba8srrgJ jv+WhiQ/Rmhe38Pt8Z9M0/oYj1/Fehc13+Wibb8l9LliRwc9EBvfXNyKMqsrnwzZUlmpb07WHykw Clyrc0IMZHoSU+hovGieDRCe8FwsX4mHyQgkEXW1VY1j99219up0VImofbWFwdQRmTGFGtHrfv4s fO5gIi53VgisDVrUZ/+dGH5/AZ+4Xg0tSMvCLFvbFD/RnCf5rqS0FX54yHguFV6X2jOsL9yu5V1p XRHMmoPdVjb4SgrOyEjVGtLKLCDMHOCDFjG2YNSm4582qQIDAQABo4ICgTCCAn0wHQYDVR0OBBYE FGvOZD0r+E+LQ+/wMr3vkVQNrb74MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUa85kPSv4 T4tD7/Ayve+RVA2tvvgwgf0GA1UdIASB9TCB8jCB7wYGK4EfAQEBMIHkMIGaBggrBgEFBQcCAjCB jQyBikwndXNvIGRlaSBjZXJ0aWZpY2F0aSBlbWVzc2kgZGEgQWN0YWxpcyBTLnAuQS4gKFJFQSBu LjEgNjY5NDExLCBUcmliLiBNaWxhbm8pIGUnIHNvZ2dldHRvIGFsbGUgY29uZGl6aW9uaSBwcmVj aXNhdGUgbmVsIE1hbnVhbGUgT3BlcmF0aXZvLjBFBggrBgEFBQcCARY5aHR0cHM6Ly9wb3J0YWwu YWN0YWxpcy5pdC9SZXBvc2l0b3J5L1BvbGljeS9RdWFsaWZpZWQvQ1BTMIIBGAYDVR0fBIIBDzCC AQswgdCggc2ggcqGgcdsZGFwOi8vbGRhcC5hY3RhbGlzLml0L2NuJTNkQWN0YWxpcyUyMFF1YWxp ZmllZCUyMENlcnRpZmljYXRlcyUyMENBJTIwRzEsb3UlM2RRdWFsaWZpZWQlMjBDZXJ0aWZpY2F0 aW9uJTIwU2VydmljZSUyMFByb3ZpZGVyLG8lM2RBY3RhbGlzJTIwUy5wLkEuJTJmMDMzNTg1MjA5 NjcsYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MDagNKAyhjBodHRwOi8v cG9ydGFsLmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9RTEZHMS9nZXRDUkwwDgYDVR0PAQH/BAQDAgEG MA0GCSqGSIb3DQEBCwUAA4IBAQCnhsiPGXnctBmE7OfxqiAADofT2r7ZtLS9bvo8lwKllrmXSRCe dpobKbR5gZ59vouxXxT0JdauS4Yamg5ijK2npJVxPh4oOsGoelSbVnmmOYjuspD4ryxaMWvdxT46 bqb4nNCNnnwd+YBi7bJ7GjHiKKc4Xf4NlK4LzdppF5U9qwVlyz4HhLrZ8fHwzWK1nS6yLS2C0Y8r jjCs4xDUBKz5p/w5pWFK6oqD0Rnu8oRzqUX3t57SeCYDsiJUtI0o0h7BRFK1zTgbR0HzpR8iQoH0 W3aREQVVRXgKge8R4H8jOrFDG5soys06SfVVPmNeqUCwEA63DjsM+et7vCI7OCNd -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Actalis Qualified Certificates CA G1 Issuer OU: Qualified Certification Service Provider Issuer O: Actalis S.p.A./03358520967 Issuer C: IT Subject CN: Actalis Qualified Certificates CA G1 Subject OU: Qualified Certification Service Provider Subject O: Actalis S.p.A./03358520967 Subject C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 30 ETSI 2014 - TSL HR - PDF/A-1b generator Valid from: Mon Aug 16 12:23:11 CEST 2010 Valid to: Tue Aug 16 12:23:11 CEST 2022 Public Key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ubject Key Identifier 6B:CE:64:3D:2B:F8:4F:8B:43:EF:F0:32:BD:EF:91:54:0D:AD:BE:F8 Basic Constraints IsCA: true Authority Key Identifier 6B:CE:64:3D:2B:F8:4F:8B:43:EF:F0:32:BD:EF:91:54:0D:AD:BE:F8 Certificate Policies Policy OID: 1.3.159.1.1.1 CPS text: [L'uso dei certificati emessi da Actalis S.p.A. (REA n.1 669411, Trib. Milano) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://portal.actalis.it/Repository/Policy/Qualified/CPS CRL Distribution Points ldap://ldap.actalis.it/cn%3dActalis%20Qualified%20Certificates%20CA%20G1,ou%3dQualified%2 0Certification%20Service%20Provider,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificate RevocationList;binary http://portal.actalis.it/Repository/QLFG1/getCRL Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 47:61:87:A5:DB:57:45:87:A8:D5:E8:98:4E:70:97:58:DB:60:5B:00:D0:7C:A6:36:CD:42:11:65:85:4 2:26:E3 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2010-08-16T14:23:11Z 3.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.2 - Service : CN=Actalis Qualified Certificates CA,OU=Qualified Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] ITALIA (ITALY) - Trusted List ID: ID100001 A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Page 31 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis Qualified Certificates CA,OU=Qualified Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 100001 X509 Certificate -----BEGIN CERTIFICATE----MIIGqjCCBZKgAwIBAgIDAYahMA0GCSqGSIb3DQEBBQUAMIGFMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMOQWN0YWxpcyBTLnAuQS4xMTAvBgNVBAsTKFF1YWxpZmllZCBDZXJ0aWZpY2F0aW9uIFNlcnZp Y2UgUHJvdmlkZXIxKjAoBgNVBAMTIUFjdGFsaXMgUXVhbGlmaWVkIENlcnRpZmljYXRlcyBDQTAe Fw0wMzEwMjkxMDAyNDhaFw0xMzEwMjkxMDAwNDJaMIGFMQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xMTAvBgNVBAsTKFF1YWxpZmllZCBDZXJ0aWZpY2F0aW9uIFNlcnZpY2Ug UHJvdmlkZXIxKjAoBgNVBAMTIUFjdGFsaXMgUXVhbGlmaWVkIENlcnRpZmljYXRlcyBDQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMoL9hjCdA9jzC91cKxNfKXTYmc2Afp0hl4wXG7r uKHbq2eJ+nQp6nSN9tIGKIFyB6+mXOVk2Tw0vl6J3W9uz8eJOoZD1yYy2Ezap5/CpvBTiGxzQdd9 TkXf1TeYghY0419DBC5i02CSrNjxZzDDQBFhYlWpoFMIa6GWrAInLL45BgwI0r0nRfeMfNUQYVvz lklltGcyGRLZuo8URDeOTnDAuRbwes3qurS5KlfouS6moWTdpWZU5giEn085IFRqXJuIQrt+UL5E fWGJkmH97Eu9ubQPzuC68Y7ib/ddnIbrK7yqvPgaInfQTffOeAozntLb9Aq+3b0d+xJlnD9Llz8C AwEAAaOCAx8wggMbMA8GA1UdEwEB/wQFMAMBAf8wgf0GA1UdIASB9TCB8jCB7wYGK4EfAQEBMIHk MIGaBggrBgEFBQcCAjCBjRqBikwndXNvIGRlaSBjZXJ0aWZpY2F0aSBlbWVzc2kgZGEgQWN0YWxp cyBTLnAuQS4gKFJFQSBuLjEgNjY5NDExLCBUcmliLiBNaWxhbm8pIGUnIHNvZ2dldHRvIGFsbGUg Y29uZGl6aW9uaSBwcmVjaXNhdGUgbmVsIE1hbnVhbGUgT3BlcmF0aXZvLjBFBggrBgEFBQcCARY5 aHR0cHM6Ly9wb3J0YWwuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L1BvbGljeS9RdWFsaWZpZWQvQ1BT MIHGBgNVHREEgb4wgbuBD2luZm9AYWN0YWxpcy5pdIaBp2xkYXA6Ly9sZGFwLmFjdGFsaXMuaXQv Y24lM0RBY3RhbGlzJTIwUXVhbGlmaWVkJTIwQ2VydGlmaWNhdGVzJTIwQ0ElMkNvdSUzRFF1YWxp ZmllZCUyMENlcnRpZmljYXRpb24lMjBTZXJ2aWNlJTIwUHJvdmlkZXIlMkNvJTNEQWN0YWxpcyUy MFMucC5BLiUyQ2MlM0RJVD9jQUNlcnRpZmljYXRlMEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcw AYYmaHR0cHM6Ly9vbmxpbmV2YWxpZGF0aW9uLmFjdGFsaXMuaXQvUUMwgcsGA1UdHwSBwzCBwDCB vaCBuqCBt4aBtGxkYXA6Ly9sZGFwLmFjdGFsaXMuaXQvY24lM2RBY3RhbGlzJTIwUXVhbGlmaWVk JTIwQ2VydGlmaWNhdGVzJTIwQ0Esb3UlM2RRdWFsaWZpZWQlMjBDZXJ0aWZpY2F0aW9uJTIwU2Vy dmljZSUyMFByb3ZpZGVyLG8lM2RBY3RhbGlzJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJl dm9jYXRpb25MaXN0O2JpbmFyeTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFC8O2Q9sKVT3EdZ2 WtjoyEUKVGL+MA0GCSqGSIb3DQEBBQUAA4IBAQCFqZWgzthiNtG0SnIeGhfwC9yg0i0JrGcnl7SW 4WuSom0RBybu2qIFt+83xRCdb28dcBmcrwTMNYpRdlAeTSuucpDY8EmNSB0E1X/fwtUHY5tyPeLi VNlho0jcK4JAbHliY7Bm7DzyFXTwPfeYSaC2fNe5fmIzlnaY/ly8vGDSSdoKvG/SvuDzipUx91WO jrr/xU7WYzPvxQAboFkvXLsv5JOldPCbPYmNDe34C48nSNAoOjCiHntF4UDBbgZ2bf8PT75FHO0i bPSsmNdWv3VCKoJ4o9Yn0p2XZ4RJ/vLEqx5JxjbuWI+n00WCeStOZrGI8gUx36EaTmGos1SrLavA -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis Qualified Certificates CA Issuer OU: Qualified Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis Qualified Certificates CA Subject OU: Qualified Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Wed Oct 29 11:02:48 CET 2003 Valid to: Tue Oct 29 11:00:42 CET 2013 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true Page 32 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.159.1.1.1 CPS text: [L'uso dei certificati emessi da Actalis S.p.A. (REA n.1 669411, Trib. Milano) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://portal.actalis.it/Repository/Policy/Qualified/CPS Subject Alternative Name [email protected] ldap://ldap.actalis.it/cn%3DActalis%20Qualified%20Certificates%20CA%2Cou%3DQualified%20 Certification%20Service%20Provider%2Co%3DActalis%20S.p.A.%2Cc%3DIT?cACertificate Authority Info Access https://onlinevalidation.actalis.it/QC CRL Distribution Points ldap://ldap.actalis.it/cn%3dActalis%20Qualified%20Certificates%20CA,ou%3dQualified%20Certifi cation%20Service%20Provider,o%3dActalis%20S.p.A.,c%3dIT?certificateRevocationList;binary Subject Key Identifier 2F:0E:D9:0F:6C:29:54:F7:11:D6:76:5A:D8:E8:C8:45:0A:54:62:FE Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 5D:C9:AC:33:C4:CA:0E:3C:E8:2C:07:B1:6B:96:CF:7B:90:1D:42:67:27:A0:41:1C:4B:9D:B6:4B:2 F:C3:0C:95 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-10-29T11:02:48Z 3.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.3 - Service : CN=Actalis S.p.A. - Direzione Commerciale Firma,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis S.p.A. - Direzione Commerciale Firma,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 33 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE6TCCA9GgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBhjELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx NTAzBgNVBAMTLEFjdGFsaXMgUy5wLkEuIC0gRGlyZXppb25lIENvbW1lcmNpYWxlIEZpcm1hMB4X DTAzMDkwNDE1MjI0OFoXDTEzMDkwNDE1MjI0OFowgYYxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5B Y3RhbGlzIFMucC5BLjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMTUw MwYDVQQDEyxBY3RhbGlzIFMucC5BLiAtIERpcmV6aW9uZSBDb21tZXJjaWFsZSBGaXJtYTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPd2PZbJvs6vX3Jyn40NfsGQ1/iA1hFbHBIIdgcE s6+GGcYl6LQ4fdRXOxC+FPOFiTyXwDYkaTUxTfjHsiNC/PRDcqDim8KeJBkiTLHya3AlvRxKyIsY 3QaL68DUflu8+ORU43uxyCE57bxmXhBqhTnDxFFnayZjewNEzAw08if/a24xfzoNUAM8yV2g02Ix ma8UaNMGT+5bJOvycnHX2RQ5+C0HAGu9JzXvTVkTGF/KDTI4Ntl/H01uUFuLTIf87qSeOXe1s33O dMUZZQ3l2WlXuVfqR4ULaGaogkF84+EfMf1SjMdYjXZq0lbDCV+OswkpdjnDsNUG6FsVtKKgZ1UC AwEAAaOCAV4wggFaMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgw RgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5 L3F1YWxpZmllZC9DUFMwgcQGA1UdHwSBvDCBuTCBtqCBs6CBsIaBrWxkYXA6Ly9mZS5jc3AubXVs dGljZXJ0aWZ5LmNvbTozODkvb3UlM0RBY3RhbGlzJTIwUy5wLkEuJTIwLSUyMERpcmV6aW9uZSUy MENvbW1lcmNpYWxlJTIwRmlybWElMkNvJTNEQWN0YWxpcyUyMFMucC5BLiUyMC0lMjBEaXJlemlv bmUlMjBDb21tZXJjaWFsZT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBSgeNv6 z/dhdzgAt1MMrEAQMRHtSjANBgkqhkiG9w0BAQUFAAOCAQEA0ODYLpG7iF4FP/RkCEyWnGGGEF/B nJUoOEEgFPabUFR6G023A2Pd57MoRn5gneoW4giLGxIaGWDr7GvS8zIroJvGhaE5z+7P//xQDGmX kTGK8rnv3TXZYKqm2npXwLk3dzS9lIr8bSuDe34Bj+i8fmgHIGj9HU8ULbDcTZvfCmy5bup/X3// pvI9WO8Gg2uYEJ9Ob6lwLjYIq5j83GcWirN3AgbPnsEc2waHEllzuIeK3/tFDe//RZLHbG/I5BDp yss/OCs0npxWDnb46N4NP5AcoXo9+SUifoLsargJD9lEr8JNZrEDk4VmKrz7qgzcY6eYcJDVKbwi fO3nrAwEhQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis S.p.A. - Direzione Commerciale Firma Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis S.p.A. - Direzione Commerciale Firma Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Thu Sep 04 17:22:48 CEST 2003 Valid to: Wed Sep 04 17:22:48 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DActalis%20S.p.A.%20%20Direzione%20Commerciale%20Firma%2Co%3DActalis%20S.p.A.%20%20Direzione%20Commerciale?certificaterevocationlist Subject Key Identifier A0:78:DB:FA:CF:F7:61:77:38:00:B7:53:0C:AC:40:10:31:11:ED:4A ITALIA (ITALY) - Trusted List ID: ID100001 Page 34 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 79:D1:03:97:EE:00:63:D6:D7:E1:1B:3E:BC:9F:88:47:E3:68:3B:5B:32:59:28:DD:E3:9D:3A:47:B4: 9F:AC:6A Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-04T17:22:48Z 3.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.4 - Service : CN=Actalis Qualified Certificates CA,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis Qualified Certificates CA,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 63 X509 Certificate -----BEGIN CERTIFICATE----MIIFpTCCBI2gAwIBAgIBPzANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEq MCgGA1UEAxMhQWN0YWxpcyBRdWFsaWZpZWQgQ2VydGlmaWNhdGVzIENBMB4XDTAyMDMwMTA4MDcw MFoXDTEyMDMwMTIzNTkwMFowezELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEu MScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxKjAoBgNVBAMTIUFjdGFs aXMgUXVhbGlmaWVkIENlcnRpZmljYXRlcyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcOMYssuaz5NmFBm4l709j3+5Zb89EriD7VI634djEO6rAkZeVUkUGbDeJLUgHrrgE3QpNp h8WEhic4/00/T4Thk5vYhJ0XtohbFBX4JXMAzcrA9IlN0RzcrqOrnkgLyYhmDIhQBm+L68Inc86O tTLsUPG18CAoVFThpIPZW2IBrmZiVoWJTABa4/ShAcRmrZuWyuOZ/nQDLft8MHAqzwSHbsTFfUar v++HjGrELiTumQtZYkr6TBmPQv+qYj/ITZYhz3J98LWqPLp8tw5edtgUOS1Gq4CQTROg0MlMK9Hl z0mR3nU7x8YobRWizYQU3DL6PWXhkNtgnl0Cf1eAQGsCAwEAAaOCAjIwggIuMB0GA1UdDgQWBBS1 TwZ6e+6Ep8u1iHge4TPcQ3w0oDCB9wYDVR0fBIHvMIHsMDCgLqAshipodHRwOi8vY2EuYWN0YWxp cy5pdC9jZ2ktYmluL2FpcGFkcy9nZXRDUkwwgbeggbSggbGGga5sZGFwOi8vbGRhcC5hY3RhbGlz Lml0L2NuJTNEQWN0YWxpcyUyMFF1YWxpZmllZCUyMENlcnRpZmljYXRlcyUyMENBJTJDb3UlM0RD ZXJ0aWZpY2F0aW9uJTIwU2VydmljZSUyMFByb3ZpZGVyJTJDbyUzREFjdGFsaXMlMjBTLnAuQS4l MkNjJTNESVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnkwgfEGA1UdIASB6TCB5jCB 4wYGK4EfAQEBMIHYMIGZBggrBgEFBQcCAjCBjBqBiUwndXNvIGRlaSBjZXJ0aWZpY2F0aSBlbWVz c2kgZGEgQWN0YWxpcyBTLnAuQS4gKFJFQSBuLjE2Njk0MTEsIFRyaWIuIE1pbGFubykgZScgc29n Z2V0dG8gYWxsZSBjb25kaXppb25pIHByZWNpc2F0ZSBuZWwgTWFudWFsZSBPcGVyYXRpdm8uMDoG CCsGAQUFBwIBFi5odHRwczovL2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BT MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQDTLPq2 g8XOvd6kCVAB/mQWryF7+kgZYuydn4Uioq3Ppx2Ky5SKv3lbyxKMz0AqdM8gxkZnQuMXYuAp9dFx JhTRIql1j+LWW8J8o4qoEwJpRzlftw4dBV+rX58EAxmj/mmHXqDx9x318qDu3ANI5L8SfwUvFcpS uDanHnKqS4eXMyE1FEf9KwpJ48bJM8JQokGabmEQGAFt9tSVfLJn4RwiAxZiughUjE62B3ctBa2/ 12WGjpBDYqGSmNT/31vChutWCxRKzXLL1QkapFDvMJ1NFyVeAt9xfViOvmsmy2gByiyGRYHu5LT3 c0dUtPCv2JR7Y2SkETxWiDlFEyX8t3MF -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 35 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: Actalis Qualified Certificates CA Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis Qualified Certificates CA Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Mar 01 09:07:00 CET 2002 Valid to: Fri Mar 02 00:59:00 CET 2012 Public Key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ubject Key Identifier B5:4F:06:7A:7B:EE:84:A7:CB:B5:88:78:1E:E1:33:DC:43:7C:34:A0 CRL Distribution Points http://ca.actalis.it/cgi-bin/aipads/getCRL ldap://ldap.actalis.it/cn%3DActalis%20Qualified%20Certificates%20CA%2Cou%3DCertification% 20Service%20Provider%2Co%3DActalis%20S.p.A.%2Cc%3DIT?certificateRevocationList;binary Certificate Policies Policy OID: 1.3.159.1.1.1 CPS text: [L'uso dei certificati emessi da Actalis S.p.A. (REA n.1669411, Trib. Milano) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://ca.actalis.it/repository/qualified/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4A:C2:F1:E0:A9:A5:EB:C1:87:17:41:43:F1:59:7F:F1:7B:D3:C0:40:5E:3E:FF:29:A4:B1:6E:62:46: 13:01:96 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. ITALIA (ITALY) - Trusted List ID: ID100001 Page 36 ETSI 2014 - TSL HR - PDF/A-1b generator Status Starting Time 2002-03-01T09:07:00Z 3.4.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.5 - Service : CN=Actalis CA per Firma Digitale Qualificata,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis CA per Firma Digitale Qualificata,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIErjCCA5agAwIBAgIBATANBgkqhkiG9w0BAQUFADCBgzELMAkGA1UEBhMCSVQxFzAVBgNVBAoM DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLDB5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx MjAwBgNVBAMMKUFjdGFsaXMgQ0EgcGVyIEZpcm1hIERpZ2l0YWxlIFF1YWxpZmljYXRhMB4XDTA2 MDMxNzE0MTU0NFoXDTE2MDMxNjE0MTU0NFowgYMxCzAJBgNVBAYTAklUMRcwFQYDVQQKDA5BY3Rh bGlzIFMucC5BLjEnMCUGA1UECwweQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMTIwMAYD VQQDDClBY3RhbGlzIENBIHBlciBGaXJtYSBEaWdpdGFsZSBRdWFsaWZpY2F0YTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJ/I0iN7HDZsptyEu/vmQ2lbi8lze1Z8SGbe9UUf/auvpaCT GHAinUFrRgEgQuGyl2XZzA/5/hOM0EBJ3Ho6NPcKieEe5lyIr9Ozn27QTGaP4GNtuDg2TTMPy44A KeDwH3Y+QwDY8vPivB/jM0dYtjDDrjW++AR8Lut3Q8Zw7a/XE3kpAfsloYtLEj1fvaoljQp5XOFB bdbqncAc/Q6TRabdXw43Y/h3amvdxTVFS2mIxMirNpmYsAmPGMaV6DLO8Be9KMu9x6cxJ3WSWvwa g2fQU0rUjw4As/6mdZLWcC5h76cf/HPNXpIEQwxMKXHl9yAGadflm6Gzgv0kOrPbVl0CAwEAAaOC ASkwggElMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/QfpbxdtC X3LFk9wEcdLHEQQziTBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5odHRwczov L3BvcnRhbC5hY3RhbGlzLml0L0luZm8vaW5mb1BvbGljeV9odG1sMIGPBgNVHR8EgYcwgYQwgYGg f6B9hntsZGFwOi8vZmUuY3NwLm11bHRpY2VydGlmeS5jb20vb3UlM2RBY3RhbGlzJTIwQ0ElMjBw ZXIlMjBGaXJtYSUyMERpZ2l0YWxlJTIwUXVhbGlmaWNhdGEsbyUzRENOSVBBP2NlcnRpZmljYXRl cmV2b2NhdGlvbmxpc3QwDQYJKoZIhvcNAQEFBQADggEBAE2upGoG6zvtGsThR+UNrYznYFZh8VvE aTu2H6bAIgpxUBvNk+JFk6fVjYTXAZXgT9Rxunf62Os9Hdt4NRH6uW/D7yrT+FYc77pgTpUviKYa 6gp2eckSE1WsI/gg0a/2tJRgcXkG4N2tPRVatd2AYTegYjpsths/BUlcStdO8qUsqRSLpgdpiu3z FknVtLdr/iMc+hYVBPAR1aQ+RRpI/7z9GR0XFYJm/8ZBM0+ozypN89f9DSDLlE4QTLoWFs6nYiuh VWWRtCK+2MA9CsUGPrAGrFng7YQ3GcxdunEbGDynvEAAidZa4berXDbsSqGeamnDeXN9uyXHqsV8 BPCvjIc= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis CA per Firma Digitale Qualificata Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis CA per Firma Digitale Qualificata ITALIA (ITALY) - Trusted List ID: ID100001 Page 37 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Mar 17 15:15:44 CET 2006 Valid to: Wed Mar 16 15:15:44 CET 2016 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:9F:C8:D2:23:7B:1C:36:6C:A6:DC:84:BB:FB:E6:43:69:5B:8B:C9:73:7B:56:7C:48:66:DE:F5:45:1F:FD:AB:AF:A5:A 0:93:18:70:22:9D:41:6B:46:01:20:42:E1:B2:97:65:D9:CC:0F:F9:FE:13:8C:D0:40:49:DC:7A:3A:34:F7:0A:89:E1:1E:E6:5C:88:AF:D3:B3:9F:6E:D0:4C:66:8F:E0:63:6D:B8:38:36:4D:33:0F:CB:8E:00:29:E0:F0:1F:76:3E:43:00 :D8:F2:F3:E2:BC:1F:E3:33:47:58:B6:30:C3:AE:35:BE:F8:04:7C:2E:EB:77:43:C6:70:ED:AF:D7:13:79:29:01:FB:25:A1:8B:4B:12:3D:5F:BD:AA:25:8D:0A:79:5C:E1:41:6D:D6:EA:9D:C0:1C:FD:0E:93:45:A6:DD:5F:0E:37: 63:F8:77:6A:6B:DD:C5:35:45:4B:69:88:C4:C8:AB:36:99:98:B0:09:8F:18:C6:95:E8:32:CE:F0:17:BD:28:CB:BD:C7:A7:31:27:75:92:5A:FC:1A:83:67:D0:53:4A:D4:8F:0E:00:B3:FE:A6:75:92:D6:70:2E:61:EF:A7:1F:FC:73:C D:5E:92:04:43:0C:4C:29:71:E5:F7:20:06:69:D7:E5:9B:A1:B3:82:FD:24:3A:B3:DB:56:5D:02:03:01:00:01 Basic Constraints IsCA: true Subject Key Identifier FF:41:FA:5B:C5:DB:42:5F:72:C5:93:DC:04:71:D2:C7:11:04:33:89 Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://portal.actalis.it/Info/infoPolicy_html CRL Distribution Points ldap://fe.csp.multicertify.com/ou%3dActalis%20CA%20per%20Firma%20Digitale%20Qualificata,o %3DCNIPA?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 43:59:D9:DE:6A:F2:C3:F4:90:57:9C:1B:A2:6C:AD:9C:24:6E:50:F0:D1:DC:DA:B5:80:BB:14:A2: 73:A5:75:74 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2006-03-17T15:15:44Z 3.5.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.6 - Service : [email protected],CN=ASMEZ firma digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] ITALIA (ITALY) - Trusted List ID: ID100001 A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Page 38 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] [email protected],CN=ASMEZ firma digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIErTCCA5WgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBjzELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx HTAbBgNVBAMTFEFTTUVaIGZpcm1hIGRpZ2l0YWxlMR8wHQYJKoZIhvcNAQkBFhBwb3N0YWNhQGFz bWV6Lml0MB4XDTA0MDIyNjE0NDI0MFoXDTA3MDIyNTE0NDI0MFowgY8xCzAJBgNVBAYTAklUMRcw FQYDVQQKEw5BY3RhbGlzIFMucC5BLjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFBy b3ZpZGVyMR0wGwYDVQQDExRBU01FWiBmaXJtYSBkaWdpdGFsZTEfMB0GCSqGSIb3DQEJARYQcG9z dGFjYUBhc21lei5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnj4WTfPfDgi8dg GjEkS0d7sXOUH6MNP54vUCBgPwBRynCNR/Nnft+JbpEwLmp+2asMqj+eiN4Qi/tGSS8AYfFti4wR IzT3Mw7h/gDfQruy3vUwh3JVSYIzipmE0AJ3vntUbzsRtZ7cQhCRVUZ4EpPdldaV7qxlyTiDkGAO pH58pyDhLCcq6Ov4bQkc0BwQDDJ0+KrG22TY8BfBpXpkn+If8CmefEVedmFPL25zNbC2pOO3+lbJ 2rML+P3PlGVKFO+xPqX/GrQDVD4mR5OwuxyLQPts+oUdYPYGeZF3KMqi2MQNgPJG3mhlKHphYZv3 3phZDNrAkHKFqs5lPksMc4cCAwEAAaOCARAwggEMMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0 YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwdwYDVR0fBHAwbjBsoGqgaIZmbGRhcDov L2ZlLmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzREFTTUVaJTIwRmlybWElMjBkaWdpdGFs ZSUyQ28lM0RBU01FWj9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBTOQ6D8mDsE dYim//WUoL3Y4hrY1TANBgkqhkiG9w0BAQUFAAOCAQEAKg+vKrjuP24kDQKEKE18/ZSBHT8u/Is6 YdXkJhSGfABMjfSGrAKoYh+5QhQbIzTs6FuLJAi/nFtmqiIfAyWpdPCGEhHY2YDe7Lt8pQnS+JlD g6Orr9mpc1Vz0NKTU8eQsu5VNkBas5JkZ0hFYaP4nWOJ1SPxMOFUesEBuN+kTsa9Y11pnWmSGOJl Nc+ULqJ7hiv6+zu/N9MWPk3iuc9AlZed7MRHtVzZzQwMGPhHy8CCBdpjJFmfFrPyjABU62FVislh jpasyWtE8y5b1nJoGj3GJttU1lAVNlwQQ17KPogDI6jr/leh1UDd033PHMwz8bAliUXm1xdWaBQK DXWQTA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: ASMEZ firma digitale Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject E: [email protected] Subject CN: ASMEZ firma digitale Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Thu Feb 26 15:42:40 CET 2004 Valid to: Sun Feb 25 15:42:40 CET 2007 Public Key: ITALIA (ITALY) - Trusted List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age 39 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DASMEZ%20Firma%20digitale%2Co%3DASMEZ?certifi caterevocationlist Subject Key Identifier CE:43:A0:FC:98:3B:04:75:88:A6:FF:F5:94:A0:BD:D8:E2:1A:D8:D5 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 69:3A:03:40:32:F9:7C:EF:40:F7:FB:2F:F5:31:2A:A9:3D:7E:36:1F:B2:B4:96:C8:58:E2:9E:B7:79:B 3:4E:FC Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-02-26T15:42:40Z 3.6.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.7 - Service : CN=Comune di Livorno Firma digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Comune di Livorno Firma digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 40 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1 -----BEGIN CERTIFICATE----MIIEqDCCA5CgAwIBAgIBATANBgkqhkiG9w0BAQUFADB6MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEp MCcGA1UEAxMgQ29tdW5lIGRpIExpdm9ybm8gRmlybWEgZGlnaXRhbGUwHhcNMDQwNDA2MTUwNTE4 WhcNMTQwNDA3MTUwNTE4WjB6MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAuQS4x JzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEpMCcGA1UEAxMgQ29tdW5l IGRpIExpdm9ybm8gRmlybWEgZGlnaXRhbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMSUwR999YXE/KZcZNQgAs3A/6QrqO48e+8likxdCQjCEQm0LMEGabdGGeifA3OUvUdAkFlDxq fleqN+CzXB0WMe2j1eJycUEfGV4S2JHd4rpAOEA3RSszvP7vkUj85d82bWvDfb3a3EO/+oVrEKUd pqr7zx2RJBVrOBDhh3ZNxYM97B99aqRinlFOPKPSE1felVWjcU10YXd+U9iRxF/tIGqa/UgqFuMl qwwLmKCmU5IKOxN+OnMcPg+bSmdcgf3jBvgfqHcsKElGS8NBhocIXp/J8fJ6XN3QY8sb1mMkFwNt nUBDCMsoguX03uVbI3N3W5PA9FzoZwpLi62d4NiTAgMBAAGjggE3MIIBMzAPBgNVHRMBAf8EBTAD AQH/MA4GA1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5o dHRwczovL2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMIGdBgNVHR8EgZUw gZIwgY+ggYyggYmGgYZsZGFwOi8vZmUuY3NwLm11bHRpY2VydGlmeS5jb206Mzg5L291JTNEQ29t dW5lJTIwZGklMjBMaXZvcm5vJTIwRmlybWElMjBkaWdpdGFsZSUyQ28lM0RDb211bmUlMjBkaSUy MExpdm9ybm8/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUZdUKjkLDxPPVxy1C XwujxfokaVkwDQYJKoZIhvcNAQEFBQADggEBAJtB07AaBlztW75A1zuxHTjhUVHwVazTUNbbYJSt ImnBYwGL4N3/JDQmF2owjB0bqc+uG+rhWKWjYiTwx0PpisFwZt8hajzqI22N3wZW/nO/v64uYBWf NB22YvQ71TXEGxGYIjnJ34I3FLVMRCKwf0tHNeUDNl0Dvng41GfExCWNOaZjQjODc4fhk21Tj7wN f5RsSYVeRSpkWDt9Ex3JdwmvPnUz24G+4XAc1+IVpBhxIZaHAUO8T0kYpFEn/x1O7ZdAVVh8X08K AnaGDeSCaWvgPDruyFgcai+27G7KZQ6Pa8b+IohXPd1P8vbQKoZ9izyZU7ghDr3wzGxWyUCkLgw= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Comune di Livorno Firma digitale Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Comune di Livorno Firma digitale Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Apr 06 17:05:18 CEST 2004 Valid to: Mon Apr 07 17:05:18 CEST 2014 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DComune%20di%20Livorno%20Firma%20digitale%2Co% 3DComune%20di%20Livorno?certificaterevocationlist Subject Key Identifier 65:D5:0A:8E:42:C3:C4:F3:D5:C7:2D:42:5F:0B:A3:C5:FA:24:69:59 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 01:26:A4:FB:F0:C3:1D:F9:D6:63:67:69:36:69:A9:78:2E:CC:47:5E:B2:5C:CB:46:B2:07:D8:B0:1A: 0E:8D:BE ITALIA (ITALY) - Trusted List ID: ID100001 Page 41 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-04-06T17:05:18Z 3.7.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.8 - Service : CN=Firma digitale Regione Marche,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Firma digitale Regione Marche,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEljCCA36gAwIBAgIBATANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEm MCQGA1UEAxMdRmlybWEgZGlnaXRhbGUgUmVnaW9uZSBNYXJjaGUwHhcNMDQwMTE0MTQwNzA1WhcN MTQwMTE0MTQwNzA1WjB3MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAuQS4xJzAl BgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEmMCQGA1UEAxMdRmlybWEgZGln aXRhbGUgUmVnaW9uZSBNYXJjaGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhs1d x8VyVK0y61P+1g2a3fq4Skk9+FRrC8U/z63uHa+mIrSL4iHDwGnC2V6Fbt2HHdveYz9ApZ6JPjJr ygErNHWOR6zyDMAzHmMBRLI2cFTnQF63AV64jk/6xPiubRnybH16k2CPqG54LCO7pVaxp2txvKYX gH6cbCrPYAPFllsFFxTyyQSPciPanoEuq5RAmJiqKmoNM3Q335rI3NyQw8inR6wceU65nA1lnQXm psEmhIhjywJGo71CG0rQj37G6NyazWqMpJxct5xRXGSuALIKrHrGs6SBBn2+ne9x836MatKxc1aA VK64a4qvgO6lzR2IA6lNMd9Bjm4JA011AgMBAAGjggErMIIBJzAPBgNVHRMBAf8EBTADAQH/MA4G A1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5odHRwczov L2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMIGRBgNVHR8EgYkwgYYwgYOg gYCgfoZ8bGRhcDovL2ZlLmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzREZpcm1hJTIwZGln aXRhbGUlMjBSZWdpb25lJTIwTWFyY2hlJTJDbyUzRFJlZ2lvbmUlMjBNYXJjaGU/Y2VydGlmaWNh dGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUjGB5tH3l846leG2dhQ4V0/QYGEIwDQYJKoZIhvcN AQEFBQADggEBAIKXwB+98wdsKOiGWbYGChF/TaypZE8PbD5S+imBIBXmOlWsC7lVB5OxRlpiYlTc +Hl99Fraz65BUTlHQbukDMbwsHwf0XYDZ5O9GrInFXlORVat6kEzyR/fHIdUM3j7UvgeqnlG6v2Z Z7wmTFvXrwUU4Od9WimDCyVw5/gXUQf+FeipBKsKQ5Jnn5gJZA3Ui2bWL2QKYhQBWyqD+YKw/tZr rrSlh07PhJe3QtZ23roRa/Lva5h3ZraNZfle2PY6P/6JkjsjKhxRWIOzhP5wiuSETNVjdNUklDNY I2ECsR6rw95Yb371DR/Xg0VKIY07gK+5jWYD9I5UIuX/K/QzLGo= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Firma digitale Regione Marche Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 42 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer C: IT Subject CN: Firma digitale Regione Marche Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Wed Jan 14 15:07:05 CET 2004 Valid to: Tue Jan 14 15:07:05 CET 2014 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:97:86:CD:5D:C7:C5:72:54:AD:32:EB:53:FE:D6:0D:9A:DD:FA:B8:4A:49:3D:F8:54:6B:0B:C5:3F:CF:AD:EE:1D:AF: A6:22:B4:8B:E2:21:C3:C0:69:C2:D9:5E:85:6E:DD:87:1D:DB:DE:63:3F:40:A5:9E:89:3E:32:6B:CA:01:2B:34:75:8E:47:AC:F2:0C:C0:33:1E:63:01:44:B2:36:70:54:E7:40:5E:B7:01:5E:B8:8E:4F:FA:C4:F8:AE:6D:19:F2:6C:7 D:7A:93:60:8F:A8:6E:78:2C:23:BB:A5:56:B1:A7:6B:71:BC:A6:17:80:7E:9C:6C:2A:CF:60:03:C5:96:5B:05:17:14:F2:C9:04:8F:72:23:DA:9E:81:2E:AB:94:40:98:98:AA:2A:6A:0D:33:74:37:DF:9A:C8:DC:DC:90:C3:C8:A7: 47:AC:1C:79:4E:B9:9C:0D:65:9D:05:E6:A6:C1:26:84:88:63:CB:02:46:A3:BD:42:1B:4A:D0:8F:7E:C6:E8:DC:9A:CD:6A:8C:A4:9C:5C:B7:9C:51:5C:64:AE:00:B2:0A:AC:7A:C6:B3:A4:81:06:7D:BE:9D:EF:71:F3:7E:8C:6 A:D2:B1:73:56:80:54:AE:B8:6B:8A:AF:80:EE:A5:CD:1D:88:03:A9:4D:31:DF:41:8E:6E:09:03:4D:75:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DFirma%20digitale%20Regione%20Marche%2Co%3DReg ione%20Marche?certificaterevocationlist Subject Key Identifier 8C:60:79:B4:7D:E5:F3:8E:A5:78:6D:9D:85:0E:15:D3:F4:18:18:42 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B1:B0:42:BE:4D:8D:34:5C:93:03:E0:EE:F5:29:62:00:B1:B4:53:66:BD:67:02:F4:EB:6E:76:59:94:2 7:54:35 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-01-14T15:07:05Z 3.8.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.9 - Service : CN=- Firma Digit. AIPA Cons. Portale San. Ped. OPBG,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 43 ETSI 2014 - TSL HR - PDF/A-1b generator Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digit. AIPA Cons. Portale San. Ped. OPBG,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFBDCCA+ygAwIBAgIBATANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx OTA3BgNVBAMTMC0gRmlybWEgRGlnaXQuIEFJUEEgQ29ucy4gUG9ydGFsZSBTYW4uIFBlZC4gT1BC RzAeFw0wMzA5MDkxMDE4NDlaFw0xMzA5MDkxMDE4NDlaMIGKMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMOQWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRl cjE5MDcGA1UEAxMwLSBGaXJtYSBEaWdpdC4gQUlQQSBDb25zLiBQb3J0YWxlIFNhbi4gUGVkLiBP UEJHMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj0fzpvLhEnMhrB18dO5BqQv+ewm 8RJRtNlpdOJhZoxfap9nbimSETRhs5GHV8UGZpEt8WlJFtqAhALo6/SYopXxvTVjzDZfvBe2CmgG 9M8y5/HhigQ/jp5w7C4L2txObkFoiQPBjUtcoM+GPa1rHVB7Ex9i2sKoGxuePtZItXCpvablJQqg w9FxtyC1fqF2g8XmCoMej25QasapVad4sjW+2hQza122S60ELrf5m1I2uUsvqSpB3c2W4WA5xLex +zl4HNdvYRE3qE1Nyvpoinfen8GvJqhsYx/wNOdY+JyLpMy/PMuqvM15JVpnj5jtyfr9Wxd7Ibpy RcsJJj9ViQIDAQABo4IBcTCCAW0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwUQYD VR0gBEowSDBGBgYrgR8BAQEwPDA6BggrBgEFBQcCARYuaHR0cHM6Ly9jYS5hY3RhbGlzLml0L3Jl cG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCB1wYDVR0fBIHPMIHMMIHJoIHGoIHDhoHAbGRhcDovL2Zl LmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRC0lMjBGaXJtYSUyMERpZ2l0LiUyMEFJUEEl MjBDb25zLiUyMFBvcnRhbGUlMjBTYW4uJTIwUGVkLiUyME9QQkclMkNvJTNEQ29uc29yemlvJTIw UG9ydGFsZSUyMFNhbml0YXJpbyUyMFBlZGlhdHJpY28lMjAtJTIwT1BCRz9jZXJ0aWZpY2F0ZXJl dm9jYXRpb25saXN0MB0GA1UdDgQWBBTzsucBYAZA2gRhpY4tAoQZ+eBz8DANBgkqhkiG9w0BAQUF AAOCAQEAP2PRHYemRUMMJYM0SDSZAOm143OMcfbWvdpSZbR8BgvHqt9bcOF353j586dp7eaj6iQR wDUgS0W1y8sa4p/MZbiwUujtfA8z2xHPWEuvD031/rPoXGvK64raT7lrzVbPDOc7TMu07+UTt8YT xHf+Mv2268WkRGfWD+EG2CEffViJ9PSBug+bWc4wKU9BKmx11qTVWtjfEutJlr4aUAgXuys0otlE vqpMTPdI224h54LRiLY5z1D7KtAB0XVaKqNVw+4EudgPa+ruRfzOCZZ3A2Smg87flIXClTWtPnBg qpv4bE4jG5BNBKOtpTfdX7IefyuKojnPNs8uRMeYLX+fgQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digit. AIPA Cons. Portale San. Ped. OPBG Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digit. AIPA Cons. Portale San. Ped. OPBG Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Sep 09 12:18:49 CEST 2003 Valid to: Mon Sep 09 12:18:49 CEST 2013 Public Key: ITALIA (ITALY) - Trusted List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age 44 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digit.%20AIPA%20Cons.%20Portale%20San.%20Ped.%20OPBG%2Co%3DConsor zio%20Portale%20Sanitario%20Pediatrico%20-%20OPBG?certificaterevocationlist Subject Key Identifier F3:B2:E7:01:60:06:40:DA:04:61:A5:8E:2D:02:84:19:F9:E0:73:F0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 56:F9:D3:99:AE:F8:4A:48:40:41:FD:CF:67:3C:27:BE:97:9B:AD:C0:C5:B0:0A:B8:BE:A5:FB:55: D4:A6:C2:D5 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-09T12:18:49Z 3.9.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.10 - Service : CN=- Firma digitale - Molise Dati,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma digitale - Molise Dati,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 45 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIEpTCCA42gAwIBAgIBATANBgkqhkiG9w0BAQUFADB4MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEn MCUGA1UEAxMeLSBGaXJtYSBkaWdpdGFsZSAtIE1vbGlzZSBEYXRpMB4XDTAzMDkwODEwMTU0MVoX DTEzMDkwODEwMTU0MVoweDELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMScw JQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxJzAlBgNVBAMTHi0gRmlybWEg ZGlnaXRhbGUgLSBNb2xpc2UgRGF0aTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANru iLUBmlLb3tp8SrYz4PNz9U73Riv6uFIILTDhOognwn/I2hAHyAVYKZsNFcKEGMRFb/ryUgYPS9oM 7O0qg0GrenFqV+j1ylLUjPMQbi/lBa4Yqsbp00vOOHVh6xUH7Dk3M9cdBz00z6xwk6ipahPHNRif NaGbbB5xl2XHCOqLRyQvE0ab8gvyoywk3MjI4QbnlNJOEoArJ+Fz38SaShku3W3wpV8y5I6bYoMv 9kQ5kTWi4wTb+u+R0lnQXBB87mtlhCl0WGK6gq8lrvMXfDGfjoERoBqN8iMwn+HG69oPReDB+ZEc 0MZCsXIsXB2xG+Dcfs5x2iJea0cM+t09dR0CAwEAAaOCATgwggE0MA8GA1UdEwEB/wQFMAMBAf8w DgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBz Oi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgZ4GA1UdHwSBljCBkzCB kKCBjaCBioaBh2xkYXA6Ly9mZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwRmly bWElMjBkaWdpdGFsZSUyMC0lMjBNb2xpc2UlMjBEYXRpJTJDbyUzRE1vbGlzZSUyMERhdGklMjBT LnAuQS4/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUo0KWGxomdosbLn6o1nvf 3uQ997wwDQYJKoZIhvcNAQEFBQADggEBALmq83hiDY/oH2lOQ81MAT5rJ3EqD7nbDGmxq6oPiheb J8znPQ2FTjW0L7Lsx7MyJFeu/WYCPwOmVGttrWaTOH9raSF0DoeGrv7yHqMGhDBGwFNpIlE/3R9M 4W0UEh884P4kNLCfjjy3ZIt5jVmvHcq7i9jgXVTYx+f8kRpkK1up0gTlItDD2egFai+oh7P5FFCE VHALF3/YpuDBTHIssJfiUho0MZBpaUiHV2ElSOxeOd6GMBpzwYrMl726JYzpvYeWAMiZo/YefO32 iGd5tzQYXxqSgu2tOpHLO3R7KPzb8C8R8ce6FS8HgcwDx9dVXfxPE3/oBgU7Vf7+AvCfVdg= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma digitale - Molise Dati Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma digitale - Molise Dati Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Mon Sep 08 12:15:41 CEST 2003 Valid to: Sun Sep 08 12:15:41 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20Firma%20digitale%20%20Molise%20Dati%2Co%3DMolise%20Dati%20S.p.A.?certificaterevocationlist Subject Key Identifier A3:42:96:1B:1A:26:76:8B:1B:2E:7E:A8:D6:7B:DF:DE:E4:3D:F7:BC Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 3A:15:EC:B2:AB:EF:F1:B5:87:F0:8F:36:D9:8F:CF:38:F9:39:BE:07:3B:78:E2:07:B9:48:3C:36:7B: 2A:FE:CF Service Status ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Page 46 ETSI 2014 - TSL HR - PDF/A-1b generator Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-08T12:15:41Z 3.10.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.11 - Service : CN=- Firma Digitale AIPA - Ascoli Piceno,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale AIPA - Ascoli Piceno,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE1TCCA72gAwIBAgIBATANBgkqhkiG9w0BAQUFADB/MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEu MCwGA1UEAxMlLSBGaXJtYSBEaWdpdGFsZSBBSVBBIC0gQXNjb2xpIFBpY2VubzAeFw0wMzA5MDgw OTI0MjdaFw0xMzA5MDgwOTI0MjdaMH8xCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5BY3RhbGlzIFMu cC5BLjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMS4wLAYDVQQDEyUt IEZpcm1hIERpZ2l0YWxlIEFJUEEgLSBBc2NvbGkgUGljZW5vMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzqmPoVsTRcF8fShTAaok5h8UPQEO8NlgghAue0CB76ct+RtbVjlM0OpGHkGZ 5myC34Ln67tIta5ebz94P4mrA6vuF+kAVaZLBz6/Pla4gCho7oaEuIBhQ8Y+mQ5qQJ/khry6mzKl ZQAYb2dRmSj3ezOmrkpCU8cSy3O8VSEGjAqNGu+lJy28CENdZC1l0Kwd8ngdLvblwNfT/6mX059t Tq0tJtv3rxU+nkGfI8HSFqbJ9octnO/cbXaWNodz9m+sUveoQm43EY7QGRN6i4Gu3NmTJu45Canj F2RNshrGi78AKQ0KOtB9BtU7XCJ0iQh4PD4w3mMBY1dwx3x00CGwWQIDAQABo4IBWjCCAVYwDwYD VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwUQYDVR0gBEowSDBGBgYrgR8BAQEwPDA6Bggr BgEFBQcCARYuaHR0cHM6Ly9jYS5hY3RhbGlzLml0L3JlcG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCB wAYDVR0fBIG4MIG1MIGyoIGvoIGshoGpbGRhcDovL2ZlLmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4 OS9vdSUzRC0lMjBGaXJtYSUyMERpZ2l0YWxlJTIwQUlQQSUyMC0lMjBBc2NvbGklMjBQaWNlbm8l MkNvJTNEQW1taW5pc3RyYXppb25lJTIwUHJvdmluY2lhbGUlMjBBc2NvbGklMjBQaWNlbm8/Y2Vy dGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUiSysR6dkH9/snlNcQNi9SrgoqNgwDQYJ KoZIhvcNAQEFBQADggEBABwQrSIujcsPqzRp4o30kuxEOTd2ymvgv1M3kCFJNJA0s70GaUZTFBpE zyBd83LvEUuhDyM6TQZb1MZFhzZMdTzcBFw/0OrCQdXLEUSK7sQPSEjCf2Vu2h0qGUl3+kLGjY/F 05p8GyIIbIQvyt0KRuMKIL/LJytWfBAypZWGRkvZeSWxObkyJTib4TODn1xj/UQFSRzFTdmLTzgo NXepUVBcYpDb/1JNs3DytUlECEKR+bl9uhHGnhwsH19Bk/ZtwrJ93xBfELA8nnhNtzGqVkXV+gpT g1llrmwEmCMS+1b24dJlWen+LD3AhkLlAuW0otD76Ewq+6jamlPo21hVpw0= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale AIPA - Ascoli Piceno Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 47 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer C: IT Subject CN: - Firma Digitale AIPA - Ascoli Piceno Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Mon Sep 08 11:24:27 CEST 2003 Valid to: Sun Sep 08 11:24:27 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20Firma%20Digitale%20AIPA%20%20Ascoli%20Piceno%2Co%3DAmministrazione%20Provinciale%20Ascoli%20Piceno?certificate revocationlist Subject Key Identifier 89:2C:AC:47:A7:64:1F:DF:EC:9E:53:5C:40:D8:BD:4A:B8:28:A8:D8 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 57:DF:CF:33:2E:64:E6:DB:58:01:7C:ED:B3:26:FA:41:3B:1C:93:12:B1:9C:84:36:5F:9F:9F:AF:04: 18:AF:F1 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-08T11:24:27Z 3.11.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 48 ETSI 2014 - TSL HR - PDF/A-1b generator 3.12 - Service : CN=- Firma Digitale AIPA - Provincia di Firenze,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale AIPA - Provincia di Firenze,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE1zCCA7+gAwIBAgIBATANBgkqhkiG9w0BAQUFADCBhjELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx NTAzBgNVBAMTLC0gRmlybWEgRGlnaXRhbGUgQUlQQSAtIFByb3ZpbmNpYSBkaSBGaXJlbnplMB4X DTAzMDkwNTA4MTU1MVoXDTEzMDkwNTA4MTU1MVowgYYxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5B Y3RhbGlzIFMucC5BLjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMTUw MwYDVQQDEywtIEZpcm1hIERpZ2l0YWxlIEFJUEEgLSBQcm92aW5jaWEgZGkgRmlyZW56ZTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJg1Wo4bkF0KnofOPJ/XLp5VUsqHyTQHtBViWefM O0DSamXPbVgi2BTIw/OXdV7Ifx4++LO4swRcmL0lleDF5BCfiJAd6YiLk6MOMdbOhIqXx5vwrN9c ziNrmB5EraGRsAxIyOkZt9AgTolkZpAduNO+spCDnlUcdVO56kePpDAjVsNS/0+jQNOEG8U6jmqb WyAxC4hHzjph+rNpVVbNlj9QfA9ieJYh26AfandklXo06iKGv/c01W6p1GbUvQFeC1ayUFL0wDAX dlWNinmHoMKV13WaMTBLjmbZkUz10TWTm1iuKIihVvqgG7CtZhrwX/Cu+XX9bEtrHQKvq1QbacEC AwEAAaOCAUwwggFIMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgw RgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5 L3F1YWxpZmllZC9DUFMwgbIGA1UdHwSBqjCBpzCBpKCBoaCBnoaBm2xkYXA6Ly9mZS5jc3AubXVs dGljZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwRmlybWElMjBEaWdpdGFsZSUyMEFJUEElMjAtJTIw UHJvdmluY2lhJTIwZGklMjBGaXJlbnplJTJDbyUzRFByb3ZpbmNpYSUyMGRpJTIwRmlyZW56ZT9j ZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBRIdFIWRdkThJiFEuydsvD/UNkGqjAN BgkqhkiG9w0BAQUFAAOCAQEAbWkRdyqAtxoIlQZPC24QIQ2Xm3qiaEKLurBvs4b2ha9XkvfxulP0 nruQexjZpB4TkyeLp/imPd1CBaRZ/dg2R745KZ9qQzf54Fuzh1WNjp33ZpWWH2y9dL+/sTQbwu8t GF0bvgusKvkOvumveo9BXGemJ7FYpaAbDj/ODZKQTS8jAf6aBkDs0OzuAIpZR4U1N3oW55KV/+ab 59z9mf2dGooQtFKzzEwQanMROLVL4xKgBXcxsDuKlMGtYsuYlnwPCPDjTY6ZdQFRwu4tW7TYXb4w g/04Sj01uF234DMaW1pGUNBVQ78jfapNgHAeT5Gyl55RMw9rN0XoWW4yvUIj7Q== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale AIPA - Provincia di Firenze Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale AIPA - Provincia di Firenze Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 10:15:51 CEST 2003 ITALIA (ITALY) - Trusted List ID: ID100001 Page 49 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Thu Sep 05 10:15:51 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20Firma%20Digitale%20AIPA%20%20Provincia%20di%20Firenze%2Co%3DProvincia%20di%20Firenze?certificaterevocationlist Subject Key Identifier 48:74:52:16:45:D9:13:84:98:85:12:EC:9D:B2:F0:FF:50:D9:06:AA Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 28:44:28:15:C8:8C:E2:AB:44:51:19:E7:7B:3D:95:E3:48:B1:44:A0:52:81:2A:06:48:1E:85:AF:E3:A 3:36:70 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T10:15:51Z 3.12.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.13 - Service : CN=- Firma Digitale Banca Agrileasing,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale Banca Agrileasing,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 50 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEtTCCA52gAwIBAgIBATANBgkqhkiG9w0BAQUFADB8MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEr MCkGA1UEAxMiLSBGaXJtYSBEaWdpdGFsZSBCYW5jYSBBZ3JpbGVhc2luZzAeFw0wMzA5MDUxMDA2 MjBaFw0xMzA5MDUxMDA2MjBaMHwxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5BY3RhbGlzIFMucC5B LjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMSswKQYDVQQDEyItIEZp cm1hIERpZ2l0YWxlIEJhbmNhIEFncmlsZWFzaW5nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxWzhC5lSEmkBnVc0gBGl4JfIvA/k8vXgV6tOAmUme1dVekP81gNbc3iPOFhlmm9+nmwu E3O2w9gWjWX6iR40ehx/P19VaDKOJbkkicqVP3xLqvehrH9Eo70jNP7zRptawo4i84hVKPs4LYKv h8ahVJ2bmtnvGxS85QhZA1OebhcqHt7cUfFvpNH87WoAt0ME46YFNI86JdsUKFIfoXr3g8IefAwz 7VlJ5qeL2DddBsCLPmy5zJDxAN3d1y8L/8Niz2lamS+aNH9VAG33din/T9Ef4QDtVeLYezSEDzBG wtzd6jF4oX6eE1u0kE6t14h1STRKCm4IeCkXc4AMU/XELQIDAQABo4IBQDCCATwwDwYDVR0TAQH/ BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwUQYDVR0gBEowSDBGBgYrgR8BAQEwPDA6BggrBgEFBQcC ARYuaHR0cHM6Ly9jYS5hY3RhbGlzLml0L3JlcG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCBpgYDVR0f BIGeMIGbMIGYoIGVoIGShoGPbGRhcDovL2ZlLmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUz RC0lMjBGaXJtYSUyMERpZ2l0YWxlJTIwQmFuY2ElMjBBZ3JpbGVhc2luZyUyQ28lM0RCYW5jYSUy MEFncmlsZWFzaW5nJTIwUy5wLkEuP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwHQYDVR0OBBYE FNIdY0eXRZMOvqJOmRICyukrX78QMA0GCSqGSIb3DQEBBQUAA4IBAQBXsx+qS4DTvlrXYMNRP70K GBbzYNO2xUcbLuvxKXM+JVEHz+qeiOLVoDfPlqP9Nv8sYm0dwwMkMDoObj0RFXA7wTobuCVWbuRl IUiq3MaMwxn34WFiCOiy6BT2O1/pRCdNFUv/nR9w4Mr56ykvyLRRdEwEPgDsiefCEV7QsxlgX1N9 vLFGAEYN5wIOjp/oL/bBQopIHQu/mbyn92Z/d8r/jC5arSUTZXj2lwOUoVQZeWAxi5FFWkXgwVTa +0bK16li4dd/FVRomajhTnk/cm+SnDq3ahYUHyl1fPnDNiyPh5mK8Nx3JvXgw/zHCjcqUXGrUn3U wCD4sGo/JxLvy4za -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale Banca Agrileasing Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale Banca Agrileasing Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 12:06:20 CEST 2003 Valid to: Thu Sep 05 12:06:20 CEST 2013 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C5:6C:E1:0B:99:52:12:69:01:9D:57:34:80:11:A5:E0:97:C8:BC:0F:E4:F2:F5:E0:57:AB:4E:02:65:26:7B:57:55:7A:43: FC:D6:03:5B:73:78:8F:38:58:65:9A:6F:7E:9E:6C:2E:13:73:B6:C3:D8:16:8D:65:FA:89:1E:34:7A:1C:7F:3F:5F:55:68:32:8E:25:B9:24:89:CA:95:3F:7C:4B:AA:F7:A1:AC:7F:44:A3:BD:23:34:FE:F3:46:9B:5A:C2:8E:22:F3:88 :55:28:FB:38:2D:82:AF:87:C6:A1:54:9D:9B:9A:D9:EF:1B:14:BC:E5:08:59:03:53:9E:6E:17:2A:1E:DE:DC:51:F1:6F:A4:D1:FC:ED:6A:00:B7:43:04:E3:A6:05:34:8F:3A:25:DB:14:28:52:1F:A1:7A:F7:83:C2:1E:7C:0C:33:ED :59:49:E6:A7:8B:D8:37:5D:06:C0:8B:3E:6C:B9:CC:90:F1:00:DD:DD:D7:2F:0B:FF:C3:62:CF:69:5A:99:2F:9A:34:7F:55:00:6D:F7:76:29:FF:4F:D1:1F:E1:00:ED:55:E2:D8:7B:34:84:0F:30:46:C2:DC:DD:EA:31:78:A1:7E:9E :13:5B:B4:90:4E:AD:D7:88:75:49:34:4A:0A:6E:08:78:29:17:73:80:0C:53:F5:C4:2D:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20Banca%20Agrileasing%2Co%3DBanca%20Agrileasing%20S.p.A.?certi ficaterevocationlist Subject Key Identifier D2:1D:63:47:97:45:93:0E:BE:A2:4E:99:12:02:CA:E9:2B:5F:BF:10 Key Usage: keyCertSign - cRLSign ITALIA (ITALY) - Trusted List ID: ID100001 Page 51 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint algorithm: SHA-256 Thumbprint: 41:05:B5:67:89:19:58:04:15:44:A5:68:5A:5F:A5:4B:DC:51:70:B0:77:58:14:4A:A0:AF:1E:E4:7D:6 4:51:AA Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T12:06:20Z 3.13.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.14 - Service : CN=- Firma Digitale Comune di Bologna,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale Comune di Bologna,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEsDCCA5igAwIBAgIBATANBgkqhkiG9w0BAQUFADB8MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEr MCkGA1UEAxMiLSBGaXJtYSBEaWdpdGFsZSBDb211bmUgZGkgQm9sb2duYTAeFw0wMzA5MDkxMjQy NDFaFw0xMzA5MDkxMjQyNDFaMHwxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5BY3RhbGlzIFMucC5B LjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMSswKQYDVQQDEyItIEZp cm1hIERpZ2l0YWxlIENvbXVuZSBkaSBCb2xvZ25hMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArUcuYMQxDfUKLJs4jqP7tYk9Fd9anT0Sb67zDZw+LBhBt2mfOlTbshH3mNkpsD4ADLJr GmCvbJNtrmLvdTAP+uvwn0Kg9dAlwvzL7sL+BOvLqBeiL5Ny73ZGPO4Jw/7H1+feKjXPG+8a/Hoq bgBEMBbfus/5KBFIdbyzDMXgFTIcixJXsko/AYo5LT2lmI6qP6AFOAvRzlYA/zQe+OV7nu+RV3mi LiPgOy35/2VeoZce5bzMP3cXu9+eWa0bYDFvWKEk/IPmM40/YrmFQdrSVjhBTPbbMhZl1cQnbC9b 14cfZwQmUkRGhTU2p/wq86pEE2/b/4TG1dr+yCzoDict8QIDAQABo4IBOzCCATcwDwYDVR0TAQH/ BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwUQYDVR0gBEowSDBGBgYrgR8BAQEwPDA6BggrBgEFBQcC ARYuaHR0cHM6Ly9jYS5hY3RhbGlzLml0L3JlcG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCBoQYDVR0f BIGZMIGWMIGToIGQoIGNhoGKbGRhcDovL2ZlLmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUz RC0lMjBGaXJtYSUyMERpZ2l0YWxlJTIwQ29tdW5lJTIwZGklMjBCb2xvZ25hJTJDbyUzRENvbXVu ZSUyMGRpJTIwQm9sb2duYT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBTJoODL EJRWADXIksSmvTZAvDnPUDANBgkqhkiG9w0BAQUFAAOCAQEATbaa6k7VYOtxT439B8lIhTNB3br5 X+Nrkw5CtFUyFl1pX/X2V7ge0MpKI8f/LHrUPQJ7PGnqQ6YEA+bFpklvNzoiKFnPIRhrgPpZLhhr joL6FNCExckAHGXgrJDrtyvtZqx312AODsOE46EltnxZNxbqCvb1q1WZMF+Q8heInT0Ll7OO1VmW DH+IR+IYWDq4f65NOl0pztrwcFPy4BaXZzh06fYX0PDDP60jj4bghUbKZsDCgDdHRc/UYT4Oj/ZV ZKaXdU0zm8IyteHF12vUb9iAxccqbz1CUD9QSmm69UE74y6/xghKtO17ppQaxBL3MyZ1TKzdF6+l FDOdKCRXGA== -----END CERTIFICATE----- Signature algorithm: ITALIA (ITALY) - Trusted List ID: ID100001 SHA1withRSA Page 52 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer CN: - Firma Digitale Comune di Bologna Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale Comune di Bologna Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Sep 09 14:42:41 CEST 2003 Valid to: Mon Sep 09 14:42:41 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20Comune%20di%20Bologna%2Co%3DComune%20di%20Bologna?certi ficaterevocationlist Subject Key Identifier C9:A0:E0:CB:10:94:56:00:35:C8:92:C4:A6:BD:36:40:BC:39:CF:50 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 61:59:B0:1A:BD:B4:F2:6B:5D:18:DE:BB:A9:9F:EE:80:69:3A:7B:EE:96:F0:E3:DE:0D:A4:14:8B: 17:D0:0B:44 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-09T14:42:41Z 3.14.1 - Extension (not critical): expiredCertsRevocationInfo ITALIA (ITALY) - Trusted List ID: ID100001 Page 53 ETSI 2014 - TSL HR - PDF/A-1b generator dateTime 2009-12-03T00:00:00Z 3.15 - Service : CN=- Firma Digitale Intersiel S.p.A.,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale Intersiel S.p.A.,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEqDCCA5CgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEq MCgGA1UEAxMhLSBGaXJtYSBEaWdpdGFsZSBJbnRlcnNpZWwgUy5wLkEuMB4XDTAzMDkwNTA4NDEx N1oXDTEzMDkwNTA4NDExN1owezELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEu MScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxKjAoBgNVBAMTIS0gRmly bWEgRGlnaXRhbGUgSW50ZXJzaWVsIFMucC5BLjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc9nusUDCsYCQXyyr+64M12W0hMzomLygu4Z4Hb2oHPNqVMEQH12fwR4p2+RrzKCUSHGtYl pQGePuFEayt2f8KU4byv2AGttleesiy7SBXXPOu8Fg34Rse1bJjEtuYBRV7x/ECAA01RPdnxiO/5 /5puIs70rWbUpI28vpc58xskOnWUtGVo26aiDWGfbjY7mlpHTd2k3pxYzzGYfAd3tthowhep1Cgv WqxVjBcYc5Lv2gJUrUvCpEEGztIk4ehJWKysQer1buwvd0tomXbYmZpIYqhKQgG4xPITzx/KVGgj 6RZU0XonN4UqwbyzIPtCg5MQr33vlHecU3zqik7zhLUCAwEAAaOCATUwggExMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEW Lmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgZsGA1UdHwSB kzCBkDCBjaCBiqCBh4aBhGxkYXA6Ly9mZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0Qt JTIwRmlybWElMjBEaWdpdGFsZSUyMEludGVyc2llbCUyMFMucC5BLiUyQ28lM0RJbnRlcnNpZWwl MjBTLnAuQS4/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUDHLnHJEPQLyncGMy iGQtcUHk2s4wDQYJKoZIhvcNAQEFBQADggEBACSRrWAYe06MxAtnJCBv/1JFgbp5sSWi2gyfnhgn onb1UR8Vps3O04NKSaHKQ/gGAcazVZC0gxw5/yQhYXUWvRKRl/jBCkfaMnjaes4j2solzlW1jC4F ikUpg8XSofHMnaDNT3SQe/nYC3VP6cAoMJQRWMHYFiquO0BUeN76b6VUYIKgBxMgTrByLlJu9d3b poPNZ7Ta1yda/Oka1GcTWMm+6DeH/NErTRQfvuADYJ+MjLMr5G6GrPg6ueQourbQLkeJLhZQK63X fPGB0hWIyeBeGGH3EqMEEvOBPOy74hcq/u/W2AcG+P+qkK3gkqUAeaCe8loP+yE/BVKS7pqdyH8= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale Intersiel S.p.A. Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale Intersiel S.p.A. Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 10:41:17 CEST 2003 ITALIA (ITALY) - Trusted List ID: ID100001 Page 54 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Thu Sep 05 10:41:17 CEST 2013 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:A7:3D:9E:EB:14:0C:2B:18:09:05:F2:CA:BF:BA:E0:CD:76:5B:48:4C:CE:89:8B:CA:0B:B8:67:81:DB:DA:81:CF:36: A5:4C:11:01:F5:D9:FC:11:E2:9D:BE:46:BC:CA:09:44:87:1A:D6:25:A5:01:9E:3E:E1:44:6B:2B:76:7F:C2:94:E1:BC:AF:D8:01:AD:B6:57:9E:B2:2C:BB:48:15:D7:3C:EB:BC:16:0D:F8:46:C7:B5:6C:98:C4:B6:E6:01:45:5E:F 1:FC:40:80:03:4D:51:3D:D9:F1:88:EF:F9:FF:9A:6E:22:CE:F4:AD:66:D4:A4:8D:BC:BE:97:39:F3:1B:24:3A:75:94:B4:65:68:DB:A6:A2:0D:61:9F:6E:36:3B:9A:5A:47:4D:DD:A4:DE:9C:58:CF:31:98:7C:07:77:B6:D8:68:C2: 17:A9:D4:28:2F:5A:AC:55:8C:17:18:73:92:EF:DA:02:54:AD:4B:C2:A4:41:06:CE:D2:24:E1:E8:49:58:AC:AC:41:EA:F5:6E:EC:2F:77:4B:68:99:76:D8:99:9A:48:62:A8:4A:42:01:B8:C4:F2:13:CF:1F:CA:54:68:23:E9:16:54: D1:7A:27:37:85:2A:C1:BC:B3:20:FB:42:83:93:10:AF:7D:EF:94:77:9C:53:7C:EA:8A:4E:F3:84:B5:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20Intersiel%20S.p.A.%2Co%3DIntersiel%20S.p.A.?certificaterevocationli st Subject Key Identifier 0C:72:E7:1C:91:0F:40:BC:A7:70:63:32:88:64:2D:71:41:E4:DA:CE Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: A4:54:01:E3:19:97:60:FD:0E:16:84:88:35:71:03:6A:5D:6D:F5:DD:1A:3C:49:1A:93:4F:27:B5:1B:4 9:5A:FE Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T10:41:17Z 3.15.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.16 - Service : CN=- Firma Digitale Provincia di Campobasso,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale Provincia di Campobasso,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 55 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEyjCCA7KgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBgjELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx MTAvBgNVBAMTKC0gRmlybWEgRGlnaXRhbGUgUHJvdmluY2lhIGRpIENhbXBvYmFzc28wHhcNMDMw OTA1MDk1NTI2WhcNMTMwOTA1MDk1NTI2WjCBgjELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFs aXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxMTAvBgNV BAMTKC0gRmlybWEgRGlnaXRhbGUgUHJvdmluY2lhIGRpIENhbXBvYmFzc28wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCvFxVQpQIBBk3qHmssvXMg93oJNH86QwI8xaTdUE6PTzn+d6Ek SPCGrn3qADtvP8ixcwBHJDP9mSm51wbE/g4htqZZtCRvZnQMxdWPsqvu9mCdGuQHX+bZx0AY+YCS U5fznW958FeLTACpFFa3sDJ6eOKavfExVh4iCMhWhoU3m6OeG+zcmpkG6FN/zn27+zOIfZG+6Dj0 Wi+kodLpoBcBik6SKYT6YZAcDKQ39FGQfd7/zw9siFC8fejGyTKmoPah30xyrUVNMDquljCZOtcr dHpwz5bLpp0trqSTlnR6ksDVl8V10RK0p8N2bgFuXWP1DMahfkjY3wNL2EQ07O4TAgMBAAGjggFH MIIBQzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEB ATA8MDoGCCsGAQUFBwIBFi5odHRwczovL2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZp ZWQvQ1BTMIGtBgNVHR8EgaUwgaIwgZ+ggZyggZmGgZZsZGFwOi8vZmUuY3NwLm11bHRpY2VydGlm eS5jb206Mzg5L291JTNELSUyMEZpcm1hJTIwRGlnaXRhbGUlMjBQcm92aW5jaWElMjBkaSUyMENh bXBvYmFzc28lMkNvJTNEUHJvdmluY2lhJTIwZGklMjBDYW1wb2Jhc3NvP2NlcnRpZmljYXRlcmV2 b2NhdGlvbmxpc3QwHQYDVR0OBBYEFPgY13/nPAA36iBNi70k4dN6o6q1MA0GCSqGSIb3DQEBBQUA A4IBAQAPLx5FqvzvgMie8uoXonxHAhxtz6jpAgW+WFkfrO5GvW/pVkYMKXpsNekX+oSXoqhFHsdS jD5EGmjEwNFexePripn5js3ovGJwHEzPaOanuuZpo9b09mq6dxivOhoti8ln+eVZXEwJ5RK/5EE8 MiGLTSXc62DhAYaN0iyUEM0hZy4eWA964E1yZBvZgyF+FSB2SN76Jhcs68rHzHg8mo/KpSLqjdob dlJtK+h8KKHG3v47i1/t0/0LUoPBGMV3B06gFjq8lr0+cXvXUCJoaju6Ex/nVN7o1FY53EwrTcQc yAx41pBMYyPl/GOvoC0sIPFLNwYEz6345n9QjLo+OHkX -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale Provincia di Campobasso Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale Provincia di Campobasso Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 11:55:26 CEST 2003 Valid to: Thu Sep 05 11:55:26 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20Provincia%20di%20Campobasso%2Co%3DProvincia%20di%20Campo basso?certificaterevocationlist Subject Key Identifier F8:18:D7:7F:E7:3C:00:37:EA:20:4D:8B:BD:24:E1:D3:7A:A3:AA:B5 ITALIA (ITALY) - Trusted List ID: ID100001 Page 56 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 09:98:AB:28:89:7D:7E:6C:48:67:72:8D:40:4E:E9:35:EA:25:D0:E4:AF:F7:20:41:C1:8A:A3:8B:78: 64:E6:E4 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T11:55:26Z 3.16.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.17 - Service : CN=- Firma digitale Provincia di Varese,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma digitale Provincia di Varese,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEuDCCA6CgAwIBAgIBATANBgkqhkiG9w0BAQUFADB+MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEt MCsGA1UEAxMkLSBGaXJtYSBkaWdpdGFsZSBQcm92aW5jaWEgZGkgVmFyZXNlMB4XDTAzMDkwNTEw MjYwNVoXDTEzMDkwNTEwMjYwNVowfjELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5w LkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxLTArBgNVBAMTJC0g RmlybWEgZGlnaXRhbGUgUHJvdmluY2lhIGRpIFZhcmVzZTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAObwzFVplZWsmQShivm/InwG8u2b4OYmGEw83tQmJ6P/4LxaqDq8BeRUIyidfd/w txwJ6UIvhBmlxvAVvXTO+/m8R/gz6+mIogJ/F0t0wKXNy/M6hSnF64ht/M/agshMQcgJ7XGOyJP8 Rsf2tuQEJ5ZZl3eB2iBk/B1hAMK9RnzXrGpaNsyYh22aeDbX+/nQ1MNHVCLO55sRL8RY8KbO45t8 tGEcCQEk7nhfs9d7S3+JaEQdLFXdrBCb0SFDDJM3mUPasOoGQWh1hRMOXByo326Dg9fjxJJIxe0j gIUKmMRAJiJPViJv7AAnGalWX3buIweb1MSy9MTT6nd7Fgw0/qkCAwEAAaOCAT8wggE7MA8GA1Ud EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYB BQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgaUG A1UdHwSBnTCBmjCBl6CBlKCBkYaBjmxkYXA6Ly9mZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkv b3UlM0QtJTIwRmlybWElMjBkaWdpdGFsZSUyMFByb3ZpbmNpYSUyMGRpJTIwVmFyZXNlJTJDbyUz RFByb3ZpbmNpYSUyMGRpJTIwVmFyZXNlP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwHQYDVR0O BBYEFO/ylsDtStY+CdGfX7rUwpbPnHLvMA0GCSqGSIb3DQEBBQUAA4IBAQBecJhlmFl49hwlPCr5 7ReSUApiDRNc3XQx8IB7WUvIXbLNSMQiX7JcUnkr4jJ17t/ZZ51nuz3/xtVcXPjVJRXiAsdBSVxR JT3P0ccBaxFTOeAgvQpkgxqR/D9Gka1ybCSVJZcgIkyBjs54z0gKBDfNDu2YHwMx5T0Y9gpDfyTV sqnfcyPKdYDFiB1DVLe6uSLt6mXFMyg6jqpSRuGoHAOxc7HuHzqeMOyBjaOCKzAreHjNMY0UjqLZ taoFkvODD4QNNAPy6+M4Fmxnr/bcK35KS5/K2YzjTm2gfvtT4hVXkjR3brFNOh61njsfTR/MCIfW 2xlnP9AyYQI+kydpDRED -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 57 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: - Firma digitale Provincia di Varese Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma digitale Provincia di Varese Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 12:26:05 CEST 2003 Valid to: Thu Sep 05 12:26:05 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20digitale%20Provincia%20di%20Varese%2Co%3DProvincia%20di%20Varese?certifi caterevocationlist Subject Key Identifier EF:F2:96:C0:ED:4A:D6:3E:09:D1:9F:5F:BA:D4:C2:96:CF:9C:72:EF Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 23:67:59:0C:D1:62:20:C2:35:A5:26:43:52:B2:FA:C7:7E:14:08:5A:81:04:61:E9:5D:F7:88:C7:7C:25 :D1:93 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2003-09-05T12:26:05Z Page 58 ETSI 2014 - TSL HR - PDF/A-1b generator 3.17.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.18 - Service : CN=- Firma Digitale Regione Campania,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale Regione Campania,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEqDCCA5CgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEq MCgGA1UEAxMhLSBGaXJtYSBEaWdpdGFsZSBSZWdpb25lIENhbXBhbmlhMB4XDTAzMDkwODA5MzYz NFoXDTEzMDkwODA5MzYzNFowezELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEu MScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxKjAoBgNVBAMTIS0gRmly bWEgRGlnaXRhbGUgUmVnaW9uZSBDYW1wYW5pYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlD/VKVnCPDxpdzCXMA/daEcwxxjqVJTgezeRuJuU/9HEwMHVBzGBsljwS7iMvh/DJpqKFC /NSG4ChcFm2XVaIdPVFhu5ZaS9wj4pcUFqVX3s3fgtpLjRGHRr/aWTc7Nk6Ze/bMGDEYjMWPkeh5 Gwke084xxH4zhZARod+gn3src1mSyxNKMA/XpOi26crmL6ZiIkliRTN17aSJrrjt8DFATJj7p/4V a+zkyO77VJfT6jV+6vLxmJENO5qHLUeGoFcM+H3tJn0FB6wPd7xZBnkn9UflmpwmB7iQs7RvSil+ kn+ccguBcM35F6/pTaPvhWeLDm2TDgs2f2xWXZBvf78CAwEAAaOCATUwggExMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEW Lmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgZsGA1UdHwSB kzCBkDCBjaCBiqCBh4aBhGxkYXA6Ly9mZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0Qt JTIwRmlybWElMjBEaWdpdGFsZSUyMFJlZ2lvbmUlMjBDYW1wYW5pYSUyQ28lM0RSZWdpb25lJTIw Q2FtcGFuaWE/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUEZgnIuBK1UOWmvNw PSHTcIXqyp0wDQYJKoZIhvcNAQEFBQADggEBADnaFvuWzcADU3jX2mIcnaXKtd/OyML2SlnZPpMa ixHpyDzRNSj2y19/jyBfwYWp/09K3llFmRQ4NkJvjS6NfBTtf+YyVUb9MIr/HDflP+LZGgtQZ/7C Zmglp/pEuEazQ+n4QYN8eABMDJsJvLW576JBvQBrkFZjT0UV5nwdDrFH+puovPctBZS3YMDh03tG +4qswrGBb8a6WHqyb3LhwGxiScEtajQVGsEdvKnJp3EgIuqXLNPUpjgbKcqpG93eopf5lHS6puJu kIyu4J2I3TarTTmnTy0kU6Wj4y3fZt/MEYRLCWkuZmhmf1OcIzDgJfBoF8yfPfAXDqLR34huYvg= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale Regione Campania Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale Regione Campania Subject OU: Certification Service Provider Subject O: Actalis S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 59 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Valid from: Mon Sep 08 11:36:34 CEST 2003 Valid to: Sun Sep 08 11:36:34 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20Regione%20Campania%2Co%3DRegione%20Campania?certificaterevo cationlist Subject Key Identifier 11:98:27:22:E0:4A:D5:43:96:9A:F3:70:3D:21:D3:70:85:EA:CA:9D Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 67:DE:B9:C2:2F:C4:AC:FC:54:44:34:FB:24:48:86:9C:9E:17:64:E6:E1:E6:7B:E6:A9:7B:6E:E5:FA :F3:D7:1F Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-08T11:36:34Z 3.18.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.19 - Service : CN=- Firma Digitale Regione Liguria,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 60 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=- Firma Digitale Regione Liguria,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEpDCCA4ygAwIBAgIBATANBgkqhkiG9w0BAQUFADB6MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEp MCcGA1UEAxMgLSBGaXJtYSBEaWdpdGFsZSBSZWdpb25lIExpZ3VyaWEwHhcNMDMwOTA1MTAzNDQ4 WhcNMTMwOTA1MTAzNDQ4WjB6MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAuQS4x JzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEpMCcGA1UEAxMgLSBGaXJt YSBEaWdpdGFsZSBSZWdpb25lIExpZ3VyaWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfi/xFJeAamt+Iajr3A2RsHjVpozqVpvpK5yjoIv08q5fGUQYzXWnB0Ca+2lIWuaXgMwiOKMzD TElavGOHJdl7R/yj9+7ChI08aw1BIO9qAyL3H8ZEkfsSQyhnC0tXEYoSgL3r2GBPrE9C4sroa5Tm UWAnvM7a+9rTFt4e8h5fAlSAfSrNmq/uVcoNxXfypYmvUifVbPtePE33a15n4wXBzn5QqlP8OLZq wgNs73cjW+ooiKkcWiCXZf6gAXolt0KopQE8SIt0PnDj/r4xWm4pM/qIUTieis1zVUhM56QZP8Fj buwR1IY2TnipVuAi4gP8zKrkJ/hYkHC/X6bSmwUJAgMBAAGjggEzMIIBLzAPBgNVHRMBAf8EBTAD AQH/MA4GA1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5o dHRwczovL2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMIGZBgNVHR8EgZEw gY4wgYuggYiggYWGgYJsZGFwOi8vZmUuY3NwLm11bHRpY2VydGlmeS5jb206Mzg5L291JTNELSUy MEZpcm1hJTIwRGlnaXRhbGUlMjBSZWdpb25lJTIwTGlndXJpYSUyQ28lM0RSZWdpb25lJTIwTGln dXJpYT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBTAstlTP2O0k5zxoyfWeKmo wxcezzANBgkqhkiG9w0BAQUFAAOCAQEAMwDspamnqExT6D4edM7c1VBUkY0VeEAvwIRkvyblGEUj JijyeDjWGD8olF+4jZkIOfMAnwFLv4LIbftCqMSaL8bl1xgicmQCJIKuIDf/GvYMJkFGh43w1TmW hdv8MVCmbLJ6k/twvWGX0GCj+S9RHx2R1BIVcsGW5gRYXmgioBvNVWA9YOMQMSsewFAvQPTNgBBj Nfy07Q3OT/LETHWLZbFAqQjvmCmwGMQPVfM+Az6lcgSTKBj+2GMsmp6LsdNvalHmFiiJI6aDmV5d bu4a0KvJxVSo04Jp0uVCeU+TUE/gc7/Q9VcLyvuQAZu9lWnOar+xN865lIiZDgRxCNKWJA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale Regione Liguria Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale Regione Liguria Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 12:34:48 CEST 2003 Valid to: Thu Sep 05 12:34:48 CEST 2013 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:DF:8B:FC:45:25:E0:1A:9A:DF:88:6A:3A:F7:03:64:6C:1E:35:69:A3:3A:95:A6:FA:4A:E7:28:E8:22:FD:3C:AB:97:C6 :51:06:33:5D:69:C1:D0:26:BE:DA:52:16:B9:A5:E0:33:08:8E:28:CC:C3:4C:49:5A:BC:63:87:25:D9:7B:47:FC:A3:F7:EE:C2:84:8D:3C:6B:0D:41:20:EF:6A:03:22:F7:1F:C6:44:91:FB:12:43:28:67:0B:4B:57:11:8A:12:80:BD:E B:D8:60:4F:AC:4F:42:E2:CA:E8:6B:94:E6:51:60:27:BC:CE:DA:FB:DA:D3:16:DE:1E:F2:1E:5F:02:54:80:7D:2A:CD:9A:AF:EE:55:CA:0D:C5:77:F2:A5:89:AF:52:27:D5:6C:FB:5E:3C:4D:F7:6B:5E:67:E3:05:C1:CE:7E:50: AA:53:FC:38:B6:6A:C2:03:6C:EF:77:23:5B:EA:28:88:A9:1C:5A:20:97:65:FE:A0:01:7A:25:B7:42:A8:A5:01:3C:48:8B:74:3E:70:E3:FE:BE:31:5A:6E:29:33:FA:88:51:38:9E:8A:CD:73:55:48:4C:E7:A4:19:3F:C1:63:6E:EC:1 1:D4:86:36:4E:78:A9:56:E0:22:E2:03:FC:CC:AA:E4:27:F8:58:90:70:BF:5F:A6:D2:9B:05:09:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ITALIA (ITALY) - Trusted List ID: ID100001 ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20Regione%20Liguria%2Co%3DRegione%20Liguria?certificaterevocatio nlist Page 61 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Key Identifier C0:B2:D9:53:3F:63:B4:93:9C:F1:A3:27:D6:78:A9:A8:C3:17:1E:CF Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 50:D7:25:97:57:F8:86:19:FC:00:93:37:50:51:2A:78:BC:27:5F:F3:75:DD:69:10:C6:5E:6F:BD:D9:5 C:8D:88 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T12:34:48Z 3.19.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.20 - Service : CN=- Firma Digitale RTRT,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale RTRT,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIElzCCA3+gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEe MBwGA1UEAxMVLSBGaXJtYSBEaWdpdGFsZSBSVFJUMB4XDTAzMDkwOTEzMzQwMFoXDTEzMDkwOTEz MzQwMFowbzELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5D ZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxHjAcBgNVBAMTFS0gRmlybWEgRGlnaXRhbGUg UlRSVDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjssItaIpTQrB5uu/VNc5J4OtLI YazqE8kPFoF2jP9003+uXTe+GefkPAuUGDpombFBPeSFC/NqhF7KkEoFCSj3qqbnZmaq0d/plJIk yvap6zAHaB9NfvaxjaT3MRYUkOTEEru2JE6Dcfny+WIkyqdsZHq16h8q9HV5LG7/cJIfOpWnRVST KmeDDp810IuuqD3tkLMtMNMr2WXV8qqQUgXiUSLK8Et43lcxolSi0hmN5zRKsTbs5IBuy31hJof0 IR2FIrbliVkQPuNOHpjirpTAO7fvJq17+JPfuaqf7rl6ZOfE0r+FdQynSu6+Rd32LK2jrw104aN/ 2UlQf4r4Eq0CAwEAAaOCATwwggE4MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEG A1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9y ZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgaIGA1UdHwSBmjCBlzCBlKCBkaCBjoaBi2xkYXA6Ly9m ZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwRmlybWElMjBEaWdpdGFsZSUyMFJU UlQlMkNvJTNEUmV0ZSUyMFRlbGVtYXRpY2ElMjBSZWdpb25hbGUlMjBUb3NjYW5hP2NlcnRpZmlj YXRlcmV2b2NhdGlvbmxpc3QwHQYDVR0OBBYEFM08rpOQH8RX9srPC6sobDgzGYecMA0GCSqGSIb3 DQEBBQUAA4IBAQA784HF4AuJ7tQWzhwD4c9l8g4T69Y1w+C8n6CWvuvEd5XervRxvCELdEiRdKJj 7tSC6ZkOj74vZuQ8mQA0lvtSkHNI4O7XRTYaujsGNshh5YUHeaWYSuHUYPqW4uMSIPFV4i4sK+bZ JRw/S1v3zZAK6JGLyaOoRM18/GQHAKhcBbE/CGn3OHQrMVWXjIg6nZBRxU2My9Px0hqfToOZzhai vC/cf6UoRWd1F8fNAp0+drI7uCQ6b/UUbGM7nNBiZHnTSTEit6RSZjl4UbYBLHpQeCCgXKaYdltz beywjZD1C+h2dFZLBd1f9uHhEPLxv9yQ51Myv44FYBsO0tEKnay9 -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 62 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale RTRT Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale RTRT Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Sep 09 15:34:00 CEST 2003 Valid to: Mon Sep 09 15:34:00 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20RTRT%2Co%3DRete%20Telematica%20Regionale%20Toscana?certifi caterevocationlist Subject Key Identifier CD:3C:AE:93:90:1F:C4:57:F6:CA:CF:0B:AB:28:6C:38:33:19:87:9C Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 8B:C4:0A:21:AB:7E:3A:3F:FB:BD:BB:82:6B:F3:47:AA:3F:CB:4C:70:87:02:22:68:BD:09:E2:80:C 7:FC:8E:D2 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2003-09-09T15:34:00Z Page 63 ETSI 2014 - TSL HR - PDF/A-1b generator 3.20.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.21 - Service : CN=- Firma Digitale TELCAL,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale TELCAL,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEhDCCA2ygAwIBAgIBATANBgkqhkiG9w0BAQUFADBxMQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEg MB4GA1UEAxMXLSBGaXJtYSBEaWdpdGFsZSBURUxDQUwwHhcNMDMwOTA1MDkwMzUwWhcNMTMwOTA1 MDkwMzUwWjBxMQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsT HkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEgMB4GA1UEAxMXLSBGaXJtYSBEaWdpdGFs ZSBURUxDQUwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33Gylv5X2t64vYGAfAlJ4 HYw/K2tm56nid23YCXp9HHinTVetJVG11e1IuSX9Za2nwdO9GOBPuWLp/IP7AMOpRQCu+BYyq5GB I8mX1oOitj/9QRTySK+xf/M287O1+cyuY6sDhwmenXXlArzjObFzNAiviMuLEwCBxemXoNtIJClV 60KyCU9Jo5sNnQU94/mhsOeCkDoaKigiSb1a4I7bsrdjG1/WxgtenwbUUEbiu+IEnpx0hzyUKhom woQ+g2NtzzQ3NcftzF97qc9psbnPC7uHQ+TlqP/9V3IswoldgBo83N1McGGGi9TtGFwzVM4Ltlp+ p47DPyL8jiq0sbmlAgMBAAGjggElMIIBITAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB BjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5odHRwczovL2NhLmFjdGFsaXMu aXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMIGLBgNVHR8EgYMwgYAwfqB8oHqGeGxkYXA6Ly9m ZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwRmlybWElMjBEaWdpdGFsZSUyMFRF TENBTCUyQ28lM0RJbnRlcnNpZWwlMjBTLnAuQS4/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAd BgNVHQ4EFgQUGPiTucDh2Tpj/EbBR/rA935L64cwDQYJKoZIhvcNAQEFBQADggEBAJED42bxFuLz AN2tKkUVLFpLJiMG1KQSu7N9hp1f4X3NxJ9WNXZvreILQ6cRg+AJo3wcLn6ypKzIkeNGSHQmNNTa yM5sbJvQ0ZZasr0CgqjUR2O9K8Gxv71Tv+wnsibuaQ+JG82YbrgzyaplWt3WF8DYqZJRp1MC5BP3 kslzkkOn0VQQYzUD/eYGuFXE7Uh+59Xf0+nh2eseAlQSur+ZDi6ErRTrIWjTllRywRIozt2lUV35 YIsBB/H5a8uXxDSkxlCg0/VTVo3Lo5QvkORWx0pR00mD6ciLFTaMV4UJ53XG2nD3qpX7GgjrmoV8 RximpLvIyNAupgfV0Iwhlg7jj3o= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale TELCAL Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale TELCAL Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 64 ETSI 2014 - TSL HR - PDF/A-1b generator Valid from: Fri Sep 05 11:03:50 CEST 2003 Valid to: Thu Sep 05 11:03:50 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20Firma%20Digitale%20TELCAL%2Co%3DIntersiel%20S.p.A.?certificaterevocationlist Subject Key Identifier 18:F8:93:B9:C0:E1:D9:3A:63:FC:46:C1:47:FA:C0:F7:7E:4B:EB:87 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 75:81:22:9E:2A:54:6C:E2:1A:1B:56:E9:5E:29:7B:C7:CB:AB:69:B4:C7:C1:72:54:F7:8E:CB:48:55: DB:B3:B1 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T11:03:50Z 3.21.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.22 - Service : CN=- IZSAM - FIRMA DIGITALE,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- IZSAM - FIRMA DIGITALE,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 65 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEsjCCA5qgAwIBAgIBATANBgkqhkiG9w0BAQUFADByMQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEh MB8GA1UEAxMYLSBJWlNBTSAtIEZJUk1BIERJR0lUQUxFMB4XDTAzMDkwOTEzMDE0NVoXDTEzMDkw OTEzMDE0NVowcjELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMScwJQYDVQQL Ex5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxITAfBgNVBAMTGC0gSVpTQU0gLSBGSVJN QSBESUdJVEFMRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBaEB0Oo/eJXo2OeNVh Pnk3euyYdhPyzPYKSIJsbK6xQWeoJbxc6jfyq6gX0o8JrYD9QtmQqIfvRooAYIsg4NunfsD/HCXk xH0n1N+QVq3U/pNp7r6QVWi3lRgQKqyh7/E1n8JCTlbcAo7kKyntUazmJW8CKXjslcIOYnnlu2Aw xGvmM2CPpHuFtxwu178WdAMy5QAh4WcOhRvl7QWFN+2LcwMh2nn31Xx/R5iPjBM+hE3V99awgHgY 7nfJSb6eAISDRuLUscpdaUDtiDGbDdfPFbZ8ngqYMhahcYmWWlDD4iKnsSvpqm0qsZT0RQ10GDnq M+D+s5WWdwgjJE/B8T8CAwEAAaOCAVEwggFNMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD AgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxp cy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgbcGA1UdHwSBrzCBrDCBqaCBpqCBo4aBoGxk YXA6Ly9mZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwSVpTQU0lMjAtJTIwRklS TUElMjBESUdJVEFMRSUyQ28lM0RJc3QuJTIwWm9vcHJvZmlsYXR0aWNvJTIwU3BlcmltZW50YWxl JTIwLUcuJTIwQ2Fwb3JhbGUtP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwHQYDVR0OBBYEFAkL cql9bZd4O71urWIRRlIoOjDRMA0GCSqGSIb3DQEBBQUAA4IBAQCIlwdKyoFTaMaTxC4LeQ6UgiX9 3Bh+HjRQ543tPYDJySwKaEeCpx5osPSqGSmcuDoFZlE3aPpw95EJVkTGBmonOGO5u7GFaS2GWV7Y u1CsZx9HPETI7vVO1JA5Z9eHNONZ8/Su6f1HRmlAqu/PFe2oklvFoi04iJSDVC4YkYezJLk65kB6 kHuFr4ukW6kNBCHBqmq9e5rzxBY119+G0P8tir2TMU22/DsXDtPp8RQ527zaZ7llS0qmNJmLKvib uu0MjWUMTYegTI12/Yg2gzsYzr5MrOqiTDyotech95qHsUv5HxcV4rhEqA/pNQkY2+zJWE+JcE5x Fm2UmGTge+Wp -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - IZSAM - FIRMA DIGITALE Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - IZSAM - FIRMA DIGITALE Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Sep 09 15:01:45 CEST 2003 Valid to: Mon Sep 09 15:01:45 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20IZSAM%20%20FIRMA%20DIGITALE%2Co%3DIst.%20Zooprofilattico%20Sperimentale%20G.%20Caporale-?certificaterevocationlist Subject Key Identifier 09:0B:72:A9:7D:6D:97:78:3B:BD:6E:AD:62:11:46:52:28:3A:30:D1 Key Usage: keyCertSign - cRLSign ITALIA (ITALY) - Trusted List ID: ID100001 Page 66 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint algorithm: SHA-256 Thumbprint: A3:0C:E3:40:53:BE:03:20:F7:52:14:4D:39:A2:21:BA:AC:97:13:13:6D:B2:79:13:D3:E0:BF:37:9B: 31:06:84 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-09T15:01:45Z 3.22.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.23 - Service : [email protected],CN=Ca Provincia di Brescia firma digitale a norma,OU=Ufficio Relazioni con il Pubblico,O=Actalis S.p.A.,L=Brescia,ST=BS,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] [email protected],CN=Ca Provincia di Brescia firma digitale a norma,OU=Ufficio Relazioni con il Pubblico,O=Actalis S.p.A.,L=Brescia,ST=BS,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFczCCBFugAwIBAgIBATANBgkqhkiG9w0BAQUFADCB0zELMAkGA1UEBhMCSVQxCzAJBgNVBAgT AkJTMRAwDgYDVQQHEwdCcmVzY2lhMRcwFQYDVQQKEw5BY3RhbGlzIFMucC5BLjEqMCgGA1UECxMh VWZmaWNpbyBSZWxhemlvbmkgY29uIGlsIFB1YmJsaWNvMTcwNQYDVQQDEy5DYSBQcm92aW5jaWEg ZGkgQnJlc2NpYSBmaXJtYSBkaWdpdGFsZSBhIG5vcm1hMScwJQYJKoZIhvcNAQkBFhh1cnBAcHJv dmluY2lhLmJyZXNjaWEuaXQwHhcNMDMxMjIzMTMwODM0WhcNMTMxMjIzMTMwODM0WjCB0zELMAkG A1UEBhMCSVQxCzAJBgNVBAgTAkJTMRAwDgYDVQQHEwdCcmVzY2lhMRcwFQYDVQQKEw5BY3RhbGlz IFMucC5BLjEqMCgGA1UECxMhVWZmaWNpbyBSZWxhemlvbmkgY29uIGlsIFB1YmJsaWNvMTcwNQYD VQQDEy5DYSBQcm92aW5jaWEgZGkgQnJlc2NpYSBmaXJtYSBkaWdpdGFsZSBhIG5vcm1hMScwJQYJ KoZIhvcNAQkBFhh1cnBAcHJvdmluY2lhLmJyZXNjaWEuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfcZmtH8y4lBNVLMNjHDfbA7/RXq+IlnZT/oIBf57K11md80T5Ok4fBwa14JMl pCNKAxttNl+Sb+cIOKQ0LV1eCus5dPCXNrlmY05W4u60WA0U7RkGsYoCC/VjLPY90KLmCZFFYOfn ZolBmAeU16Nc9ddFqyylk0+VMRwZKc7wgjGBZYY45ji/9jN58HlrxRAFwYwzqE1S++zkoQTFmnS0 upcYjhMX8qq/ubVk0rMYjz9MCub+KJbWxE1kIctwSGgDNsW7tNht4sllZMRgFSSBoTLNEpNnV046 +FEjhMghNi+3rONpcZG3RyCiiuzvi2zf1M+hBZzfD9JgonFYSBr7AgMBAAGjggFOMIIBSjAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsG AQUFBwIBFi5odHRwczovL2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMIG0 BgNVHR8EgawwgakwgaaggaOggaCGgZ1sZGFwOi8vZmUuY3NwLm11bHRpY2VydGlmeS5jb206Mzg5 L291JTNEQ2ElMjBQcm92aW5jaWElMjBkaSUyMEJyZXNjaWElMjBmaXJtYSUyMGRpZ2l0YWxlJTIw YSUyMG5vcm1hJTJDbyUzRFByb3ZpbmNpYSUyMGRpJTIwQnJlc2NpYT9jZXJ0aWZpY2F0ZXJldm9j YXRpb25saXN0MB0GA1UdDgQWBBSj+Puq884tn137drteECsARFlehTANBgkqhkiG9w0BAQUFAAOC AQEAGE1l03hirsdYQLs3vsNhHblS4SFsRlpMwjR43nQnyMxBaCMTCjoMbuv60QqFnlxIgihcxlqX WdtpTMcjyrOWf5qpjHWHK2kinwWfreQWM3+SIJjQHbymBFLwLxJsMdrVtQw2MXP6/IE0CnXPRUbV 9SViT8pZeHZNyYTujE4XtMHC50Vu3G7+1pB2XKqikKabykJzz3Gu87xlLdNWs1xWwizfr0uaKcjY vR9lPY57yauMthPn1ZSsSuXWzE0Sih17RfxAOoTvZGg/ImBgo5pSJMuEjmkTdxLLyUQkRCfOABuC vd+8eodDEp1tzNSr79pi6fuGOimBPdXZXBISgDlRtg== -----END CERTIFICATE----- Signature algorithm: ITALIA (ITALY) - Trusted List ID: ID100001 SHA1withRSA Page 67 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer E: [email protected] Issuer CN: Ca Provincia di Brescia firma digitale a norma Issuer OU: Ufficio Relazioni con il Pubblico Issuer O: Actalis S.p.A. Issuer L: Brescia Issuer ST: BS Issuer C: IT Subject E: [email protected] Subject CN: Ca Provincia di Brescia firma digitale a norma Subject OU: Ufficio Relazioni con il Pubblico Subject O: Actalis S.p.A. Subject L: Brescia Subject ST: BS Subject C: IT Valid from: Tue Dec 23 14:08:34 CET 2003 Valid to: Mon Dec 23 14:08:34 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DCa%20Provincia%20di%20Brescia%20firma%20digitale %20a%20norma%2Co%3DProvincia%20di%20Brescia?certificaterevocationlist Subject Key Identifier A3:F8:FB:AA:F3:CE:2D:9F:5D:FB:76:BB:5E:10:2B:00:44:59:5E:85 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1C:31:B3:F0:6C:A0:4F:B4:E7:41:86:0E:B2:7A:72:44:E0:D2:2B:35:6D:35:C6:26:C8:FD:BA:27:7B :AD:C0:7D ITALIA (ITALY) - Trusted List ID: ID100001 Page 68 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-12-23T14:08:34Z 3.23.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.24 - Service : CN=Provincia di Roma Firma digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Provincia di Roma Firma digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEqDCCA5CgAwIBAgIBATANBgkqhkiG9w0BAQUFADB6MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEp MCcGA1UEAxMgUHJvdmluY2lhIGRpIFJvbWEgRmlybWEgZGlnaXRhbGUwHhcNMDQwNDIxMDgzOTQ2 WhcNMTQwNDIyMDgzOTQ2WjB6MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAuQS4x JzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEpMCcGA1UEAxMgUHJvdmlu Y2lhIGRpIFJvbWEgRmlybWEgZGlnaXRhbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL6od199YpWn90QPJeBV9Ci+YlftJIqy1dPDitQGQk05GLupSTdtILc1DOhQUjcSTT0+7deWOh 4F+gAYNrJo5nJmXUQ6sL26loNNnwa4wPTrtPsT0Groi58jUo99MMjANxXjpYJmebUPrtAxLvJlmT vnE8QMqGicUhH8nyecgUSfdbuIycl0y2OU03A3OwVFIQWj+ABzZK7RAaHmzl823y5ZC+kJo2QFJN qqkfL46HJozY2x1ELoTGqH6mZuG4dkKuEmSju95jXjRUBIzkS3kdIaiv+xNXPV1KaErpQZ7Zqh2G AaTPH00SK6wrW4WGKXLQpywtl7EHV2R6XOHh2b6TAgMBAAGjggE3MIIBMzAPBgNVHRMBAf8EBTAD AQH/MA4GA1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5o dHRwczovL2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMIGdBgNVHR8EgZUw gZIwgY+ggYyggYmGgYZsZGFwOi8vZmUuY3NwLm11bHRpY2VydGlmeS5jb206Mzg5L291JTNEUHJv dmluY2lhJTIwZGklMjBSb21hJTIwRmlybWElMjBkaWdpdGFsZSUyQ28lM0RQcm92aW5jaWElMjBk aSUyMFJvbWE/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAdBgNVHQ4EFgQUjxnaWj4z8oQTSkPu D+gavE2H7OYwDQYJKoZIhvcNAQEFBQADggEBABBSS9Zl9M9ZIgEybSOowYD5AosGbDRUA+jXisif 76hdmFBUO2qLmCxMg5V/ediDqMiZoBXIV62rF0NjARVq6vPP27OH7/XgCd/cFZ93gtw0e/UBuKFY 7w3XcJ3n4ifyZvsB3mbnEW2qAmZq+ubFMueRSqtwtYH+q3rCPv/DoFsNbBzhMJ7aoBW1bCUhGjUY Nx4GzG5i63ckPCnKPMcrqU0+SpzFmeVrSZYZROJxzXuQWxdGkr9G7fCb1/IMyZMtXmrnYMGalOq7 koc4uhp6nXrmEO/dFOeM/R0moRR4FcjRFzv4Ibo34Jbva8TKRvVLYAI3M5We3MKsHBtJA4dB30c= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Provincia di Roma Firma digitale Issuer OU: Certification Service Provider ITALIA (ITALY) - Trusted List ID: ID100001 Page 69 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Provincia di Roma Firma digitale Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Wed Apr 21 10:39:46 CEST 2004 Valid to: Tue Apr 22 10:39:46 CEST 2014 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:CB:EA:87:75:F7:D6:29:5A:7F:74:40:F2:5E:05:5F:42:8B:E6:25:7E:D2:48:AB:2D:5D:3C:38:AD:40:64:24:D3:91:8B:B A:94:93:76:D2:0B:73:50:CE:85:05:23:71:24:D3:D3:EE:DD:79:63:A1:E0:5F:A0:01:83:6B:26:8E:67:26:65:D4:43:AB:0B:DB:A9:68:34:D9:F0:6B:8C:0F:4E:BB:4F:B1:3D:06:AE:88:B9:F2:35:28:F7:D3:0C:8C:03:71:5E:3A:58: 26:67:9B:50:FA:ED:03:12:EF:26:59:93:BE:71:3C:40:CA:86:89:C5:21:1F:C9:F2:79:C8:14:49:F7:5B:B8:8C:9C:97:4C:B6:39:4D:37:03:73:B0:54:52:10:5A:3F:80:07:36:4A:ED:10:1A:1E:6C:E5:F3:6D:F2:E5:90:BE:90:9A:36:4 0:52:4D:AA:A9:1F:2F:8E:87:26:8C:D8:DB:1D:44:2E:84:C6:A8:7E:A6:66:E1:B8:76:42:AE:12:64:A3:BB:DE:63:5E:34:54:04:8C:E4:4B:79:1D:21:A8:AF:FB:13:57:3D:5D:4A:68:4A:E9:41:9E:D9:AA:1D:86:01:A4:CF:1F:4D :12:2B:AC:2B:5B:85:86:29:72:D0:A7:2C:2D:97:B1:07:57:64:7A:5C:E1:E1:D9:BE:93:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DProvincia%20di%20Roma%20Firma%20digitale%2Co%3 DProvincia%20di%20Roma?certificaterevocationlist Subject Key Identifier 8F:19:DA:5A:3E:33:F2:84:13:4A:43:EE:0F:E8:1A:BC:4D:87:EC:E6 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 0A:25:11:6F:D6:F7:6B:25:03:9A:72:04:87:62:33:4D:50:3E:2F:4C:06:B8:C4:7E:AD:0B:A6:18:02:7 F:8B:37 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-04-21T10:39:46Z 3.24.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 70 ETSI 2014 - TSL HR - PDF/A-1b generator 3.25 - Service : CN=Actalis Qualified Certificates CA,OU=Certification Service Provider 6,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis Qualified Certificates CA,OU=Certification Service Provider 6,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 96 X509 Certificate -----BEGIN CERTIFICATE----MIIFrTCCBJWgAwIBAgIBYDANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xKTAnBgNVBAsTIENlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlciA2 MSowKAYDVQQDEyFBY3RhbGlzIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMgQ0EwHhcNMDQwMzE1MDYz NzAwWhcNMTQwMzE1MjM1OTAwWjB9MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAu QS4xKTAnBgNVBAsTIENlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlciA2MSowKAYDVQQDEyFB Y3RhbGlzIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCw+k9OJa6QzK4OuVbOUxzD8fMGZIJVAmI0nk9vfTDYiO0HdJFnixwZMjC5MmTLLijT bGGqI42tKfB9EZgOpJuwcZPz6CIlTO0bFnP0TsZdtN4pDg4+rZ2i+nejnI8BC37iuG/EM6zrr7nP br7OR8k7b1nDeEU/zBL6sebiokKfZeUr4P3z1J5Tzik2zwYVSv12xN8Zcoh0xokH1mPvm0YJj6Lm jWsKLhjTztDVo45NqamOAlTTLcbgAOT2PeJ19juPDzOJn22aFxpDQafSyFVenytJwVQ/wlLUWfqZ q/PpQvAV/71f4K9c6eRZKkVGI5S8V/5mhTwYpEf3/LgB7/f3AgMBAAGjggI2MIICMjAdBgNVHQ4E FgQUwNA+/knNjC79VF+NJKlGYMzo7NgwgfsGA1UdHwSB8zCB8DAwoC6gLIYqaHR0cDovL2NhLmFj dGFsaXMuaXQvY2dpLWJpbi9haXBhZHMvZ2V0Q1JMMIG7oIG4oIG1hoGybGRhcDovL2xkYXAuYWN0 YWxpcy5pdC9jbiUzREFjdGFsaXMlMjBRdWFsaWZpZWQlMjBDZXJ0aWZpY2F0ZXMlMjBDQSUyQ291 JTNEQ2VydGlmaWNhdGlvbiUyMFNlcnZpY2UlMjBQcm92aWRlciUyMDYlMkNvJTNEQWN0YWxpcyUy MFMucC5BLiUyQ2MlM0RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0O2JpbmFyeTCB8QYDVR0g BIHpMIHmMIHjBgYrgR8BAQEwgdgwgZkGCCsGAQUFBwICMIGMGoGJTCd1c28gZGVpIGNlcnRpZmlj YXRpIGVtZXNzaSBkYSBBY3RhbGlzIFMucC5BLiAoUkVBIG4uMTY2OTQxMSwgVHJpYi4gTWlsYW5v KSBlJyBzb2dnZXR0byBhbGxlIGNvbmRpemlvbmkgcHJlY2lzYXRlIG5lbCBNYW51YWxlIE9wZXJh dGl2by4wOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxp ZmllZC9DUFMwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQAD ggEBAFeYuNa4fwjKmmi/tz1fW88wzW8WNPOdBqMvrQJhDbKoe0D6z1rkb6dI/SaSwYQliPFvlP6D 13RWQhR8gy89QEJT4Dz5CgI0PIh/+rbtrSyQFzweCATfXvILFmOlNlAHy+0Bg5kswaVnHCINTM79 imK/Rj3VRFbAAYLQ7H6I8GZeBIXtRWshTeUgV2W4uhzLo3cp3kwVjgM0RB2Bju9vxGsS01pIMLPn lExcQNhN+8XZBKE2QYNr73ixer8xmmS25A2CvH/+ujMuKQqUzckTKhEAViKEPB3UhODk2YhI4J33 +/t6ClPzqMCRIXjMApxCyDz9KAHbAm7Zh0kGugK6z38= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis Qualified Certificates CA Issuer OU: Certification Service Provider 6 Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis Qualified Certificates CA Subject OU: Certification Service Provider 6 Subject O: Actalis S.p.A. Subject C: IT Valid from: Mon Mar 15 07:37:00 CET 2004 ITALIA (ITALY) - Trusted List ID: ID100001 Page 71 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Sun Mar 16 00:59:00 CET 2014 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:B0:FA:4F:4E:25:AE:90:CC:AE:0E:B9:56:CE:53:1C:C3:F1:F3:06:64:82:55:02:62:34:9E:4F:6F:7D:30:D8:88:ED:07:7 4:91:67:8B:1C:19:32:30:B9:32:64:CB:2E:28:D3:6C:61:AA:23:8D:AD:29:F0:7D:11:98:0E:A4:9B:B0:71:93:F3:E8:22:25:4C:ED:1B:16:73:F4:4E:C6:5D:B4:DE:29:0E:0E:3E:AD:9D:A2:FA:77:A3:9C:8F:01:0B:7E:E2:B8:6F:C 4:33:AC:EB:AF:B9:CF:6E:BE:CE:47:C9:3B:6F:59:C3:78:45:3F:CC:12:FA:B1:E6:E2:A2:42:9F:65:E5:2B:E0:FD:F3:D4:9E:53:CE:29:36:CF:06:15:4A:FD:76:C4:DF:19:72:88:74:C6:89:07:D6:63:EF:9B:46:09:8F:A2:E6:8D:6 B:0A:2E:18:D3:CE:D0:D5:A3:8E:4D:A9:A9:8E:02:54:D3:2D:C6:E0:00:E4:F6:3D:E2:75:F6:3B:8F:0F:33:89:9F:6D:9A:17:1A:43:41:A7:D2:C8:55:5E:9F:2B:49:C1:54:3F:C2:52:D4:59:FA:99:AB:F3:E9:42:F0:15:FF:BD:5F:E 0:AF:5C:E9:E4:59:2A:45:46:23:94:BC:57:FE:66:85:3C:18:A4:47:F7:FC:B8:01:EF:F7:F7:02:03:01:00:01 Subject Key Identifier C0:D0:3E:FE:49:CD:8C:2E:FD:54:5F:8D:24:A9:46:60:CC:E8:EC:D8 CRL Distribution Points http://ca.actalis.it/cgi-bin/aipads/getCRL ldap://ldap.actalis.it/cn%3DActalis%20Qualified%20Certificates%20CA%2Cou%3DCertification% 20Service%20Provider%206%2Co%3DActalis%20S.p.A.%2Cc%3DIT?certificateRevocationList;bi nary Certificate Policies Policy OID: 1.3.159.1.1.1 CPS text: [L'uso dei certificati emessi da Actalis S.p.A. (REA n.1669411, Trib. Milano) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://ca.actalis.it/repository/qualified/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 34:61:C2:17:54:63:58:C6:1D:BE:F3:04:26:0A:99:D6:BC:B8:2E:E4:B3:D2:88:DA:9C:70:58:B1:4E: 38:A0:01 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-03-15T07:37:00Z 3.25.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.26 - Service : CN=Actalis Qualified Certificates CA,OU=Certification Service Provider 2,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 72 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=Actalis Qualified Certificates CA,OU=Certification Service Provider 2,O=Actalis S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 76 X509 Certificate -----BEGIN CERTIFICATE----MIIG9jCCBd6gAwIBAgIBTDANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xKTAnBgNVBAsTIENlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlciAy MSowKAYDVQQDEyFBY3RhbGlzIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMgQ0EwHhcNMDIxMDIyMDc0 MzAwWhcNMTIxMDIyMjM1OTAwWjB9MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAu QS4xKTAnBgNVBAsTIENlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlciAyMSowKAYDVQQDEyFB Y3RhbGlzIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDF+GuupiCOQ+e2gzRUkamcrKJ0xPvlRUrGeuaFVFn8PqNI/nYt2+fb6FWCH+QNCusA AjD5cL31sYwL+5Ht3bFNR+A01sjOUUOXHoGzlNa0bepVT5JFlYe3q0Yi+UjYXZoBqm/EbMP4EWd8 6+Uf0r+2nFZdVdn8D8st4OhcUXDYlwdCevqCrwnYSWzhQ90q5xztfe8pT3xzlY6vKinevF/fsVP0 Mpqcq+d1q+a6lT1kqsQ75YwChOyX5qHFI0px7Hjb1YjS4NCmCC53uafE51z3zGZ8wSKZyiw5DHlc Uus41GOjcWSQBHf5qRwbapKFBaBS7D7mIH0OtwWdII4TzA9rAgMBAAGjggN/MIIDezAOBgNVHQ8B Af8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zCB8QYDVR0gBIHpMIHmMIHjBgYrgR8BAQEwgdgwgZkG CCsGAQUFBwICMIGMGoGJTCd1c28gZGVpIGNlcnRpZmljYXRpIGVtZXNzaSBkYSBBY3RhbGlzIFMu cC5BLiAoUkVBIG4uMTY2OTQxMSwgVHJpYi4gTWlsYW5vKSBlJyBzb2dnZXR0byBhbGxlIGNvbmRp emlvbmkgcHJlY2lzYXRlIG5lbCBNYW51YWxlIE9wZXJhdGl2by4wOgYIKwYBBQUHAgEWLmh0dHBz Oi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgcIGA1UdHwSBujCBtzCB tKCBsaCBroaBq2xkYXA6Ly9sZGFwLmFjdGFsaXMuaXQvY24lM0RBY3RhbGlzJTIwUXVhbGlmaWVk JTIwQ2VydGlmaWNhdGVzJTIwQ0ElMkNvdSUzRENlcnRpZmljYXRpb24lMjBTZXJ2aWNlJTIwUHJv dmlkZXIlMjAyJTJDbyUzREFjdGFsaXMlMjBTLnAuQS4lMkNjJTNESVQ/Y2VydGlmaWNhdGVSZXZv Y2F0aW9uTGlzdDAdBgNVHQ4EFgQUW6k8nbDP+T9StSHXQg5D9u2ieE8wgb4GA1UdEQSBtjCBs4EP aW5mb0BhY3RhbGlzLml0hoGfbGRhcDovL2xkYXAuYWN0YWxpcy5pdC9jbiUzREFjdGFsaXMlMjBR dWFsaWZpZWQlMjBDZXJ0aWZpY2F0ZXMlMjBDQSUyQ291JTNEQ2VydGlmaWNhdGlvbiUyMFNlcnZp Y2UlMjBQcm92aWRlciUyMDIlMkNvJTNEQWN0YWxpcyUyMFMucC5BLiUyQ2MlM0RJVD9jQUNlcnRp ZmljYXRlMIG+BgNVHRIEgbYwgbOBD2luZm9AYWN0YWxpcy5pdIaBn2xkYXA6Ly9sZGFwLmFjdGFs aXMuaXQvY24lM0RBY3RhbGlzJTIwUXVhbGlmaWVkJTIwQ2VydGlmaWNhdGVzJTIwQ0ElMkNvdSUz RENlcnRpZmljYXRpb24lMjBTZXJ2aWNlJTIwUHJvdmlkZXIlMjAyJTJDbyUzREFjdGFsaXMlMjBT LnAuQS4lMkNjJTNESVQ/Y0FDZXJ0aWZpY2F0ZTANBgkqhkiG9w0BAQUFAAOCAQEAcIw3pziwClCS e/sFodRySw3SBbgRsvVR8SRXmC/lV5BbgcMlUNPOVHEosofkUaiQA3sdad5J895UgcN/LRbYMv39 QX1IgPn0SH8lthwlD1c2CgVO5GoWuVoEWFfvuiV9SVyeHTNzphoaw273VQG08XIL8BAsLWT0Y9t4 ZRqsVEZrYA2Gilyr/7tpVKR0IY4uCqvzBoPhyoCqRouXwVWW516H+TSPtaMZKqqUStPEOgUS0St6 PfPpsm+BkgUypqdM6G8OHrlxK4bSQCah5DlBIB841jeptf5HKTJEWtutwtfdYSXrtmn+0EgDxYUJ acO2e6Bd/be0C4Sy1uim+jt83g== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis Qualified Certificates CA Issuer OU: Certification Service Provider 2 Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis Qualified Certificates CA Subject OU: Certification Service Provider 2 Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Oct 22 09:43:00 CEST 2002 Valid to: Tue Oct 23 01:59:00 CEST 2012 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true Page 73 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.159.1.1.1 CPS text: [L'uso dei certificati emessi da Actalis S.p.A. (REA n.1669411, Trib. Milano) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://ldap.actalis.it/cn%3DActalis%20Qualified%20Certificates%20CA%2Cou%3DCertification% 20Service%20Provider%202%2Co%3DActalis%20S.p.A.%2Cc%3DIT?certificateRevocationList Subject Key Identifier 5B:A9:3C:9D:B0:CF:F9:3F:52:B5:21:D7:42:0E:43:F6:ED:A2:78:4F Subject Alternative Name [email protected] ldap://ldap.actalis.it/cn%3DActalis%20Qualified%20Certificates%20CA%2Cou%3DCertification% 20Service%20Provider%202%2Co%3DActalis%20S.p.A.%2Cc%3DIT?cACertificate Issuer Alternative Name [email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: E3:AF:C1:5B:D4:C0:6B:4D:BD:95:26:16:7B:EC:3B:E8:54:E3:3A:0D:8C:2D:68:11:84:10:04:B0:27 :A2:39:56 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2002-10-22T09:43:00Z 3.26.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.27 - Service : CN=- REGIONE EMILIA-ROMAGNA FORMAZIONE FIRMA DIGIT.,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- REGIONE EMILIA-ROMAGNA FORMAZIONE FIRMA DIGIT.,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 74 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE7DCCA9SgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx OTA3BgNVBAMTMC0gUkVHSU9ORSBFTUlMSUEtUk9NQUdOQSBGT1JNQVpJT05FIEZJUk1BIERJR0lU LjAeFw0wMzA5MDgwOTQ4NThaFw0xMzA5MDgwOTQ4NThaMIGKMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMOQWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRl cjE5MDcGA1UEAxMwLSBSRUdJT05FIEVNSUxJQS1ST01BR05BIEZPUk1BWklPTkUgRklSTUEgRElH SVQuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYEoZ2oS+OMrCi7YXUTQgYGigyDz EHZ9Y8AOvO/v8QAovtsXChwM3G3DPkHPK9oEqU/Y/JnkR9QgSGEC7gG1w9TcKGGfDWUsJSj6nV44 8QmltZP/RPnY2t4gAeNQtBwg5+wSYyez/Rc9q6eV2b2wL6yYfzXCpvZfhFTM/WJdvBVq1oex+Eg5 ejyuwZq0GcDInp1mYh5x7cRbuk0l4L6LO3G8dHoDe4+LYnSZkhqQmZqu8V0k6hMM3pss+fBzKjfZ Az9E9LmheKVu035w0Zo2J9uN2uBBH+wpC1oQS0HUNT7ah/9A9U1BOcOa7LfQQMLHKmaF5AhRUtJY 5g6yHEbKowIDAQABo4IBWTCCAVUwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwUQYD VR0gBEowSDBGBgYrgR8BAQEwPDA6BggrBgEFBQcCARYuaHR0cHM6Ly9jYS5hY3RhbGlzLml0L3Jl cG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCBvwYDVR0fBIG3MIG0MIGxoIGuoIGrhoGobGRhcDovL2Zl LmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRC0lMjBSRUdJT05FJTIwRU1JTElBLVJPTUFH TkElMjBGT1JNQVpJT05FJTIwRklSTUElMjBESUdJVC4lMkNvJTNEUkVHSU9ORSUyMEVNSUxJQS1S T01BR05BJTIwRk9STUFaSU9ORT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQWBBQD wV1oHWYN1SjnQLpkZarfsMxJQTANBgkqhkiG9w0BAQUFAAOCAQEAqglMED7nORPtApzqWWTPUqy3 Mtf8mWiq1vxkKdni+w8j/mnJjd2GVhd4M8LsnjPP1av80k0WRuDxkonkVLAj7dMhpBQZOq1uxP+C GnIXSMZMyKO440XVFaEtB2tO9WxzXQY9WafzvplYvn8Hn4FM+rB2/dtEuaRRCQmWtMF2E+mPBZLy cdUOeIofhgZjlLBUYAIPwqFJKBQDU4wxEBaZgkd3nV0lHsulyhuSolAlK54bDqwOZcjAYLu+BUal mYkX2MYjzt55EsVYUSQhLyPeOSIlCXXAWxp4D4PNjS4jN8+sTyMxS49Jiq69K6QgDEh754aLTWVY EeNM/vhiy9cLlA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - REGIONE EMILIA-ROMAGNA FORMAZIONE FIRMA DIGIT. Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - REGIONE EMILIA-ROMAGNA FORMAZIONE FIRMA DIGIT. Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Mon Sep 08 11:48:58 CEST 2003 Valid to: Sun Sep 08 11:48:58 CEST 2013 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AD:81:28:67:6A:12:F8:E3:2B:0A:2E:D8:5D:44:D0:81:81:A2:83:20:F3:10:76:7D:63:C0:0E:BC:EF:EF:F1:00:28:BE:D B:17:0A:1C:0C:DC:6D:C3:3E:41:CF:2B:DA:04:A9:4F:D8:FC:99:E4:47:D4:20:48:61:02:EE:01:B5:C3:D4:DC:28:61:9F:0D:65:2C:25:28:FA:9D:5E:38:F1:09:A5:B5:93:FF:44:F9:D8:DA:DE:20:01:E3:50:B4:1C:20:E7:EC:12: 63:27:B3:FD:17:3D:AB:A7:95:D9:BD:B0:2F:AC:98:7F:35:C2:A6:F6:5F:84:54:CC:FD:62:5D:BC:15:6A:D6:87:B1:F8:48:39:7A:3C:AE:C1:9A:B4:19:C0:C8:9E:9D:66:62:1E:71:ED:C4:5B:BA:4D:25:E0:BE:8B:3B:71:BC:74: 7A:03:7B:8F:8B:62:74:99:92:1A:90:99:9A:AE:F1:5D:24:EA:13:0C:DE:9B:2C:F9:F0:73:2A:37:D9:03:3F:44:F4:B9:A1:78:A5:6E:D3:7E:70:D1:9A:36:27:DB:8D:DA:E0:41:1F:EC:29:0B:5A:10:4B:41:D4:35:3E:DA:87:FF:40: F5:4D:41:39:C3:9A:EC:B7:D0:40:C2:C7:2A:66:85:E4:08:51:52:D2:58:E6:0E:B2:1C:46:CA:A3:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20REGIONE%20EMILIAROMAGNA%20FORMAZIONE%20FIRMA%20DIGIT.%2Co%3DREGIONE%20EMILIAROMAGNA%20FORMAZIONE?certificaterevocationlist Subject Key Identifier 03:C1:5D:68:1D:66:0D:D5:28:E7:40:BA:64:65:AA:DF:B0:CC:49:41 ITALIA (ITALY) - Trusted List ID: ID100001 Page 75 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 67:18:AC:3B:C1:16:85:71:76:D7:06:24:07:9A:84:F5:4F:4D:F3:75:DC:EB:E1:57:14:F7:EC:D2:A9: A5:EA:13 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-08T11:48:58Z 3.27.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.28 - Service : CN=- SIEMENS MEDICAL SOLUTIONS,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- SIEMENS MEDICAL SOLUTIONS,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEjzCCA3egAwIBAgIBATANBgkqhkiG9w0BAQUFADB1MQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEk MCIGA1UEAxMbLSBTSUVNRU5TIE1FRElDQUwgU09MVVRJT05TMB4XDTAzMDkwNTA4MzE1MFoXDTEz MDkwNTA4MzE1MFowdTELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMScwJQYD VQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxJDAiBgNVBAMTGy0gU0lFTUVOUyBN RURJQ0FMIFNPTFVUSU9OUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfczGRttwgh WN3ZoS8WzRu6gGYVh/zlj4jPiFtG+i4yldUHgo4fQLhkk0WFafAN8qHbXYBxhORiullgp+6KsdTf DtUsHd7UDK/vaIfHZmdJHTl+awbPIrjurnTNLaQpj2Lo6eyRpWMsdlZudiP+Yd/U7pw8d/v+qmO0 ee//Y3CktGwQoV7ldBiKKk+EMWn4N16mQcpAcPCdWjiw5xyxCa23EZU4H18R0CDd7R7tmVkSs5Ix uyhLWYUefKRF8O77NDj48997x8wnwCyxzH6PSCxN1AGGH63iQzDMzUIYE/WS0lRARrlWjjdPMjvQ xX3/fHu8EGh5kykPqxyUOEP7klECAwEAAaOCASgwggEkMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2Eu YWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwgY4GA1UdHwSBhjCBgzCBgKB+oHyG emxkYXA6Ly9mZS5jc3AubXVsdGljZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwU0lFTUVOUyUyME1F RElDQUwlMjBTT0xVVElPTlMlMkNvJTNEU0lFTUVOUyUyMFMucC5BLj9jZXJ0aWZpY2F0ZXJldm9j YXRpb25saXN0MB0GA1UdDgQWBBSbHX82nvRBcfuR8edOXBzPRevNzzANBgkqhkiG9w0BAQUFAAOC AQEAhbW87pHuFrouIGcr2swAyrtbGD0KRBPolVBkUFJN7HmxiN8PJdGn8QsgACg6xp5B5BsoBJO0 ndSC8yP9e3IYJR640pO/+GJmI4ZiPi9YBLHwZwbzmD5QsOcEmfoLmW4wWKKi1Xi3byolrRhSfdui FzML/0gV0D9u8bPYdbxaPwK0b0G5aPgRAgE8H/gtMIJ7UA6sRkdbSLeLMPSXrs3Ip0EsCzPHhvKW 0q0ZTkHhlqnFWiSPPNBeI/MS9btetVg1hURgta+Fqt5tGMVtstZeM5QXhUyoHzMadgJw7DzRhASD fZZThry81hV/pZa9gwXp/XxLKI+B8er/JdzwLgAl2A== -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 76 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: - SIEMENS MEDICAL SOLUTIONS Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - SIEMENS MEDICAL SOLUTIONS Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 05 10:31:50 CEST 2003 Valid to: Thu Sep 05 10:31:50 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20SIEMENS%20MEDICAL%20SOLUTIONS%2Co%3DSIEMENS%20S.p.A.?certificaterevocat ionlist Subject Key Identifier 9B:1D:7F:36:9E:F4:41:71:FB:91:F1:E7:4E:5C:1C:CF:45:EB:CD:CF Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4C:F3:92:D5:13:B0:7C:1F:6A:E7:A9:8E:7C:C9:26:6C:C1:00:B0:74:77:4F:5C:8E:FA:4D:3B:16:F9: F0:25:0D Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2003-09-05T10:31:50Z Page 77 ETSI 2014 - TSL HR - PDF/A-1b generator 3.28.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.29 - Service : CN=- Teleskill Italia S.p.A-Firma Digit. AIPA CR 24,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Teleskill Italia S.p.A-Firma Digit. AIPA CR 24,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE7zCCA9egAwIBAgIBATANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx OTA3BgNVBAMTMC0gVGVsZXNraWxsIEl0YWxpYSBTLnAuQS1GaXJtYSBEaWdpdC4gQUlQQSBDUiAy NDAeFw0wMzA5MDgxMDAxMDBaFw0xMzA5MDgxMDAxMDBaMIGKMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMOQWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRl cjE5MDcGA1UEAxMwLSBUZWxlc2tpbGwgSXRhbGlhIFMucC5BLUZpcm1hIERpZ2l0LiBBSVBBIENS IDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqSSyf3ecu2jUX4SDu01DthZf9Wo 7fK3tmqThABmRSm6Q7+b43N8yVakOjx5ejCrvtN/mKyLNbvEEUcAqY+FtJ8mADtmAHU7+8+bMIsL gldaQy6ghxk0qi0qPP0O0cc9hR1Cfxp8VxGaAKV4wNbiyhe5SGz82xDgqOZMs6T9xX7wsuHDbnD5 mwVHM8zizI7TuC5+Jp976khkWnKzd9NM87MR9Z4KkSBJGPU6KZ3TmdsO69TWH+C3O/6hQ190exuh JDG7zIX2ziVku7Comm940gvP7LXhb2Iik/rTb0qTLnzoo71vc5+/NETDsrgA4dNKLxZrJxa66z7T iT14W11prQIDAQABo4IBXDCCAVgwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwUQYD VR0gBEowSDBGBgYrgR8BAQEwPDA6BggrBgEFBQcCARYuaHR0cHM6Ly9jYS5hY3RhbGlzLml0L3Jl cG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCBwgYDVR0fBIG6MIG3MIG0oIGxoIGuhoGrbGRhcDovL2Zl LmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRC0lMjBUZWxlc2tpbGwlMjBJdGFsaWElMjBT LnAuQS1GaXJtYSUyMERpZ2l0LiUyMEFJUEElMjBDUiUyMDI0JTJDbyUzRFRlbGVza2lsbCUyMEl0 YWxpYSUyMFMucC5BLiUyMC0lMjBDQT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MB0GA1UdDgQW BBR49aD5/OYqUCsK50DoG6y1zShhUjANBgkqhkiG9w0BAQUFAAOCAQEAadi3vj+4+pZUsXidQ6V7 S9MwlnfawkGHC3gZiYGdrZNrGYAdBoWBrKc/HG67NgXvp8Jtl8oPWtIlw/Rf4iaDcA5rmYB1t1Ki acNR7DOcu49RPvt3Z6RU9EtVtXwdSrUjuqqmEQaYPJNbEs0YuDLG7a2MmwnfIey6wDpIvzyQrsJu scAbgEA1G9N1tVUqBqQURi0OfQAZd5pAP1J3Juz0oY8n5bIAhOpcV4Hwre/quRWVvPWDWuTcHqlz dzR6L0Wl6mLY9eUPl5E5yk0PzdyJMHzTD51/DYhI4TlZgOIjHRG/092qha/uec+ek7d0neXvpJCf c7M7UU++jnuvix9QjA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Teleskill Italia S.p.A-Firma Digit. AIPA CR 24 Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Teleskill Italia S.p.A-Firma Digit. AIPA CR 24 Subject OU: Certification Service Provider ITALIA (ITALY) - Trusted List ID: ID100001 Page 78 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Actalis S.p.A. Subject C: IT Valid from: Mon Sep 08 12:01:00 CEST 2003 Valid to: Sun Sep 08 12:01:00 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20Teleskill%20Italia%20S.p.AFirma%20Digit.%20AIPA%20CR%2024%2Co%3DTeleskill%20Italia%20S.p.A.%20%20CA?certificaterevocationlist Subject Key Identifier 78:F5:A0:F9:FC:E6:2A:50:2B:0A:E7:40:E8:1B:AC:B5:CD:28:61:52 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B2:EA:B2:BC:0A:4A:91:F5:26:B9:5D:BD:F4:36:04:BE:59:A3:8D:CB:EE:A9:6E:88:A6:ED:C8:E1 :F9:40:6B:59 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-08T12:01:00Z 3.29.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.30 - Service : CN=Actalis S.p.A. TSA,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] ITALIA (ITALY) - Trusted List ID: ID100001 A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). Page 79 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Actalis S.p.A. TSA,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEZjCCA06gAwIBAgIBATANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQGEwJJVDEXMBUGA1UECgwO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsMHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEb MBkGA1UEAwwSQWN0YWxpcyBTLnAuQS4gVFNBMB4XDTA5MDcwODExMDY1OVoXDTIyMDcwODExMDY1 OVowbDELMAkGA1UEBhMCSVQxFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLDB5DZXJ0 aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxGzAZBgNVBAMMEkFjdGFsaXMgUy5wLkEuIFRTQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOUT0wK4MPSzWwtcDwYBLdjIF73felweeoDb HvgAJ5+qKuNYTpkD9SKBYrOMho+oRkTukusfQ7eEFUPENcAvCZfp6ArkfAITA5dOCmd/JaXVd5FS Nzj6HQTAKMY+SCXMjph5tQa32iWRpufD9kHX7V73tQlezQTeUKD7XPgslB2T8fzC3g6qC2UgI6fN I8dFoQX0Y3QMpGvOVicSdAmHAG2fbZXaW5p8XxWaKw5ZIksS1/sNChAXqB57eeN/eEoCoVTnK0aD K11E21IJjhClq1KH9XlzdwkjVvKbJHp+AkC/iGZiiW4f10zK/48SVbid3DpCaJpeScKSj9ERVfmT /C0CAwEAAaOCAREwggENMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW BBSaY7QDX+E5TfCfEchT+ViEsxC+0jBRBgNVHSAESjBIMEYGBiuBHwgBATA8MDoGCCsGAQUFBwIB Fi5odHRwczovL3BvcnRhbC5hY3RhbGlzLml0L0luZm8vaW5mb1BvbGljeV9odG1sMHgGA1UdHwRx MG8wbaBroGmGZ2xkYXA6Ly9sZGFwLmFjdGFsaXMuaXQ6Mzg5L291JTNEQWN0YWxpcyUyMFMucC5B LiUyMFRTQSUyQ28lM0RBY3RhbGlzJTIwUy5wLkEuP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3Qw DQYJKoZIhvcNAQEFBQADggEBACmFenw8prFx+EU+mMcRWTu1ApHEWX22sVns2u01XmmebDH8MvWf Tp0wmcDFcjhP6/PHd0IUmjfZCw+ZK2V7e8ahl9c0i2oL1UhnhAfqDBapgPfu+v0QBIQjHC5IAx3K kIkartcwvWGqIHt10Ms2rlHUgUtT8y7d+RxDaT8ra99g2wGzQuk6qGyPQ6WcfiYM0tk9zSWxgx2X d+qnhwrYM6rcrgB8CyDEvBRvxGNwu3bG7RwoFHPTcSGomRmoJYFQCgBUx3p+ZBhk9H8yQfuWPzXf /wLoGGqB1q1XCK+XFDg6mZZH2c4JWNwA8zB4PDl6CTMq0XoIkTYeGcCDYlZNKhA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis S.p.A. TSA Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis S.p.A. TSA Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Wed Jul 08 13:06:59 CEST 2009 Valid to: Fri Jul 08 13:06:59 CEST 2022 Public Key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asic Constraints IsCA: true Subject Key Identifier 9A:63:B4:03:5F:E1:39:4D:F0:9F:11:C8:53:F9:58:84:B3:10:BE:D2 ITALIA (ITALY) - Trusted List ID: ID100001 Page 80 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.159.8.1.1 CPS pointer: https://portal.actalis.it/Info/infoPolicy_html CRL Distribution Points ldap://ldap.actalis.it:389/ou%3DActalis%20S.p.A.%20TSA%2Co%3DActalis%20S.p.A.?certificater evocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B6:9D:44:E7:F2:FB:46:8F:BD:A5:17:12:15:76:30:81:73:14:F1:42:D1:2B:45:2B:50:E4:41:17:8D:19 :29:61 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2009-07-08T13:06:59Z 3.31 - Service : CN=Actalis Secure Time Stamping CA,L=Milano,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Actalis Secure Time Stamping CA,L=Milano,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 81 ITALIA (ITALY) - Trusted List ID: ID100001 Page 81 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIEWjCCA0KgAwIBAgIBUTANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx DzANBgNVBAcTBk1pbGFubzEoMCYGA1UEAxMfQWN0YWxpcyBTZWN1cmUgVGltZSBTdGFtcGluZyBD QTAeFw0wMzAxMDExMjU0MDBaFw0xMzAxMDEyMzU5MDBaMIGKMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMOQWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRl cjEPMA0GA1UEBxMGTWlsYW5vMSgwJgYDVQQDEx9BY3RhbGlzIFNlY3VyZSBUaW1lIFN0YW1waW5n IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN9SZs+qJRtg7mAcxafOgvvGOeaF ap+h+7rVdN7EtUqVhijCafR76F1yT2imSfWaKhqV9oK2wP7MALQtfTxVFUJ0V3dsqy6tDjRqC1c1 P7ets1ACH/ZB5Bj2DLxKGG379WF53sfHfLd4R1o+XBEMDfhJFIT8isHugdFs9in5cwj+n7zGVjtC k7ejFoHdRNVOEyvWZ+eOtKB2cLMCyycHD03P/FtEbo19T/Gn9GLi71gEIYYtDjSZLzvLOcrtLL2g MioHms2LhZMPVi/pyig9X51jeRvCGQZ7tDZ3vtUM+cyoqzyh9CIwNeiGYjgHmKIqBN9PCovF5mph 6jpg0PnsZwIDAQABo4HIMIHFMB0GA1UdDgQWBBT5LaRI2MgRYZd4H8YjjTrNbIIFdDA5BgNVHR8E MjAwMC6gLKAqhihodHRwOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3RzY2EvQ1JMMEgGA1Ud IARBMD8wPQYGK4EfAQYBMDMwMQYIKwYBBQUHAgEWJWh0dHBzOi8vY2EuYWN0YWxpcy5pdC9wb2xp Y3kvdHNjYS9DUFMwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEF BQADggEBAFYyxHP1k6ubHEzEecZseiFzKaBdqJ5mkfw01ocN9Fmq9UgbCc4lYUJw4pKshZWZeG0r uZaTzeY10ebOMQ9LuSGfeRiVQFP4oHVTOkRynEZoeVkMm+tZH5Mh3Qq7IbWgM+A3H2b//L/fn310 k4exQxUPKkalkW4Z3v8Q7owTOunF31QGVI/uUSruI3du5gPCX70kwWa4BdQDcBOJHDLbBUBk0A+/ 3p3ka56DT41pTnPZQUPYvAVGjfNMe77meG84ZDZRX81bvRvN/OSJ3gX9MWuI1AG+S8XKT7SV9bkI 3whY2wvddE2HY1QQGjb/T7szQhHb7nY/TlM29WIzb5LZBHA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis Secure Time Stamping CA Issuer L: Milano Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis Secure Time Stamping CA Subject L: Milano Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Wed Jan 01 13:54:00 CET 2003 Valid to: Wed Jan 02 00:59:00 CET 2013 Public Key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ubject Key Identifier F9:2D:A4:48:D8:C8:11:61:97:78:1F:C6:23:8D:3A:CD:6C:82:05:74 CRL Distribution Points http://ca.actalis.it/repository/tsca/CRL Certificate Policies Policy OID: 1.3.159.1.6.1 CPS pointer: https://ca.actalis.it/policy/tsca/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 82 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: E6:B7:FB:22:E6:6F:F5:AC:7E:BF:A7:D8:05:0C:1F:B4:B4:55:31:06:03:F1:20:16:5A:14:AF:F3:2C: 54:33:34 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-01-01T13:54:00Z 3.32 - Service : CN=Timestamping,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Timestamping,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEWDCCA0CgAwIBAgIBATANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJJVDEXMBUGA1UEChMO QWN0YWxpcyBTLnAuQS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEV MBMGA1UEAxMMVGltZXN0YW1waW5nMB4XDTAzMDkxMDEwMzIxNFoXDTEzMDkxMDEwMzIxNFowZjEL MAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0 aW9uIFNlcnZpY2UgUHJvdmlkZXIxFTATBgNVBAMTDFRpbWVzdGFtcGluZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKgfSI8t8Oh/79tNFIu551qmiK+T7JaMWkQ80n5V6gxhGheY5pB7 5FS0NebCWqsiie/iRxZNtz1s5BBTOEx5RAbqhZnXr1pIgmfbxArTrJhRNyDH3de8zK0a95t66jRV V022LBJuDHih7nxthWC1Z1Vgeil3tke3NBM5zW3lgQpXsnQj3SrMqD3ZFM6wQZ04M5EUGP65dVke nG6vaK2nwTcLhRXF+hkon2tx5OB3nyLW+3cxVGR1XCIycHN4kUV1hK9I9RY6i3uidUnMvIkTMT11 fn8wv9Sgu8+kvVvwlMXKN+7z7rXXv1ComatWLIRphGD0rB+w8Xm15fC9kd3SvqUCAwEAAaOCAQ8w ggELMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEB MDwwOgYIKwYBBQUHAgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmll ZC9DUFMwdgYDVR0fBG8wbTBroGmgZ4ZlbGRhcDovL2ZlLmNzcC5tdWx0aWNlcnRpZnkuY29tOjM4 OS9vdSUzRFRpbWVzdGFtcGluZyUyQ28lM0RBY3RhbGlzJTIwUy5wLkEuP2NlcnRpZmljYXRlcmV2 b2NhdGlvbmxpc3QwHQYDVR0OBBYEFPPBohqAkZvvzmM4EsCbyDLUKVrFMA0GCSqGSIb3DQEBBQUA A4IBAQAHbrrJJH5o56j+vnbOw9VF8h7+VtOf+4vBqIKmRrHZ5gL/HNUQkper9XxusNixSEs/Sczo bFlYOU8nLL9NiRN4zgTKw6UcPWXieSIeMm2O9hpDWJDl0ZJlne61zydDWx2/g4SkxmvijCYnnCLy FXlkNAiCjy4s85eX4fVNRF0SseBYJR4n84o3lywGF3hxfWRxMUpem8/ET603mJImpVmlh57hPYLB HAX4xLQFjW2OfoDwL9eJV9O+neg8eJoL6YPmRNYbOiZ9yevtawkU5hYEoutSPmDUKyndkPf1gVz0 xd95YiFi2fbaKVJdWwIW5lg1wYRtHpvnnIzypr5F+VnJ -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Timestamping Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 83 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: Timestamping Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Wed Sep 10 12:32:14 CEST 2003 Valid to: Tue Sep 10 12:32:14 CEST 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DTimestamping%2Co%3DActalis%20S.p.A.?certificaterev ocationlist Subject Key Identifier F3:C1:A2:1A:80:91:9B:EF:CE:63:38:12:C0:9B:C8:32:D4:29:5A:C5 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 48:D5:55:22:C3:99:A3:E3:A5:E3:12:04:75:75:CB:9E:1F:6A:67:5D:6F:80:AE:9E:A4:4A:BC:0F:4C :9F:AC:8F Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-10T12:32:14Z 3.33 - Service : CN=Actalis - Firma Digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 84 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=Actalis - Firma Digitale,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 15771 X509 Certificate -----BEGIN CERTIFICATE----MIIEhDCCA2ygAwIBAgICPZswDQYJKoZIhvcNAQEFBQAwcjELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx ITAfBgNVBAMTGEFjdGFsaXMgLSBGaXJtYSBEaWdpdGFsZTAeFw0wMzA5MjYwOTEzMjhaFw0xNDA5 MzAyMzU5NTlaMHIxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5BY3RhbGlzIFMucC5BLjEnMCUGA1UE CxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMSEwHwYDVQQDExhBY3RhbGlzIC0gRmly bWEgRGlnaXRhbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5EuBLYInym8z8IvH G0kXXsPixlOYrzaGHrbO62ukyt87Q0Z9Omv15gzooJaVB3VEmw1+JavmPahqjUoJ/2XciYdlxtA5 B9w7euDVs9OWZljZ+MDjbmVGo4TXbEjtBTlynuVQYmICh+JC18rXn+B2wWVLIhsnLEH7ZMySyQH1 AkX3iXxoKwh5kFjURv5YdIyF1jErplPsOTQvACR4MDIQ7U+fyW85hnwDqfqRkD9AvEH83ig2AIOZ ZNzzSbHfMFx62WGvR0Bbr9t3ql8WjxRqo3rCTalkJbUfb+VsJDFwxWQ2rIWFOmYlngkv/1pQG2ih GL1UMUvAEZfcNHt9PX3pAgMBAAGjggEiMIIBHjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE AwIBBjBfBgNVHSAEWDBWMFQGBiuBHwEBATBKMEgGCCsGAQUFBwIBFjxodHRwczovL2NhLmFjdGFs aXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvcXVhbGlmaWVkX2Nwcy5wZGYwHQYDVR0OBBYEFCk7 lmXW2OK/i9TWmAM81i1E1GTFMHsGA1UdHwR0MHIwcKBuoGyGamxkYXA6Ly9mZS5jc3AubXVsdGlj ZXJ0aWZ5LmNvbTozODkvb3UlM0RBY3RhbGlzJTIwLSUyMEZpcm1hJTIwRGlnaXRhbGUlMkNvJTNE Q1NQP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwDQYJKoZIhvcNAQEFBQADggEBADEBbk9abCGv Vx7v8IGWAK69/HOkKgTYWEyAVXYyrPNSG0DZjBVY2JtTXf2EdXXLmzk823KTyYscDL93a6Q3+KLk xq8xy8PqrfkKsGaAzFe3olmVbIwMqovGzTam2I1sDOEMrMmK8ppnlci5KwISDwM9k0yH8NAbIsDi nVhVA9IPYbKIAuzJjsANe+fW84k2nGbNzkTQNHfst5ayXCO7L5gVHcHRXEiw66EkRmQZPEnoRQwb kjqRUJjJtHfs7rYsmUPZZlADsQdbazGiiJ1qo3QpFHpnZVfV+iYh6AUfyVUURTLk6AzQ6bQDce2G bxhH7KMIT/6Ct7uTQtmrXzLXre0= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Actalis - Firma Digitale Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: Actalis - Firma Digitale Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Fri Sep 26 11:13:28 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:A3:E4:4B:81:2D:82:27:CA:6F:33:F0:8B:C7:1B:49:17:5E:C3:E2:C6:53:98:AF:36:86:1E:B6:CE:EB:6B:A4:CA:DF:3B :43:46:7D:3A:6B:F5:E6:0C:E8:A0:96:95:07:75:44:9B:0D:7E:25:AB:E6:3D:A8:6A:8D:4A:09:FF:65:DC:89:87:65:C6:D0:39:07:DC:3B:7A:E0:D5:B3:D3:96:66:58:D9:F8:C0:E3:6E:65:46:A3:84:D7:6C:48:ED:05:39:72:9E:E5: 50:62:62:02:87:E2:42:D7:CA:D7:9F:E0:76:C1:65:4B:22:1B:27:2C:41:FB:64:CC:92:C9:01:F5:02:45:F7:89:7C:68:2B:08:79:90:58:D4:46:FE:58:74:8C:85:D6:31:2B:A6:53:EC:39:34:2F:00:24:78:30:32:10:ED:4F:9F:C9:6F:39: 86:7C:03:A9:FA:91:90:3F:40:BC:41:FC:DE:28:36:00:83:99:64:DC:F3:49:B1:DF:30:5C:7A:D9:61:AF:47:40:5B:AF:DB:77:AA:5F:16:8F:14:6A:A3:7A:C2:4D:A9:64:25:B5:1F:6F:E5:6C:24:31:70:C5:64:36:AC:85:85:3A:66:2 5:9E:09:2F:FF:5A:50:1B:68:A1:18:BD:54:31:4B:C0:11:97:DC:34:7B:7D:3D:7D:E9:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/qualified_cps.pdf Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 29:3B:96:65:D6:D8:E2:BF:8B:D4:D6:98:03:3C:D6:2D:44:D4:64:C5 Page 85 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DActalis%20%20Firma%20Digitale%2Co%3DCSP?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 96:97:6B:6F:D2:B5:91:17:02:3B:59:AF:AF:03:20:17:C4:8C:DA:D9:39:2B:AF:33:26:4E:98:2E:DA: 08:4D:DE Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-26T11:13:28Z 3.33.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.34 - Service : CN=- BNL S.p.A. Corporate Firma,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- BNL S.p.A. Corporate Firma,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 142799 X509 Certificate -----BEGIN CERTIFICATE----MIIElzCCA3+gAwIBAgIDAi3PMA0GCSqGSIb3DQEBBQUAMHYxCzAJBgNVBAYTAklUMRcwFQYDVQQK Ew5BY3RhbGlzIFMucC5BLjEnMCUGA1UECxMeQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVy MSUwIwYDVQQDExwtIEJOTCBTLnAuQS4gQ29ycG9yYXRlIEZpcm1hMB4XDTAzMDkwOTA4MjQyOFoX DTE0MDkzMDIzNTk1OVowdjELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkFjdGFsaXMgUy5wLkEuMScw JQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIxJTAjBgNVBAMTHC0gQk5MIFMu cC5BLiBDb3Jwb3JhdGUgRmlybWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQPKx dgR5g+m28Q6FSwypbEMu8rWNexnbubOt7EUWRZoU2rzrOvnthob2IX9YNh0i+67ZP+odZtEZDbnh GTcWbAXW3UNyt72DWReXUyqed+ylQPh4X9fe3KPpns0UMGjfU4LDn6UEr7upLG6eYoR6I3o/Taho e3qEpt+9I7NLDxJpRFftUVs6l8qHM0fBD2SbND+5g87uTI9YgbzPmjwsdu7fs1nul5hAqudicQgF miYCSSyxCmKpE+Oeqf4KGOy8Hefr4ozz1OC0z4raIoYUors7rLFPkP+F6xtqPrlMNDNXJbSsc9ft kY/MyuqLSmKiZEBEv3UTh15ghjVsyzpxAgMBAAGjggEsMIIBKDAPBgNVHRMBAf8EBTADAQH/MA4G A1UdDwEB/wQEAwIBBjBRBgNVHSAESjBIMEYGBiuBHwEBATA8MDoGCCsGAQUFBwIBFi5odHRwczov L2NhLmFjdGFsaXMuaXQvcmVwb3NpdG9yeS9xdWFsaWZpZWQvQ1BTMB0GA1UdDgQWBBSKlahOB/ep pAb+4oKdHeRL0AHNRzCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfWxkYXA6Ly9mZS5jc3AubXVsdGlj ZXJ0aWZ5LmNvbTozODkvb3UlM0QtJTIwQk5MJTIwUy5wLkEuJTIwQ29ycG9yYXRlJTIwRmlybWEl MkNvJTNEQWN0YWxpcyUyMFMucC5BLj9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MA0GCSqGSIb3 DQEBBQUAA4IBAQAMFQAuIMvVeUEM0VPVsj7Q7PwLb5Q2PU8vAiagX8UxprmOXkvpYrO8bDK9LzDN zctb5Q+KTTooN1c5MKueN1++3KPt02TcYuIB9+yUtD77LVHVka/ZxXYvtdggSlSDSUxnVcdJaMHn iJZhuCF6RpTjju3xBXwKIzPWvnbNmQzzSz2rVB4BiquG6s4PtbsG/TLvqhKPD52xsUeVHzQUdfqO EMocHaQg2CpdWd3S3Rp8Ql1flsFOUSq2qNQr0OyVUNytX25sntOjwHBdKTcaML/hnYLmG/yb2Fg5 ewv5a1QHV1ooVEgYXMKcikIf8BXbuNO9G9x6K0MCGmqPiNL28jP6 -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 86 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: - BNL S.p.A. Corporate Firma Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - BNL S.p.A. Corporate Firma Subject OU: Certification Service Provider Subject O: Actalis S.p.A. Subject C: IT Valid from: Tue Sep 09 10:24:28 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AA:40:F2:B1:76:04:79:83:E9:B6:F1:0E:85:4B:0C:A9:6C:43:2E:F2:B5:8D:7B:19:DB:B9:B3:AD:EC:45:16:45:9A:14: DA:BC:EB:3A:F9:ED:86:86:F6:21:7F:58:36:1D:22:FB:AE:D9:3F:EA:1D:66:D1:19:0D:B9:E1:19:37:16:6C:05:D6:DD:43:72:B7:BD:83:59:17:97:53:2A:9E:77:EC:A5:40:F8:78:5F:D7:DE:DC:A3:E9:9E:CD:14:30:68:DF:53:8 2:C3:9F:A5:04:AF:BB:A9:2C:6E:9E:62:84:7A:23:7A:3F:4D:A8:68:7B:7A:84:A6:DF:BD:23:B3:4B:0F:12:69:44:57:ED:51:5B:3A:97:CA:87:33:47:C1:0F:64:9B:34:3F:B9:83:CE:EE:4C:8F:58:81:BC:CF:9A:3C:2C:76:EE:DF: B3:59:EE:97:98:40:AA:E7:62:71:08:05:9A:26:02:49:2C:B1:0A:62:A9:13:E3:9E:A9:FE:0A:18:EC:BC:1D:E7:EB:E2:8C:F3:D4:E0:B4:CF:8A:DA:22:86:14:A2:BB:3B:AC:B1:4F:90:FF:85:EB:1B:6A:3E:B9:4C:34:33:57:25:B 4:AC:73:D7:ED:91:8F:CC:CA:EA:8B:4A:62:A2:64:40:44:BF:75:13:87:5E:60:86:35:6C:CB:3A:71:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS Subject Key Identifier 8A:95:A8:4E:07:F7:A9:A4:06:FE:E2:82:9D:1D:E4:4B:D0:01:CD:47 CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D%20BNL%20S.p.A.%20Corporate%20Firma%2Co%3DActalis%20S.p.A.?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 95:EC:BC:7C:B2:F4:ED:ED:AD:DE:87:A5:B7:D5:91:3B:26:A1:CC:81:9D:CF:5B:B1:31:40:55:4C: 01:01:36:B4 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2003-09-09T10:24:28Z Page 87 ETSI 2014 - TSL HR - PDF/A-1b generator 3.34.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.35 - Service : CN=- Firma Digitale-Comune di Firenze,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=- Firma Digitale-Comune di Firenze,OU=Certification Service Provider,O=Actalis S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1267 X509 Certificate -----BEGIN CERTIFICATE----MIIErzCCA5egAwIBAgICBPMwDQYJKoZIhvcNAQEFBQAwfDELMAkGA1UEBhMCSVQxFzAVBgNVBAoT DkFjdGFsaXMgUy5wLkEuMScwJQYDVQQLEx5DZXJ0aWZpY2F0aW9uIFNlcnZpY2UgUHJvdmlkZXIx KzApBgNVBAMTIi0gRmlybWEgRGlnaXRhbGUtQ29tdW5lIGRpIEZpcmVuemUwHhcNMDMwOTA1MTAx NjIwWhcNMTQwOTMwMjM1OTU5WjB8MQswCQYDVQQGEwJJVDEXMBUGA1UEChMOQWN0YWxpcyBTLnAu QS4xJzAlBgNVBAsTHkNlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjErMCkGA1UEAxMiLSBG aXJtYSBEaWdpdGFsZS1Db211bmUgZGkgRmlyZW56ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAND3ZE3x1Zjjcph4bSTGjHrYWtal2TJ8fyEmeJndIZhCdkdKbUOcvmMKr4pw4ysZulWp lW7C5pR4n1Jk6n1FvFQCG6+IRucEWwArsv8ETguXzgBuuijqbP/VsLsSbb03L/qbHyvPAYY4VoaN kVuuyJ4uqaR09wpEhT7vFm5BlZBS8XA9mB5gq/aIBNGkoRe6MbwGaVP5O3S4dBitomBEEd99AG+l wCxrS5bV5XlREkTIbpGUtcOawQ738X4NcHeeHfWVRIAsxN1XRj2tc32RAXr4GPIN4xKIW2FffS9d 3/9YvGBwRGJZ97d0dPkNN4eX9cmc/RIBTO7k6aAjOvD/gk0CAwEAAaOCATkwggE1MA8GA1UdEwEB /wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMFEGA1UdIARKMEgwRgYGK4EfAQEBMDwwOgYIKwYBBQUH AgEWLmh0dHBzOi8vY2EuYWN0YWxpcy5pdC9yZXBvc2l0b3J5L3F1YWxpZmllZC9DUFMwHQYDVR0O BBYEFCWjjulhrAql9j6RNVSTAty57BuyMIGfBgNVHR8EgZcwgZQwgZGggY6ggYuGgYhsZGFwOi8v ZmUuY3NwLm11bHRpY2VydGlmeS5jb206Mzg5L291JTNELSUyMEZpcm1hJTIwRGlnaXRhbGUtQ29t dW5lJTIwZGklMjBGaXJlbnplJTJDbyUzRENvbXVuZSUyMGRpJTIwRmlyZW56ZT9jZXJ0aWZpY2F0 ZXJldm9jYXRpb25saXN0MA0GCSqGSIb3DQEBBQUAA4IBAQCsadXMJ7WsDXvL00rUOAwMr9wWhZz7 ogBDpzv9JhDgMya0yl4R08fYaHJy2p7SqgHQi2pGPXTWVZqSf5D2SdKWIDLMejDdQhcb5DNTXsUc DExu5ydYlHGqJWAc0X/Xmg8MfmG8yQ777Rlmh2AjQgClerRKJqfNY+Ou7zVLC3fv54eTMIazEpBl RNnokc11smIWiZ7qTMeFqTbmk8CzJEvGJAUoz8VQ42Wpplk1UrPETZDhPE5fpB0FKw3V5oAkR6bE ORUSIjHWQZoA7AizkYBQro56k8Wgv5xlQk1DyAp97Q+k+CvBE2elKBKYEbT6hv6DytwwHJPL8Eis ESLM4HzL -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: - Firma Digitale-Comune di Firenze Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A. Issuer C: IT Subject CN: - Firma Digitale-Comune di Firenze Subject OU: Certification Service Provider Subject O: Actalis S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 88 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Valid from: Fri Sep 05 12:16:20 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://ca.actalis.it/repository/qualified/CPS Subject Key Identifier 25:A3:8E:E9:61:AC:0A:A5:F6:3E:91:35:54:93:02:DC:B9:EC:1B:B2 CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3D-%20Firma%20DigitaleComune%20di%20Firenze%2Co%3DComune%20di%20Firenze?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: E5:1B:D0:72:08:C4:B7:D7:9F:66:D0:B9:E7:11:7F:C6:FC:77:85:F5:12:43:D6:2B:F6:A1:44:9F:F8: C4:69:65 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-09-05T12:16:20Z 3.35.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 3.36 - Service : CN=CA Qualificata BNL erogata da Actalis,OU=Qualified Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 89 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=CA Qualificata BNL erogata da Actalis,OU=Qualified Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFGTCCBAGgAwIBAgIBATANBgkqhkiG9w0BAQsFADCBlTELMAkGA1UEBhMCSVQxIzAhBgNVBAoM GkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3MTEwLwYDVQQLDChRdWFsaWZpZWQgQ2VydGlmaWNh dGlvbiBTZXJ2aWNlIFByb3ZpZGVyMS4wLAYDVQQDDCVDQSBRdWFsaWZpY2F0YSBCTkwgZXJvZ2F0 YSBkYSBBY3RhbGlzMB4XDTExMDkyNzEyMzMxNFoXDTMxMDkyNTEyMzMxNFowgZUxCzAJBgNVBAYT AklUMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzExMC8GA1UECwwoUXVhbGlm aWVkIENlcnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjEuMCwGA1UEAwwlQ0EgUXVhbGlmaWNh dGEgQk5MIGVyb2dhdGEgZGEgQWN0YWxpczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM4sCojStWijfoHCICVO5hhBKPSrcvvsQ11+U1MYktv+MgHatN6XhozMsfb7nyLmtF0tArvsmRNl iDxA1kBtC9Hw/+fzf97QEOKHa437ZbQQ79BqBsLDuWKMHc/jsGQt79ymry7gzxR3+76gkMSuEyzE sVEfFvd6BaXPfnj5RZtBi1P1EXGzhvci71pSOAKIBdSzpCjYbzgFDi/FcVJmk7XzFGk7JFDBbEuJ 4bDGbxpMEmmsqEXTkTlPcIM7CjtYvQJWtaCQtN0OpT0XROwrOXOefnC4gN5gVINZ2otpm6kr8Mg1 dTUbZx8yVtripBxpenf1vQGtoV7NUmrFrGVwb4sCAwEAAaOCAXAwggFsMA4GA1UdDwEB/wQEAwIB BjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/4xOuFXoU9svpiyWr4lqm1WL1rzBVBgNVHSAE TjBMMEoGBiuBHwEBATBAMD4GCCsGAQUFBwIBFjJodHRwczovL3BvcnRhbC5hY3RhbGlzLml0L3Jl cG9zaXRvcnkvcXVhbGlmaWVkL0NQUzCB0gYDVR0fBIHKMIHHMIHEoIHBoIG+hoG7bGRhcDovL2xk YXAuYWN0YWxpcy5pdC9jbj1DQSUyMFF1YWxpZmljYXRhJTIwQk5MJTIwZXJvZ2F0YSUyMGRhJTIw QWN0YWxpcyxvdT1RdWFsaWZpZWQlMjBDZXJ0aWZpY2F0aW9uJTIwU2VydmljZSUyMFByb3ZpZGVy LG89QWN0YWxpcyUyMFMucC5BLiUyRjAzMzU4NTIwOTY3LGM9SVQ/Y2VydGlmaWNhdGVyZXZvY2F0 aW9ubGlzdDANBgkqhkiG9w0BAQsFAAOCAQEApe08ti/X9hBdsWxBVPJi7eVXat71/uTnz7/Mwyzv Ig8acfIcooD4fuW1OzajPdGbb3FjfvojQY5yTD2xX+G8K4rJ5WoYk6IXGS5WWkJz8Q17Lnei8wsV tZt60xdWc8cf4L8ZcFKlJ2qDUwIOCenIMlIfippHgnGzY160FL/RysD4QpMMqtM+w+btUpLGWhGH Xg2/FxBcFdVG+veskRSwLR1/BLdMzCgsBP8yBw1vWWK2RBXa2SNk8QI5iqcwtO/WPc5JNyg/N/Do Har/xaiIEaNRSAYBK0f83Ru4aZHjv4Aeg8KBqhK1h7IcRSmhZAD8vlfCsL7FZvCd3b3ZT/Fd3g== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: CA Qualificata BNL erogata da Actalis Issuer OU: Qualified Certification Service Provider Issuer O: Actalis S.p.A./03358520967 Issuer C: IT Subject CN: CA Qualificata BNL erogata da Actalis Subject OU: Qualified Certification Service Provider Subject O: Actalis S.p.A./03358520967 Subject C: IT Valid from: Tue Sep 27 14:33:14 CEST 2011 Valid to: Thu Sep 25 14:33:14 CEST 2031 Public Key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asic Constraints IsCA: true Subject Key Identifier FF:E3:13:AE:15:7A:14:F6:CB:E9:8B:25:AB:E2:5A:A6:D5:62:F5:AF Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://portal.actalis.it/repository/qualified/CPS ITALIA (ITALY) - Trusted List ID: ID100001 Page 90 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.actalis.it/cn=CA%20Qualificata%20BNL%20erogata%20da%20Actalis,ou=Qualified%2 0Certification%20Service%20Provider,o=Actalis%20S.p.A.%2F03358520967,c=IT?certificaterevoc ationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6C:67:34:2A:E8:91:6B:04:5C:5F:9A:1D:34:F5:10:B8:BC:31:F9:0D:03:D3:01:2A:67:04:A2:24:67: DF:11:EF Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2011-09-27T14:33:14Z 3.36.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2011-09-27T13:33:14Z 3.37 - Service : CN=Actalis Time Stamping CA G1,OU=Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Actalis Time Stamping CA G1,OU=Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 839214640130572480 ITALIA (ITALY) - Trusted List ID: ID100001 Page 91 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFRjCCBC6gAwIBAgIIC6V9RNNKQMAwDQYJKoZIhvcNAQELBQAwgYExCzAJBgNVBAYTAklUMSMw IQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UECwweQ2VydGlmaWNhdGlv biBTZXJ2aWNlIFByb3ZpZGVyMSQwIgYDVQQDDBtBY3RhbGlzIFRpbWUgU3RhbXBpbmcgQ0EgRzEw HhcNMTIwNzE5MTM0NTAxWhcNMzIwNzE5MTM0NTAxWjCBgTELMAkGA1UEBhMCSVQxIzAhBgNVBAoM GkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3MScwJQYDVQQLDB5DZXJ0aWZpY2F0aW9uIFNlcnZp Y2UgUHJvdmlkZXIxJDAiBgNVBAMMG0FjdGFsaXMgVGltZSBTdGFtcGluZyBDQSBHMTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANrbfufl9CYdbNWOsKN8evAjEtN33Et3OTRLI9H9vrXi xOFbSEQdg6ghclZ0jVdOjGoHVrUZu9vbcq5hdrEAK6rb74PAen/RRTCfByFn/dnm3YxBJmX1m5JZ QKLtQIwlqqA9Pyu9t6qMPdHWqEaeYlMTjq3BOUTgFtO2Wcn2n7pAY3OFq2vCURkVQRvgVH1GZGX5 aMFbNsc0Kok8mffeQHaqjZ2zhawSEB7O5lIIY3OKJtFUvmqNwuU7S6U2dmk2+EqpTJoEh71E2APd 1iJ9nMe5DwrV4ke04l5Wbtz8Rh5AcCsOtwEF4tRhoisL0asq6VuiGAHkT6t1m1iYWjA3WV8CAwEA AaOCAb4wggG6MB0GA1UdDgQWBBQmBuKAQ7IEYTpWqEd29i8PxA1YijAPBgNVHRMBAf8EBTADAQH/ MB8GA1UdIwQYMBaAFCYG4oBDsgRhOlaoR3b2Lw/EDViKMFEGA1UdIARKMEgwRgYGK4EfCAEBMDww OgYIKwYBBQUHAgEWLmh0dHBzOi8vcG9ydGFsLmFjdGFsaXMuaXQvSW5mby9pbmZvUG9saWN5X2h0 bWwwggECBgNVHR8EgfowgfcwgbuggbiggbWGgbJsZGFwOi8vbGRhcC5hY3RhbGlzLml0L2NuJTNk QWN0YWxpcyUyMFRpbWUlMjBTdGFtcGluZyUyMENBJTIwRzEsb3UlM2RDZXJ0aWZpY2F0aW9uJTIw U2VydmljZSUyMFByb3ZpZGVyLG8lM2RBY3RhbGlzJTIwUy5wLkEuJTJmMDMzNTg1MjA5NjcsYyUz ZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MDegNaAzhjFodHRwOi8vcG9ydGFs LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9UU0NBRzEvZ2V0Q1JMMA4GA1UdDwEB/wQEAwIBBjANBgkq hkiG9w0BAQsFAAOCAQEAYVhJJ3PDVi/Y11/uK/b0fU06giMJSjcG0OBc/S60a31EmHIypBbYS3PN vLhH0VrDplmNm5P3N3b74Pd3JrZVRC310ekPbHG0MEPq58MvR5ndi8JADNHzb9V7R0SkB2NbPXOL JIS0mVLTbg3Ikba7zaAwdr0bSqTw4C/6P9VwbQ9QTroBJUKeuxFqWmQMVCBqr5+LyQ5Y4FlcGYI3 Mdhsy6ynaI8cNUD5/GNolvQnE6VrwjNX97IwPsLJ3/iCxDjRDjXgWAwd2w4p9fHCfxMrnzEV4e5+ tyFWtmrWehQvfuPXGN1dteJgfgCuUa18V09lmcoV5RHQWyIWCFfhcHfvvA== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Actalis Time Stamping CA G1 Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A./03358520967 Issuer C: IT Subject CN: Actalis Time Stamping CA G1 Subject OU: Certification Service Provider Subject O: Actalis S.p.A./03358520967 Subject C: IT Valid from: Thu Jul 19 15:45:01 CEST 2012 Valid to: Mon Jul 19 15:45:01 CEST 2032 Public Key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ubject Key Identifier 26:06:E2:80:43:B2:04:61:3A:56:A8:47:76:F6:2F:0F:C4:0D:58:8A Basic Constraints IsCA: true Authority Key Identifier 26:06:E2:80:43:B2:04:61:3A:56:A8:47:76:F6:2F:0F:C4:0D:58:8A Certificate Policies Policy OID: 1.3.159.8.1.1 CPS pointer: https://portal.actalis.it/Info/infoPolicy_html CRL Distribution Points ldap://ldap.actalis.it/cn%3dActalis%20Time%20Stamping%20CA%20G1,ou%3dCertification%20S ervice%20Provider,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;bin ary http://portal.actalis.it/Repository/TSCAG1/getCRL Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 92 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: 24:7F:C6:C8:2A:E3:CC:3B:2C:DC:C5:10:5C:E2:9E:A4:1D:93:18:74:16:89:45:53:54:CA:00:BC:92 :13:BF:2B Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2012-07-19T13:45:00Z 3.38 - Service : CN=CA Qualificata Regione Campania erogata da Actalis,OU=Qualified Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=CA Qualificata Regione Campania erogata da Actalis,OU=Qualified Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 7938090004196430334 X509 Certificate -----BEGIN CERTIFICATE----MIIFuDCCBKCgAwIBAgIIbinCzQ81Ef4wDQYJKoZIhvcNAQELBQAwgaIxCzAJBgNVBAYTAklUMSMw IQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzExMC8GA1UECwwoUXVhbGlmaWVkIENl cnRpZmljYXRpb24gU2VydmljZSBQcm92aWRlcjE7MDkGA1UEAwwyQ0EgUXVhbGlmaWNhdGEgUmVn aW9uZSBDYW1wYW5pYSBlcm9nYXRhIGRhIEFjdGFsaXMwHhcNMTIwODIyMTIyNTExWhcNMzIwODIy MTIyNTExWjCBojELMAkGA1UEBhMCSVQxIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIw OTY3MTEwLwYDVQQLDChRdWFsaWZpZWQgQ2VydGlmaWNhdGlvbiBTZXJ2aWNlIFByb3ZpZGVyMTsw OQYDVQQDDDJDQSBRdWFsaWZpY2F0YSBSZWdpb25lIENhbXBhbmlhIGVyb2dhdGEgZGEgQWN0YWxp czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALS+hacJHQKANu+JdWbHsodOx5/FYa2B fH/kX4embHDOenrLH869xvzgkeaZ5j1aihGL2W1DroLHhkfWWyUAvVsmlsFE40DgEZBVX80IZIzp NwgknqY3zIdQTJ2MbAj1aMc/X8eYg93r9JSTcIt3bOIxgATFnHp0j8jBhmL0xJUlcXoWeUgk+7G5 e8UIMPZ6Otw3vsz26QZMVFenwZfEYVlwkio+hRonhNRGUh9AeAvfCFXERi9iYkWwIKAtxzQtFSec gv5n96p6O9coEiuT2d8N2VuEBIPfxJjbd3KPz/fTfoo7RUREH71icanaN8D50IUVAxYY5y7BS3Y0 qqD4gdMCAwEAAaOCAe4wggHqMB0GA1UdDgQWBBRHg5bizjcaIwxvjPp576cjvaQZezASBgNVHRMB Af8ECDAGAQH/AgEAMB8GA1UdIwQYMBaAFEeDluLONxojDG+M+nnvpyO9pBl7MFYGA1UdIARPME0w SwYGK4EfBgQBMEEwPwYIKwYBBQUHAgEWM2h0dHBzOi8vcG9ydGFsLmFjdGFsaXMuaXQvSW5mby9D UFMvUmVnaW9uZV9DYW1wYW5pYTCCASoGA1UdHwSCASEwggEdMIHioIHfoIHchoHZbGRhcDovL2xk YXAuYWN0YWxpcy5pdC9jbiUzZENBJTIwUXVhbGlmaWNhdGElMjBSZWdpb25lJTIwQ2FtcGFuaWEl MjBlcm9nYXRhJTIwZGElMjBBY3RhbGlzLG91JTNkUXVhbGlmaWVkJTIwQ2VydGlmaWNhdGlvbiUy MFNlcnZpY2UlMjBQcm92aWRlcixvJTNkQWN0YWxpcyUyMFMucC5BLiUyRjAzMzU4NTIwOTY3LGMl M2RJVD9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0O2JpbmFyeTA2oDSgMoYwaHR0cDovL3BvcnRh bC5hY3RhbGlzLml0L1JlcG9zaXRvcnkvUUxGUkMvZ2V0Q1JMMA4GA1UdDwEB/wQEAwIBBjANBgkq hkiG9w0BAQsFAAOCAQEAhDxJvHqrntca/C0ns4PmCQu74/Q9hDmRL7tyVW2hzXdsZPtLv0QUXqjS zj3qRcJuWbzO3VBT1wqFlU9c1dxmxYtS6uauSOLAJ2vIjY+D5w7qNUpiF/4d77O02e7kfyQfGVK7 cifNiCGNWkPKXU8wFX16Rfu62hBQnHm5ZG4zfks95RcucPxYR/7j0mPHNg10k16j/Ri+3pWDkDMl 6068WSdVw5zsuwdxV4XY1TOUghL/T9l4/9P9LE9J1/mb9KLohmc5W3K4XXSYZKCEXT8gxNHvnBkE T+8TFqa0QXSDjxcGpBLSA1NwtUGd5d4oTkQsQ1lLTq3b5onOkYpWchM7hQ== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: CA Qualificata Regione Campania erogata da Actalis Issuer OU: Qualified Certification Service Provider Issuer O: Actalis S.p.A./03358520967 ITALIA (ITALY) - Trusted List ID: ID100001 Page 93 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer C: IT Subject CN: CA Qualificata Regione Campania erogata da Actalis Subject OU: Qualified Certification Service Provider Subject O: Actalis S.p.A./03358520967 Subject C: IT Valid from: Wed Aug 22 14:25:11 CEST 2012 Valid to: Sun Aug 22 14:25:11 CEST 2032 Public Key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ubject Key Identifier 47:83:96:E2:CE:37:1A:23:0C:6F:8C:FA:79:EF:A7:23:BD:A4:19:7B Basic Constraints IsCA: true - Path length: 0 Authority Key Identifier 47:83:96:E2:CE:37:1A:23:0C:6F:8C:FA:79:EF:A7:23:BD:A4:19:7B Certificate Policies Policy OID: 1.3.159.6.4.1 CPS pointer: https://portal.actalis.it/Info/CPS/Regione_Campania CRL Distribution Points ldap://ldap.actalis.it/cn%3dCA%20Qualificata%20Regione%20Campania%20erogata%20da%20Act alis,ou%3dQualified%20Certification%20Service%20Provider,o%3dActalis%20S.p.A.%2F0335852 0967,c%3dIT?certificaterevocationlist;binary http://portal.actalis.it/Repository/QLFRC/getCRL Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 92:1F:BF:65:42:32:20:82:31:E9:82:C6:B6:C0:40:F0:F5:56:87:F8:4E:F5:31:50:73:B0:0A:D9:FA:3B :15:4B Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2012-08-22T12:25:00Z 3.38.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2012-08-22T12:25:00Z Page 94 ETSI 2014 - TSL HR - PDF/A-1b generator 3.39 - Service : CN=Actalis CA per Firma Digitale Qualificata 2,OU=Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Actalis CA per Firma Digitale Qualificata 2,OU=Certification Service Provider,O=Actalis S.p.A./03358520967,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIExDCCA6ygAwIBAgIBATANBgkqhkiG9w0BAQsFADCBkTELMAkGA1UEBhMCSVQxIzAhBgNVBAoM GkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3MScwJQYDVQQLDB5DZXJ0aWZpY2F0aW9uIFNlcnZp Y2UgUHJvdmlkZXIxNDAyBgNVBAMMK0FjdGFsaXMgQ0EgcGVyIEZpcm1hIERpZ2l0YWxlIFF1YWxp ZmljYXRhIDIwHhcNMTMwMzA2MTA1NjM3WhcNMjMwMzA2MTA1NjM3WjCBkTELMAkGA1UEBhMCSVQx IzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3MScwJQYDVQQLDB5DZXJ0aWZpY2F0 aW9uIFNlcnZpY2UgUHJvdmlkZXIxNDAyBgNVBAMMK0FjdGFsaXMgQ0EgcGVyIEZpcm1hIERpZ2l0 YWxlIFF1YWxpZmljYXRhIDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6+8UgRwq o/jq3Qp3R3AsC4hYgpkN08/52sgYCNDxZQJyDbCtrTzujUpoGJDm68SNhjnTaV0R8F9DXpp6f9lx 0hIDHf/K6ZEHM84lTlTw/H8ZtK+cI36E40Z9Z8xOHxFp8uEE/QrLKdB084b7tinxPEcw2ZzNl/VG aJ78JIxYs4gUlESvSn94bf+wPi7+Fv9e0F+7Xoh0IEiuyv0eynUyZdoHAtxerhVwniHKqwAV04UN uKEtPAgwGxlRoOb8zosJqTVO4vSBhvDyOzQK8ZUwfIq5rz4Q+voUwtMcTcmxHRTsB1DI+uKjcaOm QWiDvyrs/ijazmDFRdTwYHOR9+zBAgMBAAGjggEjMIIBHzAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHQ4EFgQUrA2EufyX7j6d8AcLgKlVZkQ3kEAwUQYDVR0gBEowSDBGBgYr gR8BAQEwPDA6BggrBgEFBQcCARYuaHR0cHM6Ly9wb3J0YWwuYWN0YWxpcy5pdC9JbmZvL2luZm9Q b2xpY3lfaHRtbDCBiQYDVR0fBIGBMH8wfaB7oHmGd2xkYXA6Ly9sZGFwLmFjdGFsaXMuaXQvb3Ul M2RBY3RhbGlzJTIwQ0ElMjBwZXIlMjBGaXJtYSUyMERpZ2l0YWxlJTIwUXVhbGlmaWNhdGElMjAy LG8lM0RDTklQQT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MA0GCSqGSIb3DQEBCwUAA4IBAQAB 9aPDoXeFk/77y1fQswLooKfR9zllhO+NGbD2y9BoqncrssoL08137LlCJ2a8MER0u8RgvhULfX7U 7dGpRGTaaQ9dGbZ9i+uGf3ok/3CtkkJOZOF2+v6dg2zJU/UGHJxNUn6mwaL17yH9J8eofHLCT2Jc axbmTigAXGJNEB724THy2nZwWE74KIj8hEQN3MtxGtLrfSjxxj9SRc8fG5cat45I+CD9FHOtyY9J CgSDLwnEecB8NX0LKSLp9iuf1TJJxUsAugoujH9FJ0kUKDiCQbl0Xy2V6F8pdGS5xtsahsCfro98 IsgFXnQqxKed9I9dlJVVqwtMW7fSO2fp774r -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Actalis CA per Firma Digitale Qualificata 2 Issuer OU: Certification Service Provider Issuer O: Actalis S.p.A./03358520967 Issuer C: IT Subject CN: Actalis CA per Firma Digitale Qualificata 2 Subject OU: Certification Service Provider Subject O: Actalis S.p.A./03358520967 Subject C: IT Valid from: Wed Mar 06 11:56:37 CET 2013 ITALIA (ITALY) - Trusted List ID: ID100001 Page 95 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Mon Mar 06 11:56:37 CET 2023 Public Key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asic Constraints IsCA: true Subject Key Identifier AC:0D:84:B9:FC:97:EE:3E:9D:F0:07:0B:80:A9:55:66:44:37:90:40 Certificate Policies Policy OID: 1.3.159.1.1.1 CPS pointer: https://portal.actalis.it/Info/infoPolicy_html CRL Distribution Points ldap://ldap.actalis.it/ou%3dActalis%20CA%20per%20Firma%20Digitale%20Qualificata%202,o%3 DCNIPA?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: AC:C7:35:59:34:1C:E7:19:47:CC:EE:9C:67:70:42:54:8B:F1:BA:C4:4E:B7:BA:61:FC:A8:41:13:29: 34:24:D9 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2013-03-06T11:56:37Z 3.39.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2013-03-06T11:56:37Z Page 96 ETSI 2014 - TSL HR - PDF/A-1b generator 4 - TSP: Aruba Posta Elettronica Certificata S.p.A. TSP Name Name [ en ] Aruba Posta Elettronica Certificata S.p.A. Name [ it ] Aruba Posta Elettronica Certificata S.p.A. Name [ en ] ArubaPEC S.p.A. Name [ it ] ArubaPEC S.p.A. Name [ en ] VATIT-01879020517 Name [ it ] VATIT-01879020517 Street Address [ en ] via sergio ramelli 8 Locality [ en ] arezzo Postal Code [ en ] 52100 Country Name [ en ] IT Street Address [ it ] via sergio ramelli 8 Locality [ it ] arezzo Postal Code [ it ] 52100 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.pec.it/en/information.html URI mailto:[email protected] TSP Information URI URI [ en ] http://www.pec.it/en/information.html URI [ it ] https://ca.arubapec.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 97 ETSI 2014 - TSL HR - PDF/A-1b generator 4.1 - Service : CN=ArubaPEC S.p.A. NG CA 1,OU=Certification Authority,O=ArubaPEC S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=ArubaPEC S.p.A. NG CA 1,OU=Certification Authority,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 122513197145194779407676928306765774778 X509 Certificate -----BEGIN CERTIFICATE----MIIE9TCCA92gAwIBAgIQXCsu+Z+oDx3Dp2/xmgo/ujANBgkqhkiG9w0BAQUFADBrMQswCQYDVQQG EwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEuMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0eTEgMB4GA1UEAwwXQXJ1YmFQRUMgUy5wLkEuIE5HIENBIDEwHhcNMDcxMjEzMDAwMDAw WhcNMTYxMjEyMjM1OTU5WjBrMQswCQYDVQQGEwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEu MSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEgMB4GA1UEAwwXQXJ1YmFQRUMgUy5w LkEuIE5HIENBIDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyu246zCLynZDHAfGf beg1Wxxb+yEnfOvb8ycY6dvg82KetdkZy4eGYLi5vpjqlokQAocgMF1iyPcebUgTONIeP6LwlhIl QYX2Fsf3pfDLrCkNtta136/bVZGV8xGlrvuAQtwKYx+AH/JUbiOdc0YtpGiSbjyYYquv3nhEYjyU HYg1wiwnh8UXfrT4WFNVcBOobr12uKgFXf2rWDP/Vi7ELvkVNofyrSHeuvEhSzpswMQPHVuAhOXf rSJJ2jHjO/q+dX5NE/x/R22poJl1vDb3juB4gwa+spot2osV6FWGd9ndvq371t6hkrIAQdqgA2i0 51bUHyoPvAGP92scLmjzAgMBAAGjggGTMIIBjzA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAGG I2h0dHA6Ly9vY3NwLmFydWJhcGVjLnRydXN0aXRhbGlhLml0MBIGA1UdEwEB/wQIMAYBAf8CAQAw RgYDVR0gBD8wPTA7BgorBgEEAYHoLQEBMC0wKwYIKwYBBQUHAgEWH2h0dHBzOi8vY2EuYXJ1YmFw ZWMuaXQvY3BzLmh0bWwwaQYDVR0fBGIwYDBeoFygWoZYaHR0cDovL29uc2l0ZWNybC5hcnViYXBl Yy50cnVzdGl0YWxpYS5pdC9BcnViYVBFQ1NwQUNlcnRpZmljYXRpb25BdXRob3JpdHkvTGF0ZXN0 Q1JMLmNybDAqBgNVHRIEIzAhpB8wHTEbMBkGA1UEAxMSR09WVlNQLUMxLTIwNDgtMS02MA4GA1Ud DwEB/wQEAwIBBjAqBgNVHREEIzAhpB8wHTEbMBkGA1UEAxMSR09WVlNQLUMxLTIwNDgtMS02MB0G A1UdDgQWBBQHrWQXRPYDHL/Yqa/G29NeMZ4J8DANBgkqhkiG9w0BAQUFAAOCAQEAfvgfvu76Q2Bk S1nh2mkby1uiLyn8XQ3R2EWW2UiGbfXo/WO+RaHNvev1m2NkLhCG+kBo0u391GVb3NNMtqSz/iV3 8pczi9QaROciLk4nh75IVza7agw/7XofW1XnK2D88hAJFTjJ43D9wdI3/U5TtAVjSfedvqbI7HhA 4PcTER5f9YeGMrT5VO2KrQmkSKZ8gXaNTkLNwm2WTu4h4tAv+GUMLX0abTQup5N7g2fnb8G7X7xM u8VEYAFiRtE4lWKf3rrOMdAxAv/A8tg1TFdahBdepUFPl4fUnaeNNFYOOJ9ri5yVlD6SVWGp/j+f oPO56QyTkZt4cs5d/7pkN++l6Q== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ArubaPEC S.p.A. NG CA 1 Issuer OU: Certification Authority Issuer O: ArubaPEC S.p.A. Issuer C: IT Subject CN: ArubaPEC S.p.A. NG CA 1 Subject OU: Certification Authority Subject O: ArubaPEC S.p.A. Subject C: IT Valid from: Thu Dec 13 01:00:00 CET 2007 Valid to: Tue Dec 13 00:59:59 CET 2016 ITALIA (ITALY) - Trusted List ID: ID100001 Page 98 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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uthority Info Access http://ocsp.arubapec.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html CRL Distribution Points http://onsitecrl.arubapec.trustitalia.it/ArubaPECSpACertificationAuthority/LatestCRL.crl Subject Key Identifier 07:AD:64:17:44:F6:03:1C:BF:D8:A9:AF:C6:DB:D3:5E:31:9E:09:F0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1E:E9:BC:2E:DA:15:99:7F:30:2D:23:A0:E2:F4:F6:85:69:CC:06:5C:B3:D7:D0:D6:F3:32:D0:FC:4 E:CA:65:A0 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2007-12-13T01:00:00Z 4.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 4.2 - Service : CN=ArubaPEC S.p.A. NG CA 2,OU=Certification AuthorityB,O=ArubaPEC S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=ArubaPEC S.p.A. NG CA 2,OU=Certification AuthorityB,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details ITALIA (ITALY) - Trusted List ID: ID100001 Page 99 ETSI 2014 - TSL HR - PDF/A-1b generator Version: 3 Serial Number: 117598089361208709525128660279841653850 X509 Certificate -----BEGIN CERTIFICATE----MIIE+DCCA+CgAwIBAgIQWHiRc5ymTq1oGnRZ1d4EWjANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQG EwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEuMSEwHwYDVQQLDBhDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0eUIxIDAeBgNVBAMMF0FydWJhUEVDIFMucC5BLiBORyBDQSAyMB4XDTA4MDgwNTAwMDAw MFoXDTI4MDgwNDIzNTk1OVowbDELMAkGA1UEBhMCSVQxGDAWBgNVBAoMD0FydWJhUEVDIFMucC5B LjEhMB8GA1UECwwYQ2VydGlmaWNhdGlvbiBBdXRob3JpdHlCMSAwHgYDVQQDDBdBcnViYVBFQyBT LnAuQS4gTkcgQ0EgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO/HEcx0kiFntBxR IySwU/wbb7384bnNwLjcOWqGKh/PFyjymeUiIMF3RgbvIg5O+B5V36COEq6FsvhW8v2yI6JJ6MMM H3EdDAV35Y6mPOnXetsn3+mtkMi+u4C3fZ8f3UsmOL+S7dxtvOqaax7FSURvNvPeTjQ/b8PKDgdL zR/Zn8bBH4IXCFsvPAHoQP9awWrzojwPwhWwHB5tn5sTHooPKzBULtRede4xSTp6HkCD3aqsj5Ve 8QkQSIJT78I+NmL8AeJMKC6ojvT50Xb42mDdPKccPkTP1zCX/+eYA4IOsx7nsrHkjdAVAjz5zLqF wzxGbtMNo+LmUhfpZyYwxRkCAwEAAaOCAZQwggGQMBIGA1UdEwEB/wQIMAYBAf8CAQAwagYDVR0f BGMwYTBfoF2gW4ZZaHR0cDovL29uc2l0ZWNybC5hcnViYXBlYy50cnVzdGl0YWxpYS5pdC9BcnVi YVBFQ1NwQUNlcnRpZmljYXRpb25BdXRob3JpdHlCL0xhdGVzdENSTC5jcmwwKgYDVR0SBCMwIaQf MB0xGzAZBgNVBAMTEkdPVlZTUC1DMS0yMDQ4LTEtODA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUH MAGGI2h0dHA6Ly9vY3NwLmFydWJhcGVjLnRydXN0aXRhbGlhLml0MEYGA1UdIAQ/MD0wOwYKKwYB BAGB6C0BATAtMCsGCCsGAQUFBwIBFh9odHRwczovL2NhLmFydWJhcGVjLml0L2Nwcy5odG1sMA4G A1UdDwEB/wQEAwIBBjAqBgNVHREEIzAhpB8wHTEbMBkGA1UEAxMSR09WVlNQLUMxLTIwNDgtMS04 MB0GA1UdDgQWBBTy/2NAHBFC/czf8Vn2buiZhzFHeTANBgkqhkiG9w0BAQUFAAOCAQEAFMS2EmV3 8HiH+QsIOdtFelRlRuCySjX/q2qh6eXsbxxJhXvI+WQ8uLCFk+XjR8PMZHw9JAtk/YOYsZDhcJzB Yb/WZTmxb5Kdb9a66G6tt3H3GpEha4sPsTEUhIhXeEA13Bna7/tFbMQ+I072297w3hBOFe9pgLNe 8hkU3bSDBmq3EoB/U2DGCpG/al/rWr/xuR+WzrMyalfAEieX2zGas7exnSoYUVguU+RsZPA6twqp vuJqj51D5Qxhqdws1q08xiVloLwPtYRoaBpOK1OO+EbheaRYYfubK/ziIgX/gjWv9mhnxtAJgqom BNWPrQrvnwm7htuBClgQpKuL8vYx6g== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ArubaPEC S.p.A. NG CA 2 Issuer OU: Certification AuthorityB Issuer O: ArubaPEC S.p.A. Issuer C: IT Subject CN: ArubaPEC S.p.A. NG CA 2 Subject OU: Certification AuthorityB Subject O: ArubaPEC S.p.A. Subject C: IT Valid from: Tue Aug 05 02:00:00 CEST 2008 Valid to: Sat Aug 05 01:59:59 CEST 2028 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:EF:C7:11:CC:74:92:21:67:B4:1C:51:23:24:B0:53:FC:1B:6F:BD:FC:E1:B9:CD:C0:B8:DC:39:6A:86:2A:1F:CF:17:28: F2:99:E5:22:20:C1:77:46:06:EF:22:0E:4E:F8:1E:55:DF:A0:8E:12:AE:85:B2:F8:56:F2:FD:B2:23:A2:49:E8:C3:0C:1F:71:1D:0C:05:77:E5:8E:A6:3C:E9:D7:7A:DB:27:DF:E9:AD:90:C8:BE:BB:80:B7:7D:9F:1F:DD:4B:26:38: BF:92:ED:DC:6D:BC:EA:9A:6B:1E:C5:49:44:6F:36:F3:DE:4E:34:3F:6F:C3:CA:0E:07:4B:CD:1F:D9:9F:C6:C1:1F:82:17:08:5B:2F:3C:01:E8:40:FF:5A:C1:6A:F3:A2:3C:0F:C2:15:B0:1C:1E:6D:9F:9B:13:1E:8A:0F:2B:30:5 4:2E:D4:5E:75:EE:31:49:3A:7A:1E:40:83:DD:AA:AC:8F:95:5E:F1:09:10:48:82:53:EF:C2:3E:36:62:FC:01:E2:4C:28:2E:A8:8E:F4:F9:D1:76:F8:DA:60:DD:3C:A7:1C:3E:44:CF:D7:30:97:FF:E7:98:03:82:0E:B3:1E:E7:B2:B1 :E4:8D:D0:15:02:3C:F9:CC:BA:85:C3:3C:46:6E:D3:0D:A3:E2:E6:52:17:E9:67:26:30:C5:19:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 CRL Distribution Points http://onsitecrl.arubapec.trustitalia.it/ArubaPECSpACertificationAuthorityB/LatestCRL.crl Authority Info Access http://ocsp.arubapec.trustitalia.it Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html Subject Key Identifier F2:FF:63:40:1C:11:42:FD:CC:DF:F1:59:F6:6E:E8:99:87:31:47:79 Key Usage: keyCertSign - cRLSign ITALIA (ITALY) - Trusted List ID: ID100001 Page 100 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint algorithm: SHA-256 Thumbprint: 07:AF:D7:62:77:85:F2:D7:77:17:19:56:A1:16:73:E0:25:7C:A4:63:98:C5:42:A0:28:14:35:A3:ED:E 3:42:2A Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2008-08-05T02:00:00Z 4.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 4.3 - Service : CN=ArubaPEC per Arma dei Carabinieri CA 1,OU=ArubaPEC per Certification Authority Carabinieri 1,O=ArubaPEC S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=ArubaPEC per Arma dei Carabinieri CA 1,OU=ArubaPEC per Certification Authority Carabinieri 1,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 91021576165058812024624608316559022001 X509 Certificate -----BEGIN CERTIFICATE----MIIFYzCCBEugAwIBAgIQRHoeL33LaWoqgcUUNyFXsTANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UE BhMCSVQxGDAWBgNVBAoMD0FydWJhUEVDIFMucC5BLjE7MDkGA1UECwwyQXJ1YmFQRUMgcGVyIENl cnRpZmljYXRpb24gQXV0aG9yaXR5IENhcmFiaW5pZXJpIDExLzAtBgNVBAMMJkFydWJhUEVDIHBl ciBBcm1hIGRlaSBDYXJhYmluaWVyaSBDQSAxMB4XDTA5MDIyNzAwMDAwMFoXDTI5MDIyNzIzNTk1 OVowgZUxCzAJBgNVBAYTAklUMRgwFgYDVQQKDA9BcnViYVBFQyBTLnAuQS4xOzA5BgNVBAsMMkFy dWJhUEVDIHBlciBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBDYXJhYmluaWVyaSAxMS8wLQYDVQQD DCZBcnViYVBFQyBwZXIgQXJtYSBkZWkgQ2FyYWJpbmllcmkgQ0EgMTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALzOBbMK90UCuDlO9zYe42It+jf+CE2ReUTQ0xcDSN4S/XiZJeXcqhVJ Rji07ocgBFrB/S2Meao+lTbhmXLk+HQT8TOV2beU+5FYagl3KNPPjeqq64dVAgaV3RMlCjLURb1K 7/hSC1t2L/rPUH62J8LHKvMXlzTWgIhZWtm42xux6j4PYRtjqngP4cZMpuW8+Hk7HcLvLNSUFPzD ZVCjbS97eTfaFSYlozH7wUGQ6oVZofMQhDxfS0jPlGuJgKP3a9J8aWbK/mpMLfjkGENq2DgLeEG2 cyNLymcyST5pFGNRigPJQbLpKhsqrI2xscl9oQ0DnJRC5UFH64uznjW931UCAwEAAaOCAaswggGn MCoGA1UdEgQjMCGkHzAdMRswGQYDVQQDExJHT1ZWU1AtQzEtMjA0OC0xLTkwDgYDVR0PAQH/BAQD AgEGMCoGA1UdEQQjMCGkHzAdMRswGQYDVQQDExJHT1ZWU1AtQzEtMjA0OC0xLTkwHQYDVR0OBBYE FB3qorlMuJMlf+w/CCfecPKNf4MgMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cDov L29jc3AuYXJ1YmFwZWMudHJ1c3RpdGFsaWEuaXQwEgYDVR0TAQH/BAgwBgEB/wIBADBGBgNVHSAE PzA9MDsGCisGAQQBgegtAQEwLTArBggrBgEFBQcCARYfaHR0cHM6Ly9jYS5hcnViYXBlYy5pdC9j cHMuaHRtbDCBgAYDVR0fBHkwdzB1oHOgcYZvaHR0cDovL29uc2l0ZWNybC5hcnViYXBlYy50cnVz dGl0YWxpYS5pdC9BcnViYVBFQ1NwQUFydWJhUEVDcGVyQ2VydGlmaWNhdGlvbkF1dGhvcml0eUNh cmFiaW5pZXJpMS9MYXRlc3RDUkwuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQAmLMdH+Ej1C2ELEmFT 0RY9MNJqynU3ssakgTGASz75ooZ/WZfMoANdN1NESZxm5VLWzTQJT2nQoR8remceXZvD4RO9VoOM eMz2cERzd9J9StxWDFbsda5VOeq5vw+GJ7toWcxiwUWU0/k2MBt7G90PrCwsymePXCJ5sfpMUOuD v1d6eq20Is2yLp9WB2gZZ4mccmgSHOU1qZnxJsOpWIhyxluJynUUKILv9Ze0EYvs7nwgmjbDS1i+ Vzyjzv4R8I3hV9LadF0fov4oNf4ayCaECaVFz8Mv+Fet8CgpqcHJ43HLpwReFZ7ILtlc3HKL1PO5 RyzeTncZ4XDTgSUV+/4+ -----END CERTIFICATE----- Signature algorithm: ITALIA (ITALY) - Trusted List ID: ID100001 SHA1withRSA Page 101 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer CN: ArubaPEC per Arma dei Carabinieri CA 1 Issuer OU: ArubaPEC per Certification Authority Carabinieri 1 Issuer O: ArubaPEC S.p.A. Issuer C: IT Subject CN: ArubaPEC per Arma dei Carabinieri CA 1 Subject OU: ArubaPEC per Certification Authority Carabinieri 1 Subject O: ArubaPEC S.p.A. Subject C: IT Valid from: Fri Feb 27 01:00:00 CET 2009 Valid to: Wed Feb 28 00:59:59 CET 2029 Public Key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ubject Key Identifier 1D:EA:A2:B9:4C:B8:93:25:7F:EC:3F:08:27:DE:70:F2:8D:7F:83:20 Authority Info Access http://ocsp.arubapec.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html CRL Distribution Points http://onsitecrl.arubapec.trustitalia.it/ArubaPECSpAArubaPECperCertificationAuthorityCarabinieri1 /LatestCRL.crl Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: AC:93:16:02:B0:CD:E9:06:4A:95:A5:1D:C1:E2:4D:F2:9B:E6:A0:B4:A7:05:BC:EE:BB:B3:BD:8B :91:C7:53:2B Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2009-02-27T01:00:00Z Page 102 ETSI 2014 - TSL HR - PDF/A-1b generator 4.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 4.4 - Service : CN=ArubaPEC S.p.A. NG TSA 1,OU=Time Stamping Authority,O=ArubaPEC S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=ArubaPEC S.p.A. NG TSA 1,OU=Time Stamping Authority,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 25571970219310390395911476499628175222 X509 Certificate -----BEGIN CERTIFICATE----MIIEtTCCA52gAwIBAgIQEzz7eTU08z7cHscAcoAvdjANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQG EwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEuMSAwHgYDVQQLDBdUaW1lIFN0YW1waW5nIEF1 dGhvcml0eTEhMB8GA1UEAwwYQXJ1YmFQRUMgUy5wLkEuIE5HIFRTQSAxMB4XDTA3MTIxMzAwMDAw MFoXDTE2MTIxMjIzNTk1OVowbDELMAkGA1UEBhMCSVQxGDAWBgNVBAoMD0FydWJhUEVDIFMucC5B LjEgMB4GA1UECwwXVGltZSBTdGFtcGluZyBBdXRob3JpdHkxITAfBgNVBAMMGEFydWJhUEVDIFMu cC5BLiBORyBUU0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/fnWICWYNhOy6x Nu2AuDM8G5G8YXNfPkR6MAzNk2pdOwEmYBvMmICvfWBDyXF0XDr7RuIIsTQAdRJMxGVEhDeP/5vo k320ts0EVtSWdqCYUxin+4+R21NTmOXq5SOBK876irZqfGCVyUFsxcObxOx4YyJNlk6YCjFYgOcU eeT41vYNL54AfI9z8UFBR17gNDh1JwNns7bMGA6Vafv62IYu3v75SaryzkRHydFCy7eyFi21I/QV n3HPF4j9zgE4cet6uiDrM+PE5b9fREhwNaZr6LG0MTme4HWnx98m8U/uOfY/Afk+VRgdhRyWSim6 E5mZ0SaaxQHkkNGPYSk2Ok0CAwEAAaOCAVEwggFNMBIGA1UdEwEB/wQIMAYBAf8CAQAwRgYDVR0g BD8wPTA7BgorBgEEAYHoLQEBMC0wKwYIKwYBBQUHAgEWH2h0dHBzOi8vY2EuYXJ1YmFwZWMuaXQv Y3BzLmh0bWwwaAYDVR0fBGEwXzBdoFugWYZXaHR0cDovL29uc2l0ZWNybC5hcnViYXBlYy50cnVz dGl0YWxpYS5pdC9BcnViYVBFQ1NwQVRpbWVTdGFtcGluZ0F1dGhvcml0eS9MYXRlc3RDUkwuY3Js MCoGA1UdEgQjMCGkHzAdMRswGQYDVQQDExJHT1ZWU1AtQzEtMjA0OC0xLTUwDgYDVR0PAQH/BAQD AgEGMCoGA1UdEQQjMCGkHzAdMRswGQYDVQQDExJHT1ZWU1AtQzEtMjA0OC0xLTUwHQYDVR0OBBYE FMW/rOY55/r8K6pJwK3Bt81g5ytmMA0GCSqGSIb3DQEBBQUAA4IBAQB27Ffvh/Oua4RUlTvcpld3 mFS3ofS/Qtq6WmJA6V3PTTo+6RdZdGuH3KJE9mjqdQb9scWJHZGZ8wbdFw9jcV/hvxi9eP9ydwNj o4Q2eGfXcMd74/OAjdqKemapTUNVf1CDuZcoLraQ6o2dDM4yg5FQAscKXrBcLnRmh6s/QiM6TduF fD4a7KScGTlhd90RlKcwVb5nA+MFXIw5u4F7k7qqYAhJNBE+bpXZJVh4c+SgY2mbZQ/riEW6zidW xJlZgOo+YVp9nzrvZjEt0YfJqOT1HjMoqYHlLAf/q0cIWcmRJ4RUIr+LuMiH6ZpU9WK+LRouLT+O UIVWP418AYSVXuJZ -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ArubaPEC S.p.A. NG TSA 1 Issuer OU: Time Stamping Authority Issuer O: ArubaPEC S.p.A. Issuer C: IT Subject CN: ArubaPEC S.p.A. NG TSA 1 Subject OU: Time Stamping Authority Subject O: ArubaPEC S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 103 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Valid from: Thu Dec 13 01:00:00 CET 2007 Valid to: Tue Dec 13 00:59:59 CET 2016 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html CRL Distribution Points http://onsitecrl.arubapec.trustitalia.it/ArubaPECSpATimeStampingAuthority/LatestCRL.crl Subject Key Identifier C5:BF:AC:E6:39:E7:FA:FC:2B:AA:49:C0:AD:C1:B7:CD:60:E7:2B:66 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: DA:84:E8:9C:9B:65:8D:4D:36:77:A8:86:D1:08:08:FB:51:04:2B:57:61:1A:58:26:A9:47:B4:DD:F9: 08:76:B1 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2007-12-13T01:00:00Z 4.5 - Service : CN=ArubaPEC S.p.A. NG TSA 2,OU=Time Stamping AuthorityB,O=ArubaPEC S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=ArubaPEC S.p.A. NG TSA 2,OU=Time Stamping AuthorityB,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details ITALIA (ITALY) - Trusted List ID: ID100001 Page 104 ETSI 2014 - TSL HR - PDF/A-1b generator Version: 3 Serial Number: 8077942975114075506011440659380019554 X509 Certificate -----BEGIN CERTIFICATE----MIIEuDCCA6CgAwIBAgIQBhPBVoXTSassYCWL9N+hYjANBgkqhkiG9w0BAQUFADBtMQswCQYDVQQG EwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEuMSEwHwYDVQQLDBhUaW1lIFN0YW1waW5nIEF1 dGhvcml0eUIxITAfBgNVBAMMGEFydWJhUEVDIFMucC5BLiBORyBUU0EgMjAeFw0wODA4MDUwMDAw MDBaFw0yODA4MDQyMzU5NTlaMG0xCzAJBgNVBAYTAklUMRgwFgYDVQQKDA9BcnViYVBFQyBTLnAu QS4xITAfBgNVBAsMGFRpbWUgU3RhbXBpbmcgQXV0aG9yaXR5QjEhMB8GA1UEAwwYQXJ1YmFQRUMg Uy5wLkEuIE5HIFRTQSAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Mr1s/8fgM9 OtBCLJxc/o9+q7eXBQzDTyTQGHVJ7Z5Itu3jhtMpF+D2nmEud0U4zyrZay3SVHl/3b4mW08f6DQy hbUSaiWWp1rMML4QoojjMacS1EY+c/sx5Wa5I8T9SllMPdDIlPotNp5wlf22t9l6sLEP0CpHr+0z o4QR+Ht6M1Bk0zH6ybfdTZNCd0IOYGHz25g8PCv22hQdXfX7gfYrCZN2v4QBLbR99kVN+qfP9zm+ ctcAuApxX8ourDCln4yW2JoLwSocfEOHM5vwPNIRh2dx9Hk2MvaGQHfV4ZmQ6OLzkv4gqNz6HF80 lUOd/P2pAsHyipSVVzHNCuhVywIDAQABo4IBUjCCAU4wEgYDVR0TAQH/BAgwBgEB/wIBADBGBgNV HSAEPzA9MDsGCisGAQQBgegtAQEwLTArBggrBgEFBQcCARYfaHR0cHM6Ly9jYS5hcnViYXBlYy5p dC9jcHMuaHRtbDBpBgNVHR8EYjBgMF6gXKBahlhodHRwOi8vb25zaXRlY3JsLmFydWJhcGVjLnRy dXN0aXRhbGlhLml0L0FydWJhUEVDU3BBVGltZVN0YW1waW5nQXV0aG9yaXR5Qi9MYXRlc3RDUkwu Y3JsMCoGA1UdEgQjMCGkHzAdMRswGQYDVQQDExJHT1ZWU1AtQzEtMjA0OC0xLTcwDgYDVR0PAQH/ BAQDAgEGMCoGA1UdEQQjMCGkHzAdMRswGQYDVQQDExJHT1ZWU1AtQzEtMjA0OC0xLTcwHQYDVR0O BBYEFDwoVVmgGjK4d0shi6qrzPBclf6FMA0GCSqGSIb3DQEBBQUAA4IBAQCaqaJpCbvlDmWbfiO+ FgoqdxCxpqU/KvU2tzPcdsloCrnkUww+b1Xa1ta3nEZYu/0ccD59Gx13fUz2z6ENFWHoERKUxdQh jAv0wa4fkSJiWkhWe7wqU0KXApnayoPMnCu5T7H6sD5DnyX6QoxV2vNxTDVHg3+T5IphWTI3jGgk zPjfWmuz1xCux2l1CDbO29DD3S1sRV09nQfZACoDiCPJb9deSVa9jfsMMnPLUAbkJxOwkUWdX+xB N8ynUk5XO9mZGxRkWC5f2ZlWyJ9PQJ1h8Ad3BKq0GSsPuGxQwJQz/67I/plxns46fq9CU1SQVxIL xWW97UVcUBc2pNwuXzo9 -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ArubaPEC S.p.A. NG TSA 2 Issuer OU: Time Stamping AuthorityB Issuer O: ArubaPEC S.p.A. Issuer C: IT Subject CN: ArubaPEC S.p.A. NG TSA 2 Subject OU: Time Stamping AuthorityB Subject O: ArubaPEC S.p.A. Subject C: IT Valid from: Tue Aug 05 02:00:00 CEST 2008 Valid to: Sat Aug 05 01:59:59 CEST 2028 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html CRL Distribution Points http://onsitecrl.arubapec.trustitalia.it/ArubaPECSpATimeStampingAuthorityB/LatestCRL.crl Subject Key Identifier 3C:28:55:59:A0:1A:32:B8:77:4B:21:8B:AA:AB:CC:F0:5C:95:FE:85 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 105 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: F8:5D:1D:9C:DB:7A:3E:95:C7:53:1B:1E:38:E5:A4:5D:78:92:A6:97:A6:DF:28:0D:67:F7:45:1F:F1 :66:FB:83 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2008-08-05T02:00:00Z 4.6 - Service : CN=ArubaPEC S.p.A. NG CA 3,OU=Certification AuthorityC,O=ArubaPEC S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=ArubaPEC S.p.A. NG CA 3,OU=Certification AuthorityC,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 144457494512097250511053625489114437111 X509 Certificate -----BEGIN CERTIFICATE----MIIE+jCCA+KgAwIBAgIQbK2AXjA4PMWG8x+rL26V9zANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQG EwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEuMSEwHwYDVQQLDBhDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0eUMxIDAeBgNVBAMMF0FydWJhUEVDIFMucC5BLiBORyBDQSAzMB4XDTEwMTAyMjAwMDAw MFoXDTMwMTAyMjIzNTk1OVowbDELMAkGA1UEBhMCSVQxGDAWBgNVBAoMD0FydWJhUEVDIFMucC5B LjEhMB8GA1UECwwYQ2VydGlmaWNhdGlvbiBBdXRob3JpdHlDMSAwHgYDVQQDDBdBcnViYVBFQyBT LnAuQS4gTkcgQ0EgMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKtkY4EHG+Nh4VYL L4R5tvmX6J+AYlL2BPDUCLN92+zi9QMbsh84zbRE+om9KE8P67mST2mybhGTz6dzeK1BrQfSdKJ8 AGxePzqUq+uGHGULoy4A6ey4EyqTfxY+pGzjB7OVcuiwy7iV6k1YjshIsmNjTmYOAQepZMgBmxHP nR6IW9MsAOFBBQH/vJFQDeBts/rA6lbM/VsURwzr6XOqCzwJK/csKvuE/rAaRKY+IPzah8mou//y Ei4V401J1JYfPanbCJOWnIty9HaioUe5Fu2jw4UP7T5Cbw4lND1sP7HVhsVRDuTj3gF9ulJ7EBmc R/2THDZCozD76uwuTmkm4VsCAwEAAaOCAZYwggGSMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcw AYYjaHR0cDovL29jc3AuYXJ1YmFwZWMudHJ1c3RpdGFsaWEuaXQwEgYDVR0TAQH/BAgwBgEB/wIB ADBGBgNVHSAEPzA9MDsGCisGAQQBgegtAQEwLTArBggrBgEFBQcCARYfaHR0cHM6Ly9jYS5hcnVi YXBlYy5pdC9jcHMuaHRtbDBqBgNVHR8EYzBhMF+gXaBbhllodHRwOi8vb25zaXRlY3JsLmFydWJh cGVjLnRydXN0aXRhbGlhLml0L0FydWJhUEVDU3BBQ2VydGlmaWNhdGlvbkF1dGhvcml0eUMvTGF0 ZXN0Q1JMLmNybDArBgNVHRIEJDAipCAwHjEcMBoGA1UEAxMTR09WVlNQLUMxLTIwNDgtMS0xMDAO BgNVHQ8BAf8EBAMCAQYwKwYDVR0RBCQwIqQgMB4xHDAaBgNVBAMTE0dPVlZTUC1DMS0yMDQ4LTEt MTAwHQYDVR0OBBYEFPDARbG2NbTqXyn6gwNK3C/1s33oMA0GCSqGSIb3DQEBCwUAA4IBAQBRGwGy pquxMawPV6ZN5l/2eJdaaqgnYolin1PGXJUFRQy3k5FK0Fwk/90U/j/ue83cYdsRpPVpo17LOk7h CNSFk/W2SRVGvqaM77/cVpgFwm25Ab2x5sMxwJ9Uoouba00CDl2SiYgn9KN+Bd3LHrwtpO8IkzwS E7k0kKmDLdCZTyUOZPR8RKpwedjLJoiyXCtq9PKA3avI1R6N8yOxbK954+nSOsHfmGDP4wQi8PUJ IWBmdlpHNM669BLdLwj6lpCjNI6AuP4K5Jw1qkOmcccnVWxkk0r2qNu87AlVosHpKf6GjkJbJNWf BsgjRHGg6Pq3enAf8/7DfkoCyKUzI8zZ -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: ArubaPEC S.p.A. NG CA 3 Issuer OU: Certification AuthorityC Issuer O: ArubaPEC S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 106 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: ArubaPEC S.p.A. NG CA 3 Subject OU: Certification AuthorityC Subject O: ArubaPEC S.p.A. Subject C: IT Valid from: Fri Oct 22 02:00:00 CEST 2010 Valid to: Wed Oct 23 01:59:59 CEST 2030 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AB:64:63:81:07:1B:E3:61:E1:56:0B:2F:84:79:B6:F9:97:E8:9F:80:62:52:F6:04:F0:D4:08:B3:7D:DB:EC:E2:F5:03:1B: B2:1F:38:CD:B4:44:FA:89:BD:28:4F:0F:EB:B9:92:4F:69:B2:6E:11:93:CF:A7:73:78:AD:41:AD:07:D2:74:A2:7C:00:6C:5E:3F:3A:94:AB:EB:86:1C:65:0B:A3:2E:00:E9:EC:B8:13:2A:93:7F:16:3E:A4:6C:E3:07:B3:95:72:E8: B0:CB:B8:95:EA:4D:58:8E:C8:48:B2:63:63:4E:66:0E:01:07:A9:64:C8:01:9B:11:CF:9D:1E:88:5B:D3:2C:00:E1:41:05:01:FF:BC:91:50:0D:E0:6D:B3:FA:C0:EA:56:CC:FD:5B:14:47:0C:EB:E9:73:AA:0B:3C:09:2B:F7:2C:2A :FB:84:FE:B0:1A:44:A6:3E:20:FC:DA:87:C9:A8:BB:FF:F2:12:2E:15:E3:4D:49:D4:96:1F:3D:A9:DB:08:93:96:9C:8B:72:F4:76:A2:A1:47:B9:16:ED:A3:C3:85:0F:ED:3E:42:6F:0E:25:34:3D:6C:3F:B1:D5:86:C5:51:0E:E4:E3 :DE:01:7D:BA:52:7B:10:19:9C:47:FD:93:1C:36:42:A3:30:FB:EA:EC:2E:4E:69:26:E1:5B:02:03:01:00:01 Authority Info Access http://ocsp.arubapec.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html CRL Distribution Points http://onsitecrl.arubapec.trustitalia.it/ArubaPECSpACertificationAuthorityC/LatestCRL.crl Subject Key Identifier F0:C0:45:B1:B6:35:B4:EA:5F:29:FA:83:03:4A:DC:2F:F5:B3:7D:E8 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: DF:2D:8C:A1:0E:F9:88:42:3B:07:AD:FE:01:56:CD:43:F4:B0:2B:01:59:7E:E2:72:39:56:39:38:5C: C1:48:5A Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2010-10-22T02:00:00Z 4.6.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2010-10-22T02:00:00Z 4.7 - Service : CN=ArubaPEC per Regione Basilicata CA 1,OU=ArubaPEC per CA Regione Basilicata di Firma Qualificata,O=ArubaPEC S.p.A.,C=IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 107 ETSI 2014 - TSL HR - PDF/A-1b generator Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=ArubaPEC per Regione Basilicata CA 1,OU=ArubaPEC per CA Regione Basilicata di Firma Qualificata,O=ArubaPEC S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 39542510255769613478768389270449761362 X509 Certificate -----BEGIN CERTIFICATE----MIIFTzCCBDegAwIBAgIQHb+cRvYT405P52H8RTksUjANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UE BhMCSVQxGDAWBgNVBAoMD0FydWJhUEVDIFMucC5BLjFAMD4GA1UECww3QXJ1YmFQRUMgcGVyIENB IFJlZ2lvbmUgQmFzaWxpY2F0YSBkaSBGaXJtYSBRdWFsaWZpY2F0YTEtMCsGA1UEAwwkQXJ1YmFQ RUMgcGVyIFJlZ2lvbmUgQmFzaWxpY2F0YSBDQSAxMB4XDTEzMDMyMTAwMDAwMFoXDTMzMDMyMTIz NTk1OVowgZgxCzAJBgNVBAYTAklUMRgwFgYDVQQKDA9BcnViYVBFQyBTLnAuQS4xQDA+BgNVBAsM N0FydWJhUEVDIHBlciBDQSBSZWdpb25lIEJhc2lsaWNhdGEgZGkgRmlybWEgUXVhbGlmaWNhdGEx LTArBgNVBAMMJEFydWJhUEVDIHBlciBSZWdpb25lIEJhc2lsaWNhdGEgQ0EgMTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJtddwXyThub+kJimlnJnz7HiR3JbKzkxaixXFl/msz994Eq IJkoahjT5bqgN0oxvtzCsV7uSVAX/XVC0l7xDbdrZMdVaUmFEFeFx7SidHQ7uoDDdevERrXJVH2I jkbUpZzbw509jhfzGMkbSeLAXs5k8x4BbefdN+XSpeGnMA19TrEu/79Ph0gYP3kSCQl/nd+OY+D7 GOiaw0fA2hWQ5eQvB35WOaVCWTH2BPCeSTA7qW5CQPdhf9uuVG07AhppYy0dtk8jce4kuzsLBvIk f5AAdG/JtTYhPVjcx8W81iAyryaPTC1O7Wf+V7VtlBUNgRNEVR44JzgLPgaUgYHbYxkCAwEAAaOC AZEwggGNMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuYXJ1YmFwZWMu aXQwEgYDVR0TAQH/BAgwBgEB/wIBADBGBgNVHSAEPzA9MDsGCisGAQQBgegtAQEwLTArBggrBgEF BQcCARYfaHR0cHM6Ly9jYS5hcnViYXBlYy5pdC9jcHMuaHRtbDBxBgNVHR8EajBoMGagZKBihmBo dHRwOi8vY3JsLmFydWJhcGVjLml0L0FydWJhUEVDU3BBQXJ1YmFQRUNwZXJDQVJlZ2lvbmVCYXNp bGljYXRhZGlGaXJtYVF1YWxpZmljYXRhL0xhdGVzdENSTC5jcmwwKwYDVR0SBCQwIqQgMB4xHDAa BgNVBAMTE0dPVlZTUC1DMS0yMDQ4LTEtMTEwDgYDVR0PAQH/BAQDAgEGMCsGA1UdEQQkMCKkIDAe MRwwGgYDVQQDExNHT1ZWU1AtQzEtMjA0OC0xLTExMB0GA1UdDgQWBBTF2/BRaqBBP9GrPN0JVBhy Bcq0kzANBgkqhkiG9w0BAQsFAAOCAQEAYvq+pjbdv3ZAjiXKx/QYY5bkYuu+m0kQcX/U3hCuaKGS 2Uu0Lena1pNv38hcCowVUNY54EMzS+2GQ8OFAnTfeEAmVTolIn6rnmSLFRhM0A5En1tu/TMNx3tE pb4HM4zrWvFS3ex1hg2vuwRx35Ik7OltZ54sPhAnkJBu1Q7SNU1OxkOZOEvjP+CRk3U3pHvwO3Aq Vp2peI7DmgONdiAW1o3m1UiC/d1Lcx9mVUL0SroJd4zvhvAdq445hCVL1fkTqFVCXo09kWdLkZsD J2uSPGz2s3zR6k5ZBeT5ueobhGOe52So/7Q1QmzSd4i6lzPsrkgkmdwHYvG+b1sQWSK1Lw== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: ArubaPEC per Regione Basilicata CA 1 Issuer OU: ArubaPEC per CA Regione Basilicata di Firma Qualificata Issuer O: ArubaPEC S.p.A. Issuer C: IT Subject CN: ArubaPEC per Regione Basilicata CA 1 Subject OU: ArubaPEC per CA Regione Basilicata di Firma Qualificata Subject O: ArubaPEC S.p.A. Subject C: IT Valid from: Thu Mar 21 01:00:00 CET 2013 Valid to: Tue Mar 22 00:59:59 CET 2033 Public Key: ITALIA (ITALY) - Trusted List ID: ID100001 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:9B:5D:77:05:F2:4E:1B:9B:FA:42:62:9A:59:C9:9F:3E:C7:89:1D:C9:6C:AC:E4:C5:A8:B1:5C:59:7F:9A:CC:FD:F7:81 :2A:20:99:28:6A:18:D3:E5:BA:A0:37:4A:31:BE:DC:C2:B1:5E:EE:49:50:17:FD:75:42:D2:5E:F1:0D:B7:6B:64:C7:55:69:49:85:10:57:85:C7:B4:A2:74:74:3B:BA:80:C3:75:EB:C4:46:B5:C9:54:7D:88:8E:46:D4:A5:9C:DB:C3 :9D:3D:8E:17:F3:18:C9:1B:49:E2:C0:5E:CE:64:F3:1E:01:6D:E7:DD:37:E5:D2:A5:E1:A7:30:0D:7D:4E:B1:2E:FF:BF:4F:87:48:18:3F:79:12:09:09:7F:9D:DF:8E:63:E0:FB:18:E8:9A:C3:47:C0:DA:15:90:E5:E4:2F:07:7E:56:3 9:A5:42:59:31:F6:04:F0:9E:49:30:3B:A9:6E:42:40:F7:61:7F:DB:AE:54:6D:3B:02:1A:69:63:2D:1D:B6:4F:23:71:EE:24:BB:3B:0B:06:F2:24:7F:90:00:74:6F:C9:B5:36:21:3D:58:DC:C7:C5:BC:D6:20:32:AF:26:8F:4C:2D:4E: ED:67:FE:57:B5:6D:94:15:0D:81:13:44:55:1E:38:27:38:0B:3E:06:94:81:81:DB:63:19:02:03:01:00:01 Page 108 ETSI 2014 - TSL HR - PDF/A-1b generator Authority Info Access http://ocsp.arubapec.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.29741.1.1 CPS pointer: https://ca.arubapec.it/cps.html CRL Distribution Points http://crl.arubapec.it/ArubaPECSpAArubaPECperCARegioneBasilicatadiFirmaQualificata/LatestCR L.crl Subject Key Identifier C5:DB:F0:51:6A:A0:41:3F:D1:AB:3C:DD:09:54:18:72:05:CA:B4:93 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: A8:01:F6:77:A0:73:B9:61:E2:EE:B1:68:56:C1:A7:97:BE:FB:DD:4D:3C:24:34:AC:06:2B:39:2C:86 :76:EC:3F Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2013-03-21T01:00:00Z 4.7.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2013-03-21T01:00:00Z Page 109 ETSI 2014 - TSL HR - PDF/A-1b generator 5 - TSP: Lombardia Integrata S.p.A. Servizi Infotelematici per il Territorio TSP Name Name [ en ] Lombardia Integrata S.p.A. Servizi Infotelematici per il Territorio Name [ it ] Lombardia Integrata S.p.A. Servizi Infotelematici per il Territorio Name [ en ] LISIT S.p.A. Name [ it ] LISIT S.p.A. Name [ en ] VATIT-05017630152 Name [ it ] VATIT-05017630152 Street Address [ en ] via don minzoni, 24 Locality [ en ] milano Postal Code [ en ] 20158 Country Name [ en ] IT Street Address [ it ] via don minzoni, 24 Locality [ it ] milano Postal Code [ it ] 20158 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI mailto:[email protected] URI http://www.lisit.it/firmadigitale/TSPInformationURI.php TSP Information URI URI [ en ] ITALIA (ITALY) - Trusted List ID: ID100001 http://www.lispa.it/CA/TSPInformationURI Page 110 ETSI 2014 - TSL HR - PDF/A-1b generator 5.1 - Service : CN=LISIT Servizio di certificazione per la Firma Digitale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=LISIT Servizio di certificazione per la Firma Digitale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFADCCA+igAwIBAgIBATANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFTATBgNVBAoT DExJU0lUIFMucC5BLjEjMCEGA1UECxMaU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUxPzA9BgNV BAMTNkxJU0lUIFNlcnZpemlvIGRpIGNlcnRpZmljYXppb25lIHBlciBsYSBGaXJtYSBEaWdpdGFs ZTAeFw0wNDA5MDIxNDIwMzJaFw0xNjA5MDIxNDE0NDRaMIGKMQswCQYDVQQGEwJJVDEVMBMGA1UE ChMMTElTSVQgUy5wLkEuMSMwIQYDVQQLExpTZXJ2aXppbyBkaSBjZXJ0aWZpY2F6aW9uZTE/MD0G A1UEAxM2TElTSVQgU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUgcGVyIGxhIEZpcm1hIERpZ2l0 YWxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d75u7jSgzYo2jQNSuBeCC+brVdG OM/ioGkrbrXgf+QPTgs2ikqjgEcRmsa/m+GLUXdGFEt+KPKhHehU+D9rqEG7JDVSmnHD/ylqevwn CZ/vf3vzWVdrplsyLVHqSQWp70naXByhrWA9dgShl+Btfh7D+b2wj3XlqN7PNtpV5ue4Qg9FVoyN Lh/GaWTyvtb1VG2+X37xfMdQMuzCSKM0DdgoFhPTayFFoL6e9875mvcBGOwl2j/oMBABBSl0/pto wUqIAAQKNhOLLvUpNSjNTWixrX+S3erOJdVUByPlVfXb9b8RSX5jINZvDYbd2mVOn9fcJqy3RnmZ kuegoRI8ewIDAQABo4IBbTCCAWkwEgYDVR0TAQH/BAgwBgEB/wIBADBHBgNVHSAEQDA+MDwGCSsG AQQBvG4BAjAvMC0GCCsGAQUFBwIBFiFodHRwOi8vd3d3Lmxpc2l0Lml0L2Zpcm1hZGlnaXRhbGUw gdoGA1UdHwSB0jCBzzCBzKCByaCBxoaBw2xkYXA6Ly9sZGFwLmNycy5sb21iYXJkaWEuaXQvY24l M2RMSVNJVCUyMFNlcnZpemlvJTIwZGklMjBjZXJ0aWZpY2F6aW9uZSUyMHBlciUyMGxhJTIwRmly bWElMjBEaWdpdGFsZSxvdSUzZFNlcnZpemlvJTIwZGklMjBjZXJ0aWZpY2F6aW9uZSxvJTNkTElT SVQlMjBTLnAuQS4sYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZTAOBgNVHQ8B Af8EBAMCAQYwHQYDVR0OBBYEFFBgwoOLec2rcgS9mAT2XdXkHH7RMA0GCSqGSIb3DQEBBQUAA4IB AQAPgNtoE5g6WfYjjG6nNLJ+5QcUSAgmFbKrErL4H6s9jK8fN7s0XqIFA8C2HSouQvLvb0UD0RUO TzS3SmR3WbEW/HVxZaBsVdsMMu3UrsoIttGM2SggTB/kUK/5MHL3s6DiMX/xq+ZeFFYzEjtQD/CF DflwXgf1c/AXjkfFE0cKNydd8/e5Kvz5eXKk6ylUGU5t/IAUeb+rckvIa2RrQcczVGOdsH4DV8Mp thneOyjLEdyg07WVfB8GFGaXqOgLAe3to7695bUfTEd6cv8gA6TD1iM4juKcBxggXEyQaC5dmYdw p2p6r2CxZCDlSwdGzF2rzYzdB557QqWoMeFeD2rq -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: LISIT Servizio di certificazione per la Firma Digitale Issuer OU: Servizio di certificazione Issuer O: LISIT S.p.A. Issuer C: IT Subject CN: LISIT Servizio di certificazione per la Firma Digitale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Valid from: Thu Sep 02 16:20:32 CEST 2004 ITALIA (ITALY) - Trusted List ID: ID100001 Page 111 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Fri Sep 02 16:14:44 CEST 2016 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.7790.1.2 CPS pointer: http://www.lisit.it/firmadigitale CRL Distribution Points ldap://ldap.crs.lombardia.it/cn%3dLISIT%20Servizio%20di%20certificazione%20per%20la%20Fir ma%20Digitale,ou%3dServizio%20di%20certificazione,o%3dLISIT%20S.p.A.,c%3dIT?certificate RevocationList?base Subject Key Identifier 50:60:C2:83:8B:79:CD:AB:72:04:BD:98:04:F6:5D:D5:E4:1C:7E:D1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 3C:5B:8C:F7:AA:73:F1:6C:37:09:EC:0F:52:66:27:45:78:71:20:A6:5B:08:AB:72:A5:30:A8:15:7D: 2E:A7:C8 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2011-04-22T00:00:01Z 5.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 5.1.2 - Extension (critical): Qualifiers [QCWithSSCD] Qualifier type description [en] it is ensured by the trust service provider and controlled (supervision model) or audited (accreditation model) by the referenced Member State (respectively its Supervisory Body or Accreditation Body) that all Qualified Certificates issued under the service identified in "Service digital identity" and further identified by the filters information used to further identify under the "Sdi" identified trust service that precise set of Qualified Certificates for which this additional information is required with regards to the presence or absence of Secure Signature Creation Device (SSCD) support ARE supported by an SSCD (i.e. that that the private key associated with the public key in the certificate is stored in a Secure Signature Creation Device conformant with the applicable European legislation); [it] è garantito dal fornitore di servizi di fiducia e controllato (modello di supervisione) o controllati (modello di accreditamento) dello Stato membro di riferimento (rispettivamente il suo organismo di supervisione o di accreditamento) che tutti i certificati qualificati rilasciati sotto il servizio specificato in "Service digital identity" e ulteriormente identificato dalle informazioni dei filtri utilizzati per identificare ulteriormente sotto il "Sdi" Servizio fiducia identificato che insieme preciso di certificati qualificati per i quali è richiesto queste informazioni supplementari per quanto riguarda la presenza o l'assenza di Secure dispositivo Signature Creation (SSCD) sostegno sono supportati da un SSCD (ossia che la chiave privata associata alla chiave pubblica nel certificato viene memorizzato in un dispositivo di creazione di una firma sicura conforme con la legislazione europea applicabile); Qualifier http://uri.etsi.org/TrstSvc/TrustedList/SvcInfoExt/QCWithSSCD Criteria list assert=all ITALIA (ITALY) - Trusted List ID: ID100001 Page 112 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage [ nonRepudiation ] true [ en ] http://www.lispa.it/CA/TSPInformationURI [ en ] Lombardia Informatica S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale 5.1.3 - Extension (critical): TakenOverBy TakenOverBy URI TSP Name Name Scheme Operator Name Scheme Territory IT 5.1.4 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=LISIT Servizio di certificazione per la Firma Digitale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: LISIT Servizio di certificazione per la Firma Digitale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 113 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFADCCA+igAwIBAgIBATANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFTATBgNVBAoT DExJU0lUIFMucC5BLjEjMCEGA1UECxMaU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUxPzA9BgNV BAMTNkxJU0lUIFNlcnZpemlvIGRpIGNlcnRpZmljYXppb25lIHBlciBsYSBGaXJtYSBEaWdpdGFs ZTAeFw0wNDA5MDIxNDIwMzJaFw0xNjA5MDIxNDE0NDRaMIGKMQswCQYDVQQGEwJJVDEVMBMGA1UE ChMMTElTSVQgUy5wLkEuMSMwIQYDVQQLExpTZXJ2aXppbyBkaSBjZXJ0aWZpY2F6aW9uZTE/MD0G A1UEAxM2TElTSVQgU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUgcGVyIGxhIEZpcm1hIERpZ2l0 YWxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d75u7jSgzYo2jQNSuBeCC+brVdG OM/ioGkrbrXgf+QPTgs2ikqjgEcRmsa/m+GLUXdGFEt+KPKhHehU+D9rqEG7JDVSmnHD/ylqevwn CZ/vf3vzWVdrplsyLVHqSQWp70naXByhrWA9dgShl+Btfh7D+b2wj3XlqN7PNtpV5ue4Qg9FVoyN Lh/GaWTyvtb1VG2+X37xfMdQMuzCSKM0DdgoFhPTayFFoL6e9875mvcBGOwl2j/oMBABBSl0/pto wUqIAAQKNhOLLvUpNSjNTWixrX+S3erOJdVUByPlVfXb9b8RSX5jINZvDYbd2mVOn9fcJqy3RnmZ kuegoRI8ewIDAQABo4IBbTCCAWkwEgYDVR0TAQH/BAgwBgEB/wIBADBHBgNVHSAEQDA+MDwGCSsG AQQBvG4BAjAvMC0GCCsGAQUFBwIBFiFodHRwOi8vd3d3Lmxpc2l0Lml0L2Zpcm1hZGlnaXRhbGUw gdoGA1UdHwSB0jCBzzCBzKCByaCBxoaBw2xkYXA6Ly9sZGFwLmNycy5sb21iYXJkaWEuaXQvY24l M2RMSVNJVCUyMFNlcnZpemlvJTIwZGklMjBjZXJ0aWZpY2F6aW9uZSUyMHBlciUyMGxhJTIwRmly bWElMjBEaWdpdGFsZSxvdSUzZFNlcnZpemlvJTIwZGklMjBjZXJ0aWZpY2F6aW9uZSxvJTNkTElT SVQlMjBTLnAuQS4sYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZTAOBgNVHQ8B Af8EBAMCAQYwHQYDVR0OBBYEFFBgwoOLec2rcgS9mAT2XdXkHH7RMA0GCSqGSIb3DQEBBQUAA4IB AQAPgNtoE5g6WfYjjG6nNLJ+5QcUSAgmFbKrErL4H6s9jK8fN7s0XqIFA8C2HSouQvLvb0UD0RUO TzS3SmR3WbEW/HVxZaBsVdsMMu3UrsoIttGM2SggTB/kUK/5MHL3s6DiMX/xq+ZeFFYzEjtQD/CF DflwXgf1c/AXjkfFE0cKNydd8/e5Kvz5eXKk6ylUGU5t/IAUeb+rckvIa2RrQcczVGOdsH4DV8Mp thneOyjLEdyg07WVfB8GFGaXqOgLAe3to7695bUfTEd6cv8gA6TD1iM4juKcBxggXEyQaC5dmYdw p2p6r2CxZCDlSwdGzF2rzYzdB557QqWoMeFeD2rq -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: LISIT Servizio di certificazione per la Firma Digitale Issuer OU: Servizio di certificazione Issuer O: LISIT S.p.A. Issuer C: IT Subject CN: LISIT Servizio di certificazione per la Firma Digitale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Valid from: Thu Sep 02 16:20:32 CEST 2004 Valid to: Fri Sep 02 16:14:44 CEST 2016 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:D5:DE:F9:BB:B8:D2:83:36:28:DA:34:0D:4A:E0:5E:08:2F:9B:AD:57:46:38:CF:E2:A0:69:2B:6E:B5:E0:7F:E4:0F:4E: 0B:36:8A:4A:A3:80:47:11:9A:C6:BF:9B:E1:8B:51:77:46:14:4B:7E:28:F2:A1:1D:E8:54:F8:3F:6B:A8:41:BB:24:35:52:9A:71:C3:FF:29:6A:7A:FC:27:09:9F:EF:7F:7B:F3:59:57:6B:A6:5B:32:2D:51:EA:49:05:A9:EF:49:DA:5 C:1C:A1:AD:60:3D:76:04:A1:97:E0:6D:7E:1E:C3:F9:BD:B0:8F:75:E5:A8:DE:CF:36:DA:55:E6:E7:B8:42:0F:45:56:8C:8D:2E:1F:C6:69:64:F2:BE:D6:F5:54:6D:BE:5F:7E:F1:7C:C7:50:32:EC:C2:48:A3:34:0D:D8:28:16:13: D3:6B:21:45:A0:BE:9E:F7:CE:F9:9A:F7:01:18:EC:25:DA:3F:E8:30:10:01:05:29:74:FE:9B:68:C1:4A:88:00:04:0A:36:13:8B:2E:F5:29:35:28:CD:4D:68:B1:AD:7F:92:DD:EA:CE:25:D5:54:07:23:E5:55:F5:DB:F5:BF:11:49:7 E:63:20:D6:6F:0D:86:DD:DA:65:4E:9F:D7:DC:26:AC:B7:46:79:99:92:E7:A0:A1:12:3C:7B:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.7790.1.2 CPS pointer: http://www.lisit.it/firmadigitale CRL Distribution Points ldap://ldap.crs.lombardia.it/cn%3dLISIT%20Servizio%20di%20certificazione%20per%20la%20Fir ma%20Digitale,ou%3dServizio%20di%20certificazione,o%3dLISIT%20S.p.A.,c%3dIT?certificate RevocationList?base Subject Key Identifier 50:60:C2:83:8B:79:CD:AB:72:04:BD:98:04:F6:5D:D5:E4:1C:7E:D1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 3C:5B:8C:F7:AA:73:F1:6C:37:09:EC:0F:52:66:27:45:78:71:20:A6:5B:08:AB:72:A5:30:A8:15:7D: 2E:A7:C8 ITALIA (ITALY) - Trusted List ID: ID100001 Page 114 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2011-04-21T00:00:01Z 5.1.5 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=LISIT Servizio di certificazione per la Firma Digitale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: LISIT Servizio di certificazione per la Firma Digitale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFADCCA+igAwIBAgIBATANBgkqhkiG9w0BAQUFADCBijELMAkGA1UEBhMCSVQxFTATBgNVBAoT DExJU0lUIFMucC5BLjEjMCEGA1UECxMaU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUxPzA9BgNV BAMTNkxJU0lUIFNlcnZpemlvIGRpIGNlcnRpZmljYXppb25lIHBlciBsYSBGaXJtYSBEaWdpdGFs ZTAeFw0wNDA5MDIxNDIwMzJaFw0xNjA5MDIxNDE0NDRaMIGKMQswCQYDVQQGEwJJVDEVMBMGA1UE ChMMTElTSVQgUy5wLkEuMSMwIQYDVQQLExpTZXJ2aXppbyBkaSBjZXJ0aWZpY2F6aW9uZTE/MD0G A1UEAxM2TElTSVQgU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUgcGVyIGxhIEZpcm1hIERpZ2l0 YWxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d75u7jSgzYo2jQNSuBeCC+brVdG OM/ioGkrbrXgf+QPTgs2ikqjgEcRmsa/m+GLUXdGFEt+KPKhHehU+D9rqEG7JDVSmnHD/ylqevwn CZ/vf3vzWVdrplsyLVHqSQWp70naXByhrWA9dgShl+Btfh7D+b2wj3XlqN7PNtpV5ue4Qg9FVoyN Lh/GaWTyvtb1VG2+X37xfMdQMuzCSKM0DdgoFhPTayFFoL6e9875mvcBGOwl2j/oMBABBSl0/pto wUqIAAQKNhOLLvUpNSjNTWixrX+S3erOJdVUByPlVfXb9b8RSX5jINZvDYbd2mVOn9fcJqy3RnmZ kuegoRI8ewIDAQABo4IBbTCCAWkwEgYDVR0TAQH/BAgwBgEB/wIBADBHBgNVHSAEQDA+MDwGCSsG AQQBvG4BAjAvMC0GCCsGAQUFBwIBFiFodHRwOi8vd3d3Lmxpc2l0Lml0L2Zpcm1hZGlnaXRhbGUw gdoGA1UdHwSB0jCBzzCBzKCByaCBxoaBw2xkYXA6Ly9sZGFwLmNycy5sb21iYXJkaWEuaXQvY24l M2RMSVNJVCUyMFNlcnZpemlvJTIwZGklMjBjZXJ0aWZpY2F6aW9uZSUyMHBlciUyMGxhJTIwRmly bWElMjBEaWdpdGFsZSxvdSUzZFNlcnZpemlvJTIwZGklMjBjZXJ0aWZpY2F6aW9uZSxvJTNkTElT SVQlMjBTLnAuQS4sYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZTAOBgNVHQ8B Af8EBAMCAQYwHQYDVR0OBBYEFFBgwoOLec2rcgS9mAT2XdXkHH7RMA0GCSqGSIb3DQEBBQUAA4IB AQAPgNtoE5g6WfYjjG6nNLJ+5QcUSAgmFbKrErL4H6s9jK8fN7s0XqIFA8C2HSouQvLvb0UD0RUO TzS3SmR3WbEW/HVxZaBsVdsMMu3UrsoIttGM2SggTB/kUK/5MHL3s6DiMX/xq+ZeFFYzEjtQD/CF DflwXgf1c/AXjkfFE0cKNydd8/e5Kvz5eXKk6ylUGU5t/IAUeb+rckvIa2RrQcczVGOdsH4DV8Mp thneOyjLEdyg07WVfB8GFGaXqOgLAe3to7695bUfTEd6cv8gA6TD1iM4juKcBxggXEyQaC5dmYdw p2p6r2CxZCDlSwdGzF2rzYzdB557QqWoMeFeD2rq -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: LISIT Servizio di certificazione per la Firma Digitale Issuer OU: Servizio di certificazione Issuer O: LISIT S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 115 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: LISIT Servizio di certificazione per la Firma Digitale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Valid from: Thu Sep 02 16:20:32 CEST 2004 Valid to: Fri Sep 02 16:14:44 CEST 2016 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.7790.1.2 CPS pointer: http://www.lisit.it/firmadigitale CRL Distribution Points ldap://ldap.crs.lombardia.it/cn%3dLISIT%20Servizio%20di%20certificazione%20per%20la%20Fir ma%20Digitale,ou%3dServizio%20di%20certificazione,o%3dLISIT%20S.p.A.,c%3dIT?certificate RevocationList?base Subject Key Identifier 50:60:C2:83:8B:79:CD:AB:72:04:BD:98:04:F6:5D:D5:E4:1C:7E:D1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 3C:5B:8C:F7:AA:73:F1:6C:37:09:EC:0F:52:66:27:45:78:71:20:A6:5B:08:AB:72:A5:30:A8:15:7D: 2E:A7:C8 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-09-02T16:20:32Z 5.2 - Service : CN=LISIT Servizio di certificazione per la Marcatura Temporale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 116 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=LISIT Servizio di certificazione per la Marcatura Temporale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFDzCCA/egAwIBAgIBATANBgkqhkiG9w0BAQUFADCBjzELMAkGA1UEBhMCSVQxFTATBgNVBAoT DExJU0lUIFMucC5BLjEjMCEGA1UECxMaU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUxRDBCBgNV BAMTO0xJU0lUIFNlcnZpemlvIGRpIGNlcnRpZmljYXppb25lIHBlciBsYSBNYXJjYXR1cmEgVGVt cG9yYWxlMB4XDTA0MDkwMjE0NDg0OVoXDTE2MDkwMjE0NDcwMVowgY8xCzAJBgNVBAYTAklUMRUw EwYDVQQKEwxMSVNJVCBTLnAuQS4xIzAhBgNVBAsTGlNlcnZpemlvIGRpIGNlcnRpZmljYXppb25l MUQwQgYDVQQDEztMSVNJVCBTZXJ2aXppbyBkaSBjZXJ0aWZpY2F6aW9uZSBwZXIgbGEgTWFyY2F0 dXJhIFRlbXBvcmFsZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLCSdt1MYL+LVUa BuR9ygnBPIsOe/0UiqlssFFtuS5kuRemtKn57G52Rda5xlxSIro22UZGN1P9kkuJ6lwEhQuhqTc8 KLPH4qCIOHjDTD5nMJfzBErU4zrWA6acqwLzZISfVoG9sb0rqwp7M/g+jNSsXlgg2rt7/Aa02MpB TN2VZ4p7dSjr7eBHAiFPVkcjCFDmZ1FiiqrmXJwzNFB25qYjtHIrWUWuc2rlvfWMNwJ4XTRzv1hX ip8vHr3gtMYsOSCt5c+clHrta93dF6bpfvzd/xIAJes/G6T5iWkD3E4sEdT2H/XQslpI8rGtzTq3 HVRpyQA8G42kIMfTYIKcOC8CAwEAAaOCAXIwggFuMBIGA1UdEwEB/wQIMAYBAf8CAQAwRwYDVR0g BEAwPjA8BgkrBgEEAbxuBAIwLzAtBggrBgEFBQcCARYhaHR0cDovL3d3dy5saXNpdC5pdC9maXJt YWRpZ2l0YWxlMIHfBgNVHR8EgdcwgdQwgdGggc6ggcuGgchsZGFwOi8vbGRhcC5jcnMubG9tYmFy ZGlhLml0L2NuJTNkTElTSVQlMjBTZXJ2aXppbyUyMGRpJTIwY2VydGlmaWNhemlvbmUlMjBwZXIl MjBsYSUyME1hcmNhdHVyYSUyMFRlbXBvcmFsZSxvdSUzZFNlcnZpemlvJTIwZGklMjBjZXJ0aWZp Y2F6aW9uZSxvJTNkTElTSVQlMjBTLnAuQS4sYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3Q/YmFzZTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFLUoZAgoN/LQOqrCON7vYWH9ZBYiMA0G CSqGSIb3DQEBBQUAA4IBAQAHF3W+6i9ZJ6FiprIlhzYEM5IQU9DamgEfG3jJjC6MbmhofcUJLz+v 3XS0QenYjoLB2sjMfUaiNjZ9NL1ea2jbJa3U/RUcR3O5SaFPMq4eVswrs46WX6CIcq8GG3LXEm/q tn9Fe6hal/xzE4GsLb/3uEgY78HC7tQQ99nFChr0eqx+/K81w1c0hNJMG+RnIl1sEGyM8A8Sag6r sh99xznwqKMyaTqhkIv8u0C/BRf+50aqwli4aughssO0/KUkg7ZJofHSB1WKlt7w533/vTMEQGLZ fn0MVnvefRsh3PdmDEHGjw+94WkRHnklLU0U/J8nsvt0XF3x6NhmyYv/LXZ4 -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: LISIT Servizio di certificazione per la Marcatura Temporale Issuer OU: Servizio di certificazione Issuer O: LISIT S.p.A. Issuer C: IT Subject CN: LISIT Servizio di certificazione per la Marcatura Temporale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Valid from: Thu Sep 02 16:48:49 CEST 2004 Valid to: Fri Sep 02 16:47:01 CEST 2016 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.7790.4.2 CPS pointer: http://www.lisit.it/firmadigitale ITALIA (ITALY) - Trusted List ID: ID100001 Page 117 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.crs.lombardia.it/cn%3dLISIT%20Servizio%20di%20certificazione%20per%20la%20Mar catura%20Temporale,ou%3dServizio%20di%20certificazione,o%3dLISIT%20S.p.A.,c%3dIT?certif icateRevocationList?base Subject Key Identifier B5:28:64:08:28:37:F2:D0:3A:AA:C2:38:DE:EF:61:61:FD:64:16:22 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 08:77:72:CE:F8:B3:11:C5:93:6D:6B:20:33:F6:9E:53:2F:D4:77:0E:E2:12:68:27:47:07:2B:CF:9C:B B:7D:C6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2011-04-21T00:00:01Z 5.2.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.lispa.it/CA/TSPInformationURI [ en ] Lombardia Informatica S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Scheme Territory IT 5.2.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=LISIT Servizio di certificazione per la Marcatura Temporale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 118 ETSI 2014 - TSL HR - PDF/A-1b generator X509SubjectName Subject CN: LISIT Servizio di certificazione per la Marcatura Temporale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFDzCCA/egAwIBAgIBATANBgkqhkiG9w0BAQUFADCBjzELMAkGA1UEBhMCSVQxFTATBgNVBAoT DExJU0lUIFMucC5BLjEjMCEGA1UECxMaU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUxRDBCBgNV BAMTO0xJU0lUIFNlcnZpemlvIGRpIGNlcnRpZmljYXppb25lIHBlciBsYSBNYXJjYXR1cmEgVGVt cG9yYWxlMB4XDTA0MDkwMjE0NDg0OVoXDTE2MDkwMjE0NDcwMVowgY8xCzAJBgNVBAYTAklUMRUw EwYDVQQKEwxMSVNJVCBTLnAuQS4xIzAhBgNVBAsTGlNlcnZpemlvIGRpIGNlcnRpZmljYXppb25l MUQwQgYDVQQDEztMSVNJVCBTZXJ2aXppbyBkaSBjZXJ0aWZpY2F6aW9uZSBwZXIgbGEgTWFyY2F0 dXJhIFRlbXBvcmFsZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLCSdt1MYL+LVUa BuR9ygnBPIsOe/0UiqlssFFtuS5kuRemtKn57G52Rda5xlxSIro22UZGN1P9kkuJ6lwEhQuhqTc8 KLPH4qCIOHjDTD5nMJfzBErU4zrWA6acqwLzZISfVoG9sb0rqwp7M/g+jNSsXlgg2rt7/Aa02MpB TN2VZ4p7dSjr7eBHAiFPVkcjCFDmZ1FiiqrmXJwzNFB25qYjtHIrWUWuc2rlvfWMNwJ4XTRzv1hX ip8vHr3gtMYsOSCt5c+clHrta93dF6bpfvzd/xIAJes/G6T5iWkD3E4sEdT2H/XQslpI8rGtzTq3 HVRpyQA8G42kIMfTYIKcOC8CAwEAAaOCAXIwggFuMBIGA1UdEwEB/wQIMAYBAf8CAQAwRwYDVR0g BEAwPjA8BgkrBgEEAbxuBAIwLzAtBggrBgEFBQcCARYhaHR0cDovL3d3dy5saXNpdC5pdC9maXJt YWRpZ2l0YWxlMIHfBgNVHR8EgdcwgdQwgdGggc6ggcuGgchsZGFwOi8vbGRhcC5jcnMubG9tYmFy ZGlhLml0L2NuJTNkTElTSVQlMjBTZXJ2aXppbyUyMGRpJTIwY2VydGlmaWNhemlvbmUlMjBwZXIl MjBsYSUyME1hcmNhdHVyYSUyMFRlbXBvcmFsZSxvdSUzZFNlcnZpemlvJTIwZGklMjBjZXJ0aWZp Y2F6aW9uZSxvJTNkTElTSVQlMjBTLnAuQS4sYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3Q/YmFzZTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFLUoZAgoN/LQOqrCON7vYWH9ZBYiMA0G CSqGSIb3DQEBBQUAA4IBAQAHF3W+6i9ZJ6FiprIlhzYEM5IQU9DamgEfG3jJjC6MbmhofcUJLz+v 3XS0QenYjoLB2sjMfUaiNjZ9NL1ea2jbJa3U/RUcR3O5SaFPMq4eVswrs46WX6CIcq8GG3LXEm/q tn9Fe6hal/xzE4GsLb/3uEgY78HC7tQQ99nFChr0eqx+/K81w1c0hNJMG+RnIl1sEGyM8A8Sag6r sh99xznwqKMyaTqhkIv8u0C/BRf+50aqwli4aughssO0/KUkg7ZJofHSB1WKlt7w533/vTMEQGLZ fn0MVnvefRsh3PdmDEHGjw+94WkRHnklLU0U/J8nsvt0XF3x6NhmyYv/LXZ4 -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: LISIT Servizio di certificazione per la Marcatura Temporale Issuer OU: Servizio di certificazione Issuer O: LISIT S.p.A. Issuer C: IT Subject CN: LISIT Servizio di certificazione per la Marcatura Temporale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Valid from: Thu Sep 02 16:48:49 CEST 2004 Valid to: Fri Sep 02 16:47:01 CEST 2016 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true - Path length: 0 Page 119 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.6.1.4.1.7790.4.2 CPS pointer: http://www.lisit.it/firmadigitale CRL Distribution Points ldap://ldap.crs.lombardia.it/cn%3dLISIT%20Servizio%20di%20certificazione%20per%20la%20Mar catura%20Temporale,ou%3dServizio%20di%20certificazione,o%3dLISIT%20S.p.A.,c%3dIT?certif icateRevocationList?base Subject Key Identifier B5:28:64:08:28:37:F2:D0:3A:AA:C2:38:DE:EF:61:61:FD:64:16:22 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 08:77:72:CE:F8:B3:11:C5:93:6D:6B:20:33:F6:9E:53:2F:D4:77:0E:E2:12:68:27:47:07:2B:CF:9C:B B:7D:C6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2011-04-20T23:00:01Z 5.2.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=LISIT Servizio di certificazione per la Marcatura Temporale,OU=Servizio di certificazione,O=LISIT S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: LISIT Servizio di certificazione per la Marcatura Temporale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 120 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFDzCCA/egAwIBAgIBATANBgkqhkiG9w0BAQUFADCBjzELMAkGA1UEBhMCSVQxFTATBgNVBAoT DExJU0lUIFMucC5BLjEjMCEGA1UECxMaU2Vydml6aW8gZGkgY2VydGlmaWNhemlvbmUxRDBCBgNV BAMTO0xJU0lUIFNlcnZpemlvIGRpIGNlcnRpZmljYXppb25lIHBlciBsYSBNYXJjYXR1cmEgVGVt cG9yYWxlMB4XDTA0MDkwMjE0NDg0OVoXDTE2MDkwMjE0NDcwMVowgY8xCzAJBgNVBAYTAklUMRUw EwYDVQQKEwxMSVNJVCBTLnAuQS4xIzAhBgNVBAsTGlNlcnZpemlvIGRpIGNlcnRpZmljYXppb25l MUQwQgYDVQQDEztMSVNJVCBTZXJ2aXppbyBkaSBjZXJ0aWZpY2F6aW9uZSBwZXIgbGEgTWFyY2F0 dXJhIFRlbXBvcmFsZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLCSdt1MYL+LVUa BuR9ygnBPIsOe/0UiqlssFFtuS5kuRemtKn57G52Rda5xlxSIro22UZGN1P9kkuJ6lwEhQuhqTc8 KLPH4qCIOHjDTD5nMJfzBErU4zrWA6acqwLzZISfVoG9sb0rqwp7M/g+jNSsXlgg2rt7/Aa02MpB TN2VZ4p7dSjr7eBHAiFPVkcjCFDmZ1FiiqrmXJwzNFB25qYjtHIrWUWuc2rlvfWMNwJ4XTRzv1hX ip8vHr3gtMYsOSCt5c+clHrta93dF6bpfvzd/xIAJes/G6T5iWkD3E4sEdT2H/XQslpI8rGtzTq3 HVRpyQA8G42kIMfTYIKcOC8CAwEAAaOCAXIwggFuMBIGA1UdEwEB/wQIMAYBAf8CAQAwRwYDVR0g BEAwPjA8BgkrBgEEAbxuBAIwLzAtBggrBgEFBQcCARYhaHR0cDovL3d3dy5saXNpdC5pdC9maXJt YWRpZ2l0YWxlMIHfBgNVHR8EgdcwgdQwgdGggc6ggcuGgchsZGFwOi8vbGRhcC5jcnMubG9tYmFy ZGlhLml0L2NuJTNkTElTSVQlMjBTZXJ2aXppbyUyMGRpJTIwY2VydGlmaWNhemlvbmUlMjBwZXIl MjBsYSUyME1hcmNhdHVyYSUyMFRlbXBvcmFsZSxvdSUzZFNlcnZpemlvJTIwZGklMjBjZXJ0aWZp Y2F6aW9uZSxvJTNkTElTSVQlMjBTLnAuQS4sYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3Q/YmFzZTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFLUoZAgoN/LQOqrCON7vYWH9ZBYiMA0G CSqGSIb3DQEBBQUAA4IBAQAHF3W+6i9ZJ6FiprIlhzYEM5IQU9DamgEfG3jJjC6MbmhofcUJLz+v 3XS0QenYjoLB2sjMfUaiNjZ9NL1ea2jbJa3U/RUcR3O5SaFPMq4eVswrs46WX6CIcq8GG3LXEm/q tn9Fe6hal/xzE4GsLb/3uEgY78HC7tQQ99nFChr0eqx+/K81w1c0hNJMG+RnIl1sEGyM8A8Sag6r sh99xznwqKMyaTqhkIv8u0C/BRf+50aqwli4aughssO0/KUkg7ZJofHSB1WKlt7w533/vTMEQGLZ fn0MVnvefRsh3PdmDEHGjw+94WkRHnklLU0U/J8nsvt0XF3x6NhmyYv/LXZ4 -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: LISIT Servizio di certificazione per la Marcatura Temporale Issuer OU: Servizio di certificazione Issuer O: LISIT S.p.A. Issuer C: IT Subject CN: LISIT Servizio di certificazione per la Marcatura Temporale Subject OU: Servizio di certificazione Subject O: LISIT S.p.A. Subject C: IT Valid from: Thu Sep 02 16:48:49 CEST 2004 Valid to: Fri Sep 02 16:47:01 CEST 2016 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:B2:C2:49:DB:75:31:82:FE:2D:55:1A:06:E4:7D:CA:09:C1:3C:8B:0E:7B:FD:14:8A:A9:6C:B0:51:6D:B9:2E:64:B9:17: A6:B4:A9:F9:EC:6E:76:45:D6:B9:C6:5C:52:22:BA:36:D9:46:46:37:53:FD:92:4B:89:EA:5C:04:85:0B:A1:A9:37:3C:28:B3:C7:E2:A0:88:38:78:C3:4C:3E:67:30:97:F3:04:4A:D4:E3:3A:D6:03:A6:9C:AB:02:F3:64:84:9F:56:8 1:BD:B1:BD:2B:AB:0A:7B:33:F8:3E:8C:D4:AC:5E:58:20:DA:BB:7B:FC:06:B4:D8:CA:41:4C:DD:95:67:8A:7B:75:28:EB:ED:E0:47:02:21:4F:56:47:23:08:50:E6:67:51:62:8A:AA:E6:5C:9C:33:34:50:76:E6:A6:23:B4:72:2B: 59:45:AE:73:6A:E5:BD:F5:8C:37:02:78:5D:34:73:BF:58:57:8A:9F:2F:1E:BD:E0:B4:C6:2C:39:20:AD:E5:CF:9C:94:7A:ED:6B:DD:DD:17:A6:E9:7E:FC:DD:FF:12:00:25:EB:3F:1B:A4:F9:89:69:03:DC:4E:2C:11:D4:F6:1F:F 5:D0:B2:5A:48:F2:B1:AD:CD:3A:B7:1D:54:69:C9:00:3C:1B:8D:A4:20:C7:D3:60:82:9C:38:2F:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.7790.4.2 CPS pointer: http://www.lisit.it/firmadigitale CRL Distribution Points ldap://ldap.crs.lombardia.it/cn%3dLISIT%20Servizio%20di%20certificazione%20per%20la%20Mar catura%20Temporale,ou%3dServizio%20di%20certificazione,o%3dLISIT%20S.p.A.,c%3dIT?certif icateRevocationList?base Subject Key Identifier B5:28:64:08:28:37:F2:D0:3A:AA:C2:38:DE:EF:61:61:FD:64:16:22 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 08:77:72:CE:F8:B3:11:C5:93:6D:6B:20:33:F6:9E:53:2F:D4:77:0E:E2:12:68:27:47:07:2B:CF:9C:B B:7D:C6 ITALIA (ITALY) - Trusted List ID: ID100001 Page 121 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-09-02T16:48:49Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 122 ETSI 2014 - TSL HR - PDF/A-1b generator 6 - TSP: Monte dei Paschi di Siena Bank S.p.A. TSP Name Name [ en ] Monte dei Paschi di Siena Bank S.p.A. Name [ it ] Banca Monte dei Paschi di Siena S.p.A. Name [ it ] Banca Monte dei Paschi di Siena Name [ en ] Monte dei Paschi di Siena Bank Name [ en ] VATIT-00884060526 Name [ it ] VATIT-00884060526 Street Address [ en ] piazza salimbeni 3 Locality [ en ] siena Postal Code [ en ] 53100 Country Name [ en ] IT Street Address [ it ] piazza salimbeni 3 Locality [ it ] siena Postal Code [ it ] 53100 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI mailto:[email protected] URI http://infinita.mps.it/Supporto/FirmaDigitale TSP Information URI URI [ en ] http://infinita.mps.it/Supporto/FirmaDigitale URI [ it ] http://infinita.mps.it/Supporto/FirmaDigitale ITALIA (ITALY) - Trusted List ID: ID100001 Page 123 ETSI 2014 - TSL HR - PDF/A-1b generator 6.1 - Service (supervisionceased): CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFhjCCBG6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJVDEvMC0GA1UECgwm QmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xKTAnBgNVBAMMIE1QUyBSb290 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MDYwODA3NDc1NloXDTE3MDYwODA3NDc1Nlow aTELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSkwJwYDVQQDDCBNUFMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiwRQOLPHbrexAa7sVfLnD1pwsoRmekChb2ra74xVht xX9GxAnOWv0M9APKQUedvGckoeqUdNsHWrXqHqNN89bH+/axZ1h3fXOo+ju88DkukPzxYIFcZ0i3 iIBEVaOMf0KPBiQQe0v1VA8rWLsmCcVfESSV57YxiQ+WG0b3vYC9Y3P3jeus1D2pHg8joBiw5xTM hPDmyvY4isG49UJHImU32lV/u1LXLCoggRx1QHPAazCJs7L28ROToON8QX+UK+0KM59iJp+jlalO dmcU0gYEw0U220MgbuG0eOdsZhD1BSmECqzRuZNbUUlIDpIpibNHLuKUDuIauElpl36OC9UCAwEA AaOCAjcwggIzMA8GA1UdEwEB/wQFMAMBAf8wgdQGA1UdHwSBzDCByTCBnqCBm6CBmIaBlWxkYXA6 Ly9jcmwubXBzLml0L2NuJTNkTVBTJTIwUm9vdCUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHks byUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuLGMl M2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MCagJKAihiBodHRwOi8vY3JsLm1wcy5pdC9y ZXBvc2l0b3J5L2NybDCB2QYDVR0gBIHRMIHOMIHLBgsrBgEEAYGSVgEBBTCBuzCBlgYIKwYBBQUH AgIwgYkMgYZMJ3VzbyBkZWkgY2VydGlmaWNhdGkgZW1lc3NpIGRhbGxhIEJhbmNhIE1vbnRlIGRl aSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuIMOoIHNvZ2dldHRvIGFsbGUgY29uZGl6aW9uaSBwcmVj aXNhdGUgbmVsIE1hbnVhbGUgT3BlcmF0aXZvLjAgBggrBgEFBQcCARYUaHR0cDovL2NhLm1wcy5p dC9jcHMwPgYIKwYBBQUHAQEEMjAwMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5tcHMuaXQvdmFs aWRhdGlvbi9vY3NwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoYf11iDApS+/mhM70TEvHU0Q KpEwDQYJKoZIhvcNAQEFBQADggEBALJuINXOPsCaCq+5qdCjSb9Xqwap1bCWcC7jBlBhm3JkX1/H Kog4P/CVoP1q5mEoju8XYdc9ooWOc67wlKrRIgPciq69htduIj7awjZI6FPzoBKkApt8RNTu95aU p3aYSKZysiMdRJXGupM+mBLafTNCd/Nj/p5BwV8cvtye/ekCijGSyg3ktY9t56N/NiIkTKB+E8I0 Woxx69fTzFdHJGPOxtuOsunpb3wWzrUiHO0rzxNTNNXGj+5nDo3tzPsp/WOdXNEH8bXNjA+JATFd cMWFdfvaM2N/3kz5qxOzO7Zz18uIQvL7gg3i6YxB49FBUWYXBcck+a3EIjzdZLKSSmA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Root Certification Authority Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Fri Jun 08 09:47:56 CEST 2007 Valid to: Thu Jun 08 09:47:56 CEST 2017 Public Key: ITALIA (ITALY) - Trusted List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age 124 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true CRL Distribution Points ldap://crl.mps.it/cn%3dMPS%20Root%20Certification%20Authority,o%3dBanca%20Monte%20dei %20Paschi%20di%20Siena%20S.p.A.,c%3dIT?certificateRevocationList http://crl.mps.it/repository/crl Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.5 CPS text: [L'uso dei certificati emessi dalla Banca Monte dei Paschi di Siena S.p.A. è soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: http://ca.mps.it/cps Authority Info Access http://ocsp.mps.it/validation/ocsp Subject Key Identifier A1:87:F5:D6:20:C0:A5:2F:BF:9A:13:3B:D1:31:2F:1D:4D:10:2A:91 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B0:39:43:C9:FB:EF:26:FD:78:FC:92:A1:09:9A:44:B7:DC:74:6C:B4:61:AA:DA:8B:C3:9A:5D:66: F0:C0:34:D5 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2015-08-31T21:59:59Z 6.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.1.2 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 125 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1 -----BEGIN CERTIFICATE----MIIFhjCCBG6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJVDEvMC0GA1UECgwm QmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xKTAnBgNVBAMMIE1QUyBSb290 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MDYwODA3NDc1NloXDTE3MDYwODA3NDc1Nlow aTELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSkwJwYDVQQDDCBNUFMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiwRQOLPHbrexAa7sVfLnD1pwsoRmekChb2ra74xVht xX9GxAnOWv0M9APKQUedvGckoeqUdNsHWrXqHqNN89bH+/axZ1h3fXOo+ju88DkukPzxYIFcZ0i3 iIBEVaOMf0KPBiQQe0v1VA8rWLsmCcVfESSV57YxiQ+WG0b3vYC9Y3P3jeus1D2pHg8joBiw5xTM hPDmyvY4isG49UJHImU32lV/u1LXLCoggRx1QHPAazCJs7L28ROToON8QX+UK+0KM59iJp+jlalO dmcU0gYEw0U220MgbuG0eOdsZhD1BSmECqzRuZNbUUlIDpIpibNHLuKUDuIauElpl36OC9UCAwEA AaOCAjcwggIzMA8GA1UdEwEB/wQFMAMBAf8wgdQGA1UdHwSBzDCByTCBnqCBm6CBmIaBlWxkYXA6 Ly9jcmwubXBzLml0L2NuJTNkTVBTJTIwUm9vdCUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHks byUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuLGMl M2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MCagJKAihiBodHRwOi8vY3JsLm1wcy5pdC9y ZXBvc2l0b3J5L2NybDCB2QYDVR0gBIHRMIHOMIHLBgsrBgEEAYGSVgEBBTCBuzCBlgYIKwYBBQUH AgIwgYkMgYZMJ3VzbyBkZWkgY2VydGlmaWNhdGkgZW1lc3NpIGRhbGxhIEJhbmNhIE1vbnRlIGRl aSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuIMOoIHNvZ2dldHRvIGFsbGUgY29uZGl6aW9uaSBwcmVj aXNhdGUgbmVsIE1hbnVhbGUgT3BlcmF0aXZvLjAgBggrBgEFBQcCARYUaHR0cDovL2NhLm1wcy5p dC9jcHMwPgYIKwYBBQUHAQEEMjAwMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5tcHMuaXQvdmFs aWRhdGlvbi9vY3NwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoYf11iDApS+/mhM70TEvHU0Q KpEwDQYJKoZIhvcNAQEFBQADggEBALJuINXOPsCaCq+5qdCjSb9Xqwap1bCWcC7jBlBhm3JkX1/H Kog4P/CVoP1q5mEoju8XYdc9ooWOc67wlKrRIgPciq69htduIj7awjZI6FPzoBKkApt8RNTu95aU p3aYSKZysiMdRJXGupM+mBLafTNCd/Nj/p5BwV8cvtye/ekCijGSyg3ktY9t56N/NiIkTKB+E8I0 Woxx69fTzFdHJGPOxtuOsunpb3wWzrUiHO0rzxNTNNXGj+5nDo3tzPsp/WOdXNEH8bXNjA+JATFd cMWFdfvaM2N/3kz5qxOzO7Zz18uIQvL7gg3i6YxB49FBUWYXBcck+a3EIjzdZLKSSmA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Root Certification Authority Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Fri Jun 08 09:47:56 CEST 2007 Valid to: Thu Jun 08 09:47:56 CEST 2017 Public Key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asic Constraints IsCA: true CRL Distribution Points ldap://crl.mps.it/cn%3dMPS%20Root%20Certification%20Authority,o%3dBanca%20Monte%20dei %20Paschi%20di%20Siena%20S.p.A.,c%3dIT?certificateRevocationList http://crl.mps.it/repository/crl Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.5 CPS text: [L'uso dei certificati emessi dalla Banca Monte dei Paschi di Siena S.p.A. è soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: http://ca.mps.it/cps Authority Info Access http://ocsp.mps.it/validation/ocsp Subject Key Identifier A1:87:F5:D6:20:C0:A5:2F:BF:9A:13:3B:D1:31:2F:1D:4D:10:2A:91 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 126 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: B0:39:43:C9:FB:EF:26:FD:78:FC:92:A1:09:9A:44:B7:DC:74:6C:B4:61:AA:DA:8B:C3:9A:5D:66: F0:C0:34:D5 X509SubjectName Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2015-08-31T21:59:58Z 6.1.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.1.3 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFhjCCBG6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJVDEvMC0GA1UECgwm QmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xKTAnBgNVBAMMIE1QUyBSb290 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MDYwODA3NDc1NloXDTE3MDYwODA3NDc1Nlow aTELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSkwJwYDVQQDDCBNUFMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiwRQOLPHbrexAa7sVfLnD1pwsoRmekChb2ra74xVht xX9GxAnOWv0M9APKQUedvGckoeqUdNsHWrXqHqNN89bH+/axZ1h3fXOo+ju88DkukPzxYIFcZ0i3 iIBEVaOMf0KPBiQQe0v1VA8rWLsmCcVfESSV57YxiQ+WG0b3vYC9Y3P3jeus1D2pHg8joBiw5xTM hPDmyvY4isG49UJHImU32lV/u1LXLCoggRx1QHPAazCJs7L28ROToON8QX+UK+0KM59iJp+jlalO dmcU0gYEw0U220MgbuG0eOdsZhD1BSmECqzRuZNbUUlIDpIpibNHLuKUDuIauElpl36OC9UCAwEA AaOCAjcwggIzMA8GA1UdEwEB/wQFMAMBAf8wgdQGA1UdHwSBzDCByTCBnqCBm6CBmIaBlWxkYXA6 Ly9jcmwubXBzLml0L2NuJTNkTVBTJTIwUm9vdCUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHks byUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuLGMl M2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MCagJKAihiBodHRwOi8vY3JsLm1wcy5pdC9y ZXBvc2l0b3J5L2NybDCB2QYDVR0gBIHRMIHOMIHLBgsrBgEEAYGSVgEBBTCBuzCBlgYIKwYBBQUH AgIwgYkMgYZMJ3VzbyBkZWkgY2VydGlmaWNhdGkgZW1lc3NpIGRhbGxhIEJhbmNhIE1vbnRlIGRl aSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuIMOoIHNvZ2dldHRvIGFsbGUgY29uZGl6aW9uaSBwcmVj aXNhdGUgbmVsIE1hbnVhbGUgT3BlcmF0aXZvLjAgBggrBgEFBQcCARYUaHR0cDovL2NhLm1wcy5p dC9jcHMwPgYIKwYBBQUHAQEEMjAwMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5tcHMuaXQvdmFs aWRhdGlvbi9vY3NwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoYf11iDApS+/mhM70TEvHU0Q KpEwDQYJKoZIhvcNAQEFBQADggEBALJuINXOPsCaCq+5qdCjSb9Xqwap1bCWcC7jBlBhm3JkX1/H Kog4P/CVoP1q5mEoju8XYdc9ooWOc67wlKrRIgPciq69htduIj7awjZI6FPzoBKkApt8RNTu95aU p3aYSKZysiMdRJXGupM+mBLafTNCd/Nj/p5BwV8cvtye/ekCijGSyg3ktY9t56N/NiIkTKB+E8I0 Woxx69fTzFdHJGPOxtuOsunpb3wWzrUiHO0rzxNTNNXGj+5nDo3tzPsp/WOdXNEH8bXNjA+JATFd cMWFdfvaM2N/3kz5qxOzO7Zz18uIQvL7gg3i6YxB49FBUWYXBcck+a3EIjzdZLKSSmA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Root Certification Authority ITALIA (ITALY) - Trusted List ID: ID100001 Page 127 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Fri Jun 08 09:47:56 CEST 2007 Valid to: Thu Jun 08 09:47:56 CEST 2017 Public Key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asic Constraints IsCA: true CRL Distribution Points ldap://crl.mps.it/cn%3dMPS%20Root%20Certification%20Authority,o%3dBanca%20Monte%20dei %20Paschi%20di%20Siena%20S.p.A.,c%3dIT?certificateRevocationList http://crl.mps.it/repository/crl Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.5 CPS text: [L'uso dei certificati emessi dalla Banca Monte dei Paschi di Siena S.p.A. è soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: http://ca.mps.it/cps Authority Info Access http://ocsp.mps.it/validation/ocsp Subject Key Identifier A1:87:F5:D6:20:C0:A5:2F:BF:9A:13:3B:D1:31:2F:1D:4D:10:2A:91 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B0:39:43:C9:FB:EF:26:FD:78:FC:92:A1:09:9A:44:B7:DC:74:6C:B4:61:AA:DA:8B:C3:9A:5D:66: F0:C0:34:D5 X509SubjectName Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2015-08-31T21:59:57Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 128 ETSI 2014 - TSL HR - PDF/A-1b generator 6.1.3.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.1.4 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFhjCCBG6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJVDEvMC0GA1UECgwm QmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xKTAnBgNVBAMMIE1QUyBSb290 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MDYwODA3NDc1NloXDTE3MDYwODA3NDc1Nlow aTELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSkwJwYDVQQDDCBNUFMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiwRQOLPHbrexAa7sVfLnD1pwsoRmekChb2ra74xVht xX9GxAnOWv0M9APKQUedvGckoeqUdNsHWrXqHqNN89bH+/axZ1h3fXOo+ju88DkukPzxYIFcZ0i3 iIBEVaOMf0KPBiQQe0v1VA8rWLsmCcVfESSV57YxiQ+WG0b3vYC9Y3P3jeus1D2pHg8joBiw5xTM hPDmyvY4isG49UJHImU32lV/u1LXLCoggRx1QHPAazCJs7L28ROToON8QX+UK+0KM59iJp+jlalO dmcU0gYEw0U220MgbuG0eOdsZhD1BSmECqzRuZNbUUlIDpIpibNHLuKUDuIauElpl36OC9UCAwEA AaOCAjcwggIzMA8GA1UdEwEB/wQFMAMBAf8wgdQGA1UdHwSBzDCByTCBnqCBm6CBmIaBlWxkYXA6 Ly9jcmwubXBzLml0L2NuJTNkTVBTJTIwUm9vdCUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHks byUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuLGMl M2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MCagJKAihiBodHRwOi8vY3JsLm1wcy5pdC9y ZXBvc2l0b3J5L2NybDCB2QYDVR0gBIHRMIHOMIHLBgsrBgEEAYGSVgEBBTCBuzCBlgYIKwYBBQUH AgIwgYkMgYZMJ3VzbyBkZWkgY2VydGlmaWNhdGkgZW1lc3NpIGRhbGxhIEJhbmNhIE1vbnRlIGRl aSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuIMOoIHNvZ2dldHRvIGFsbGUgY29uZGl6aW9uaSBwcmVj aXNhdGUgbmVsIE1hbnVhbGUgT3BlcmF0aXZvLjAgBggrBgEFBQcCARYUaHR0cDovL2NhLm1wcy5p dC9jcHMwPgYIKwYBBQUHAQEEMjAwMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5tcHMuaXQvdmFs aWRhdGlvbi9vY3NwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoYf11iDApS+/mhM70TEvHU0Q KpEwDQYJKoZIhvcNAQEFBQADggEBALJuINXOPsCaCq+5qdCjSb9Xqwap1bCWcC7jBlBhm3JkX1/H Kog4P/CVoP1q5mEoju8XYdc9ooWOc67wlKrRIgPciq69htduIj7awjZI6FPzoBKkApt8RNTu95aU p3aYSKZysiMdRJXGupM+mBLafTNCd/Nj/p5BwV8cvtye/ekCijGSyg3ktY9t56N/NiIkTKB+E8I0 Woxx69fTzFdHJGPOxtuOsunpb3wWzrUiHO0rzxNTNNXGj+5nDo3tzPsp/WOdXNEH8bXNjA+JATFd cMWFdfvaM2N/3kz5qxOzO7Zz18uIQvL7gg3i6YxB49FBUWYXBcck+a3EIjzdZLKSSmA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Root Certification Authority Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Fri Jun 08 09:47:56 CEST 2007 Valid to: Thu Jun 08 09:47:56 CEST 2017 Public Key: ITALIA (ITALY) - Trusted List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age 129 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true CRL Distribution Points ldap://crl.mps.it/cn%3dMPS%20Root%20Certification%20Authority,o%3dBanca%20Monte%20dei %20Paschi%20di%20Siena%20S.p.A.,c%3dIT?certificateRevocationList http://crl.mps.it/repository/crl Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.5 CPS text: [L'uso dei certificati emessi dalla Banca Monte dei Paschi di Siena S.p.A. è soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: http://ca.mps.it/cps Authority Info Access http://ocsp.mps.it/validation/ocsp Subject Key Identifier A1:87:F5:D6:20:C0:A5:2F:BF:9A:13:3B:D1:31:2F:1D:4D:10:2A:91 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B0:39:43:C9:FB:EF:26:FD:78:FC:92:A1:09:9A:44:B7:DC:74:6C:B4:61:AA:DA:8B:C3:9A:5D:66: F0:C0:34:D5 X509SubjectName Subject CN: MPS Root Certification Authority Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2009-12-03T00:00:00Z 6.1.4.3 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.2 - Service (supervisionceased): CN=MPS Production Identrus Certification Authority,OU=MPS Identrus Infrastructure,O=Banca Monte dei Paschi di Siena S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. ITALIA (ITALY) - Trusted List ID: ID100001 Page 130 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] CN=MPS Production Identrus Certification Authority,OU=MPS Identrus Infrastructure,O=Banca Monte dei Paschi di Siena S.p.A. Service digital identities Certificate fields details Version: 3 Serial Number: 1145 X509 Certificate -----BEGIN CERTIFICATE----MIIFAzCCA+ugAwIBAgICBHkwDQYJKoZIhvcNAQEFBQAwgZExLzAtBgNVBAoTJkJhbmNhIE1vbnRl IGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRydXMgSW5mcmFz dHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTA0MTExMDEzNDQ1NloXDTExMDEyNjAyNDk1MlowgZExLzAtBgNVBAoTJkJh bmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRy dXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30e0xuPY T16XfHpIju+CMM/b/PHQ6kbxKJeQxIOyN9cE3zbYH6rqYZZA+WHWHoFILU/aDqBAcWKfsGDEE8fK Jip4lnOSAB3jCPSbaBDye0eyPusoL1nmY5Gs5yA002m6SY/DHzLUS54cTWsZR+OkVuAYakDChSxN uiYWBFes90AHaVZojBCEG3Ywueyc02ZzWOs8f+SV85xF/UmCRelNicdjM0ThhfA1a5JnjbcojXG6 BSRU8ODRuHElr09Jd8XvEMLeLBUYEnaOHNoICrQJP+zE9OKSGTwwwxItr8KiBD4pf8Y0JqiS4Hja SMCTiJH7baR3iTxok7i57xxhUDtKTQIDAQABo4IBYTCCAV0wDwYDVR0TAQH/BAUwAwEB/zA8BgNV HSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYBBQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3Bz MA4GA1UdDwEB/wQEAwIBBjCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFbGRhcDovL2xkYXAubXBz Lml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1 dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIw TW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuP2NlcnRpZmljYXRlUmV2 b2NhdGlvbkxpc3QwHQYDVR0OBBYEFOAri7IQbMZvs74RqWHYfJBkytQOMA0GCSqGSIb3DQEBBQUA A4IBAQDCvFRa3TLcpVjRBQwiqqxo/lkt8eMI3pyl5fUQ1vbjeg59vBqhUgANKZIOUP4kJ7qXia3/ 8XEy3Kn+QeKHca7mdhkw9yY9EtoQHbty1JVXNHERHcAuslrm6gvdyg5+Alntjh+WS56HpfJZ8Zw0 NcCR8Mz2YIhiwVLjR/VlBEdUsYQF6vavP2NuYSG96ZMYSI5E9PCit98HX43+1kFzUaWt6gP0Dexr PV2pkBf57M7xMobwA+5absxb1OfESbFCxVidOoglAajLkONDOk+CkGCELHLfFV1cDGl9rxsiV8q8 rY6XJaxM9N7weUnp9pJWlKK/EtOG1mFbNjh7AvGK7UCa -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Valid from: Wed Nov 10 14:44:56 CET 2004 Valid to: Wed Jan 26 03:49:52 CET 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ITALIA (ITALY) - Trusted List ID: ID100001 ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.?certificateRevocationList Page 131 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Key Identifier E0:2B:8B:B2:10:6C:C6:6F:B3:BE:11:A9:61:D8:7C:90:64:CA:D4:0E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4A:57:C3:D1:96:E3:19:EF:7A:FA:16:51:66:FF:19:08:B9:0E:6E:91:E8:36:42:6A:AC:0F:4C:FA:61: 3E:67:2C Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2015-08-31T21:59:59Z 6.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.2.2 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1145 X509 Certificate -----BEGIN CERTIFICATE----MIIFAzCCA+ugAwIBAgICBHkwDQYJKoZIhvcNAQEFBQAwgZExLzAtBgNVBAoTJkJhbmNhIE1vbnRl IGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRydXMgSW5mcmFz dHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTA0MTExMDEzNDQ1NloXDTExMDEyNjAyNDk1MlowgZExLzAtBgNVBAoTJkJh bmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRy dXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30e0xuPY T16XfHpIju+CMM/b/PHQ6kbxKJeQxIOyN9cE3zbYH6rqYZZA+WHWHoFILU/aDqBAcWKfsGDEE8fK Jip4lnOSAB3jCPSbaBDye0eyPusoL1nmY5Gs5yA002m6SY/DHzLUS54cTWsZR+OkVuAYakDChSxN uiYWBFes90AHaVZojBCEG3Ywueyc02ZzWOs8f+SV85xF/UmCRelNicdjM0ThhfA1a5JnjbcojXG6 BSRU8ODRuHElr09Jd8XvEMLeLBUYEnaOHNoICrQJP+zE9OKSGTwwwxItr8KiBD4pf8Y0JqiS4Hja SMCTiJH7baR3iTxok7i57xxhUDtKTQIDAQABo4IBYTCCAV0wDwYDVR0TAQH/BAUwAwEB/zA8BgNV HSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYBBQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3Bz MA4GA1UdDwEB/wQEAwIBBjCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFbGRhcDovL2xkYXAubXBz Lml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1 dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIw TW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuP2NlcnRpZmljYXRlUmV2 b2NhdGlvbkxpc3QwHQYDVR0OBBYEFOAri7IQbMZvs74RqWHYfJBkytQOMA0GCSqGSIb3DQEBBQUA A4IBAQDCvFRa3TLcpVjRBQwiqqxo/lkt8eMI3pyl5fUQ1vbjeg59vBqhUgANKZIOUP4kJ7qXia3/ 8XEy3Kn+QeKHca7mdhkw9yY9EtoQHbty1JVXNHERHcAuslrm6gvdyg5+Alntjh+WS56HpfJZ8Zw0 NcCR8Mz2YIhiwVLjR/VlBEdUsYQF6vavP2NuYSG96ZMYSI5E9PCit98HX43+1kFzUaWt6gP0Dexr PV2pkBf57M7xMobwA+5absxb1OfESbFCxVidOoglAajLkONDOk+CkGCELHLfFV1cDGl9rxsiV8q8 rY6XJaxM9N7weUnp9pJWlKK/EtOG1mFbNjh7AvGK7UCa -----END CERTIFICATE----- Signature algorithm: ITALIA (ITALY) - Trusted List ID: ID100001 SHA1withRSA Page 132 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Valid from: Wed Nov 10 14:44:56 CET 2004 Valid to: Wed Jan 26 03:49:52 CET 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.?certificateRevocationList Subject Key Identifier E0:2B:8B:B2:10:6C:C6:6F:B3:BE:11:A9:61:D8:7C:90:64:CA:D4:0E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4A:57:C3:D1:96:E3:19:EF:7A:FA:16:51:66:FF:19:08:B9:0E:6E:91:E8:36:42:6A:AC:0F:4C:FA:61: 3E:67:2C X509SubjectName Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2015-08-31T21:59:58Z 6.2.2.1 - Extension (not critical): expiredCertsRevocationInfo ITALIA (ITALY) - Trusted List ID: ID100001 Page 133 ETSI 2014 - TSL HR - PDF/A-1b generator dateTime 2009-12-03T00:00:00Z 6.2.3 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1145 X509 Certificate -----BEGIN CERTIFICATE----MIIFAzCCA+ugAwIBAgICBHkwDQYJKoZIhvcNAQEFBQAwgZExLzAtBgNVBAoTJkJhbmNhIE1vbnRl IGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRydXMgSW5mcmFz dHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTA0MTExMDEzNDQ1NloXDTExMDEyNjAyNDk1MlowgZExLzAtBgNVBAoTJkJh bmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRy dXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30e0xuPY T16XfHpIju+CMM/b/PHQ6kbxKJeQxIOyN9cE3zbYH6rqYZZA+WHWHoFILU/aDqBAcWKfsGDEE8fK Jip4lnOSAB3jCPSbaBDye0eyPusoL1nmY5Gs5yA002m6SY/DHzLUS54cTWsZR+OkVuAYakDChSxN uiYWBFes90AHaVZojBCEG3Ywueyc02ZzWOs8f+SV85xF/UmCRelNicdjM0ThhfA1a5JnjbcojXG6 BSRU8ODRuHElr09Jd8XvEMLeLBUYEnaOHNoICrQJP+zE9OKSGTwwwxItr8KiBD4pf8Y0JqiS4Hja SMCTiJH7baR3iTxok7i57xxhUDtKTQIDAQABo4IBYTCCAV0wDwYDVR0TAQH/BAUwAwEB/zA8BgNV HSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYBBQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3Bz MA4GA1UdDwEB/wQEAwIBBjCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFbGRhcDovL2xkYXAubXBz Lml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1 dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIw TW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuP2NlcnRpZmljYXRlUmV2 b2NhdGlvbkxpc3QwHQYDVR0OBBYEFOAri7IQbMZvs74RqWHYfJBkytQOMA0GCSqGSIb3DQEBBQUA A4IBAQDCvFRa3TLcpVjRBQwiqqxo/lkt8eMI3pyl5fUQ1vbjeg59vBqhUgANKZIOUP4kJ7qXia3/ 8XEy3Kn+QeKHca7mdhkw9yY9EtoQHbty1JVXNHERHcAuslrm6gvdyg5+Alntjh+WS56HpfJZ8Zw0 NcCR8Mz2YIhiwVLjR/VlBEdUsYQF6vavP2NuYSG96ZMYSI5E9PCit98HX43+1kFzUaWt6gP0Dexr PV2pkBf57M7xMobwA+5absxb1OfESbFCxVidOoglAajLkONDOk+CkGCELHLfFV1cDGl9rxsiV8q8 rY6XJaxM9N7weUnp9pJWlKK/EtOG1mFbNjh7AvGK7UCa -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Valid from: Wed Nov 10 14:44:56 CET 2004 Valid to: Wed Jan 26 03:49:52 CET 2011 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true Page 134 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.?certificateRevocationList Subject Key Identifier E0:2B:8B:B2:10:6C:C6:6F:B3:BE:11:A9:61:D8:7C:90:64:CA:D4:0E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4A:57:C3:D1:96:E3:19:EF:7A:FA:16:51:66:FF:19:08:B9:0E:6E:91:E8:36:42:6A:AC:0F:4C:FA:61: 3E:67:2C X509SubjectName Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2015-08-31T21:59:57Z 6.2.3.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.2.4 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1145 ITALIA (ITALY) - Trusted List ID: ID100001 Page 135 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFAzCCA+ugAwIBAgICBHkwDQYJKoZIhvcNAQEFBQAwgZExLzAtBgNVBAoTJkJhbmNhIE1vbnRl IGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRydXMgSW5mcmFz dHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTA0MTExMDEzNDQ1NloXDTExMDEyNjAyNDk1MlowgZExLzAtBgNVBAoTJkJh bmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEgUy5wLkEuMSQwIgYDVQQLExtNUFMgSWRlbnRy dXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMTL01QUyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30e0xuPY T16XfHpIju+CMM/b/PHQ6kbxKJeQxIOyN9cE3zbYH6rqYZZA+WHWHoFILU/aDqBAcWKfsGDEE8fK Jip4lnOSAB3jCPSbaBDye0eyPusoL1nmY5Gs5yA002m6SY/DHzLUS54cTWsZR+OkVuAYakDChSxN uiYWBFes90AHaVZojBCEG3Ywueyc02ZzWOs8f+SV85xF/UmCRelNicdjM0ThhfA1a5JnjbcojXG6 BSRU8ODRuHElr09Jd8XvEMLeLBUYEnaOHNoICrQJP+zE9OKSGTwwwxItr8KiBD4pf8Y0JqiS4Hja SMCTiJH7baR3iTxok7i57xxhUDtKTQIDAQABo4IBYTCCAV0wDwYDVR0TAQH/BAUwAwEB/zA8BgNV HSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYBBQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3Bz MA4GA1UdDwEB/wQEAwIBBjCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFbGRhcDovL2xkYXAubXBz Lml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1 dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIw TW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNpZW5hJTIwUy5wLkEuP2NlcnRpZmljYXRlUmV2 b2NhdGlvbkxpc3QwHQYDVR0OBBYEFOAri7IQbMZvs74RqWHYfJBkytQOMA0GCSqGSIb3DQEBBQUA A4IBAQDCvFRa3TLcpVjRBQwiqqxo/lkt8eMI3pyl5fUQ1vbjeg59vBqhUgANKZIOUP4kJ7qXia3/ 8XEy3Kn+QeKHca7mdhkw9yY9EtoQHbty1JVXNHERHcAuslrm6gvdyg5+Alntjh+WS56HpfJZ8Zw0 NcCR8Mz2YIhiwVLjR/VlBEdUsYQF6vavP2NuYSG96ZMYSI5E9PCit98HX43+1kFzUaWt6gP0Dexr PV2pkBf57M7xMobwA+5absxb1OfESbFCxVidOoglAajLkONDOk+CkGCELHLfFV1cDGl9rxsiV8q8 rY6XJaxM9N7weUnp9pJWlKK/EtOG1mFbNjh7AvGK7UCa -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Valid from: Wed Nov 10 14:44:56 CET 2004 Valid to: Wed Jan 26 03:49:52 CET 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.?certificateRevocationList Subject Key Identifier E0:2B:8B:B2:10:6C:C6:6F:B3:BE:11:A9:61:D8:7C:90:64:CA:D4:0E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4A:57:C3:D1:96:E3:19:EF:7A:FA:16:51:66:FF:19:08:B9:0E:6E:91:E8:36:42:6A:AC:0F:4C:FA:61: 3E:67:2C X509SubjectName Subject CN: ITALIA (ITALY) - Trusted List ID: ID100001 MPS Production Identrus Certification Authority Page 136 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2007-06-08T09:47:56Z 6.2.4.3 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.3 - Service (supervisionceased): CN=MPS Production Identrus Certification Authority,OU=MPS Identrus Infrastructure,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=MPS Production Identrus Certification Authority,OU=MPS Identrus Infrastructure,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 300305 X509 Certificate -----BEGIN CERTIFICATE----MIIFJTCCBA2gAwIBAgIDBJURMA0GCSqGSIb3DQEBBQUAMIGeMQswCQYDVQQGEwJJVDEvMC0GA1UE CgwmQmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xJDAiBgNVBAsMG01QUyBJ ZGVudHJ1cyBJbmZyYXN0cnVjdHVyZTE4MDYGA1UEAwwvTVBTIFByb2R1Y3Rpb24gSWRlbnRydXMg Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDg1OTQ0WhcNMTMxMjExMjIyMzMyWjCB njELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSQwIgYDVQQLDBtNUFMgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMML01Q UyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUvG8NJ5++ulyjroG8apyZ7LdFSCSOlHbOAe8k3VIZd3qGs kndSNiT2O2BX1aqMDDIkFxgJTXYDaKunS/L8oWgIAoTs47cPNvVVMATPSH9YIjRQ9TyV32fq0gl1 XEIw8rc2e8wW17JCGWma3/0DzwQs+4iMK5ZoI+XxTMbog61LoU64mKDwGbW3pLjzWPj52Wmjvj7w We+rw33ydwcyqYMz0dmcLK5TPMfknv6fim1CWfJV8uj79eaAx0LfbtKBr19T5ofPHyJsf/hU28wG jfFLMhoIQdlMg2nvd3qdHYfTBj3OLoOi9b+KCzQKrphLGXI/HByapXYvAyKVpkEZiQIDAQABo4IB aDCCAWQwDwYDVR0TAQH/BAUwAwEB/zA8BgNVHSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYB BQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3BzMA4GA1UdDwEB/wQEAwIBBjCB4wYDVR0fBIHbMIHY MIHVoIHSoIHPhoHMbGRhcDovL2xkYXAubXBzLml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElk ZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIw SW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNp ZW5hJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBSq EUvsgOCJ6s9Vrdoyj8YZ5TEUijANBgkqhkiG9w0BAQUFAAOCAQEAU4EiAwtVPvelfM6mxT9fRSJZ Dl7aQk6lqRuF3nFPNUSITBw1hhg9YFUIS6sYMefYc/adldc7CjHs6VR+4IByiHkdPdzmB0/u3AYx ZsrQIDCJDwaT+y4BgA324H3c3gR7D2dwG7kv/neRBm1B08QYZ2ZHM0W327/D5fCNSJIYsbl4Poxz j7aqj44pXEpOP3eDPNCUQc2XUmWk+HWxt3McwJYZXu4xhV0FC8hVndjLnlWWIk07e4yxrWU7YU50 KrsS85FNF5CwqZus83N88ko3TKED7EtA9n5ekdUbds1j+zAtvSKRWkqehAj89AowjrPFN6CxrJZk hagngL1xipaB9g== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure ITALIA (ITALY) - Trusted List ID: ID100001 Page 137 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Tue Feb 13 09:59:44 CET 2007 Valid to: Wed Dec 11 23:23:32 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.,c%3dIT?certificateRevocationList Subject Key Identifier AA:11:4B:EC:80:E0:89:EA:CF:55:AD:DA:32:8F:C6:19:E5:31:14:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2D:EC:AB:6D:5A:CD:9E:EF:DC:F8:89:E1:50:00:FF:EE:7D:D4:20:F8:7B:A5:81:05:60:95:66:44:2 9:34:62:AC Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2015-06-30T21:59:59Z 6.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 138 ETSI 2014 - TSL HR - PDF/A-1b generator 6.3.2 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 300305 X509 Certificate -----BEGIN CERTIFICATE----MIIFJTCCBA2gAwIBAgIDBJURMA0GCSqGSIb3DQEBBQUAMIGeMQswCQYDVQQGEwJJVDEvMC0GA1UE CgwmQmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xJDAiBgNVBAsMG01QUyBJ ZGVudHJ1cyBJbmZyYXN0cnVjdHVyZTE4MDYGA1UEAwwvTVBTIFByb2R1Y3Rpb24gSWRlbnRydXMg Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDg1OTQ0WhcNMTMxMjExMjIyMzMyWjCB njELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSQwIgYDVQQLDBtNUFMgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMML01Q UyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUvG8NJ5++ulyjroG8apyZ7LdFSCSOlHbOAe8k3VIZd3qGs kndSNiT2O2BX1aqMDDIkFxgJTXYDaKunS/L8oWgIAoTs47cPNvVVMATPSH9YIjRQ9TyV32fq0gl1 XEIw8rc2e8wW17JCGWma3/0DzwQs+4iMK5ZoI+XxTMbog61LoU64mKDwGbW3pLjzWPj52Wmjvj7w We+rw33ydwcyqYMz0dmcLK5TPMfknv6fim1CWfJV8uj79eaAx0LfbtKBr19T5ofPHyJsf/hU28wG jfFLMhoIQdlMg2nvd3qdHYfTBj3OLoOi9b+KCzQKrphLGXI/HByapXYvAyKVpkEZiQIDAQABo4IB aDCCAWQwDwYDVR0TAQH/BAUwAwEB/zA8BgNVHSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYB BQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3BzMA4GA1UdDwEB/wQEAwIBBjCB4wYDVR0fBIHbMIHY MIHVoIHSoIHPhoHMbGRhcDovL2xkYXAubXBzLml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElk ZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIw SW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNp ZW5hJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBSq EUvsgOCJ6s9Vrdoyj8YZ5TEUijANBgkqhkiG9w0BAQUFAAOCAQEAU4EiAwtVPvelfM6mxT9fRSJZ Dl7aQk6lqRuF3nFPNUSITBw1hhg9YFUIS6sYMefYc/adldc7CjHs6VR+4IByiHkdPdzmB0/u3AYx ZsrQIDCJDwaT+y4BgA324H3c3gR7D2dwG7kv/neRBm1B08QYZ2ZHM0W327/D5fCNSJIYsbl4Poxz j7aqj44pXEpOP3eDPNCUQc2XUmWk+HWxt3McwJYZXu4xhV0FC8hVndjLnlWWIk07e4yxrWU7YU50 KrsS85FNF5CwqZus83N88ko3TKED7EtA9n5ekdUbds1j+zAtvSKRWkqehAj89AowjrPFN6CxrJZk hagngL1xipaB9g== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Tue Feb 13 09:59:44 CET 2007 Valid to: Wed Dec 11 23:23:32 CET 2013 Public Key: ITALIA (ITALY) - Trusted List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age 139 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.,c%3dIT?certificateRevocationList Subject Key Identifier AA:11:4B:EC:80:E0:89:EA:CF:55:AD:DA:32:8F:C6:19:E5:31:14:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2D:EC:AB:6D:5A:CD:9E:EF:DC:F8:89:E1:50:00:FF:EE:7D:D4:20:F8:7B:A5:81:05:60:95:66:44:2 9:34:62:AC X509SubjectName Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2015-06-30T21:59:58Z 6.3.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.3.3 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 140 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 300305 -----BEGIN CERTIFICATE----MIIFJTCCBA2gAwIBAgIDBJURMA0GCSqGSIb3DQEBBQUAMIGeMQswCQYDVQQGEwJJVDEvMC0GA1UE CgwmQmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xJDAiBgNVBAsMG01QUyBJ ZGVudHJ1cyBJbmZyYXN0cnVjdHVyZTE4MDYGA1UEAwwvTVBTIFByb2R1Y3Rpb24gSWRlbnRydXMg Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDg1OTQ0WhcNMTMxMjExMjIyMzMyWjCB njELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSQwIgYDVQQLDBtNUFMgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMML01Q UyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUvG8NJ5++ulyjroG8apyZ7LdFSCSOlHbOAe8k3VIZd3qGs kndSNiT2O2BX1aqMDDIkFxgJTXYDaKunS/L8oWgIAoTs47cPNvVVMATPSH9YIjRQ9TyV32fq0gl1 XEIw8rc2e8wW17JCGWma3/0DzwQs+4iMK5ZoI+XxTMbog61LoU64mKDwGbW3pLjzWPj52Wmjvj7w We+rw33ydwcyqYMz0dmcLK5TPMfknv6fim1CWfJV8uj79eaAx0LfbtKBr19T5ofPHyJsf/hU28wG jfFLMhoIQdlMg2nvd3qdHYfTBj3OLoOi9b+KCzQKrphLGXI/HByapXYvAyKVpkEZiQIDAQABo4IB aDCCAWQwDwYDVR0TAQH/BAUwAwEB/zA8BgNVHSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYB BQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3BzMA4GA1UdDwEB/wQEAwIBBjCB4wYDVR0fBIHbMIHY MIHVoIHSoIHPhoHMbGRhcDovL2xkYXAubXBzLml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElk ZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIw SW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNp ZW5hJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBSq EUvsgOCJ6s9Vrdoyj8YZ5TEUijANBgkqhkiG9w0BAQUFAAOCAQEAU4EiAwtVPvelfM6mxT9fRSJZ Dl7aQk6lqRuF3nFPNUSITBw1hhg9YFUIS6sYMefYc/adldc7CjHs6VR+4IByiHkdPdzmB0/u3AYx ZsrQIDCJDwaT+y4BgA324H3c3gR7D2dwG7kv/neRBm1B08QYZ2ZHM0W327/D5fCNSJIYsbl4Poxz j7aqj44pXEpOP3eDPNCUQc2XUmWk+HWxt3McwJYZXu4xhV0FC8hVndjLnlWWIk07e4yxrWU7YU50 KrsS85FNF5CwqZus83N88ko3TKED7EtA9n5ekdUbds1j+zAtvSKRWkqehAj89AowjrPFN6CxrJZk hagngL1xipaB9g== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Tue Feb 13 09:59:44 CET 2007 Valid to: Wed Dec 11 23:23:32 CET 2013 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C5:05:2F:1B:C3:49:E7:EF:AE:97:28:EB:A0:6F:1A:A7:26:7B:2D:D1:52:09:23:A5:1D:B3:80:7B:C9:37:54:86:5D:DE: A1:AC:92:77:52:36:24:F6:3B:60:57:D5:AA:8C:0C:32:24:17:18:09:4D:76:03:68:AB:A7:4B:F2:FC:A1:68:08:02:84:EC:E3:B7:0F:36:F5:55:30:04:CF:48:7F:58:22:34:50:F5:3C:95:DF:67:EA:D2:09:75:5C:42:30:F2:B7:36:7B:C C:16:D7:B2:42:19:69:9A:DF:FD:03:CF:04:2C:FB:88:8C:2B:96:68:23:E5:F1:4C:C6:E8:83:AD:4B:A1:4E:B8:98:A0:F0:19:B5:B7:A4:B8:F3:58:F8:F9:D9:69:A3:BE:3E:F0:59:EF:AB:C3:7D:F2:77:07:32:A9:83:33:D1:D9:9C:2 C:AE:53:3C:C7:E4:9E:FE:9F:8A:6D:42:59:F2:55:F2:E8:FB:F5:E6:80:C7:42:DF:6E:D2:81:AF:5F:53:E6:87:CF:1F:22:6C:7F:F8:54:DB:CC:06:8D:F1:4B:32:1A:08:41:D9:4C:83:69:EF:77:7A:9D:1D:87:D3:06:3D:CE:2E:83:A 2:F5:BF:8A:0B:34:0A:AE:98:4B:19:72:3F:1C:1C:9A:A5:76:2F:03:22:95:A6:41:19:89:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.,c%3dIT?certificateRevocationList Subject Key Identifier AA:11:4B:EC:80:E0:89:EA:CF:55:AD:DA:32:8F:C6:19:E5:31:14:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 141 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: 2D:EC:AB:6D:5A:CD:9E:EF:DC:F8:89:E1:50:00:FF:EE:7D:D4:20:F8:7B:A5:81:05:60:95:66:44:2 9:34:62:AC X509SubjectName Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2015-06-30T21:59:57Z 6.3.3.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 6.3.4 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=MPS Root Certification Authority,O=Banca Monte dei Paschi di Siena S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 300305 X509 Certificate -----BEGIN CERTIFICATE----MIIFJTCCBA2gAwIBAgIDBJURMA0GCSqGSIb3DQEBBQUAMIGeMQswCQYDVQQGEwJJVDEvMC0GA1UE CgwmQmFuY2EgTW9udGUgZGVpIFBhc2NoaSBkaSBTaWVuYSBTLnAuQS4xJDAiBgNVBAsMG01QUyBJ ZGVudHJ1cyBJbmZyYXN0cnVjdHVyZTE4MDYGA1UEAwwvTVBTIFByb2R1Y3Rpb24gSWRlbnRydXMg Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDg1OTQ0WhcNMTMxMjExMjIyMzMyWjCB njELMAkGA1UEBhMCSVQxLzAtBgNVBAoMJkJhbmNhIE1vbnRlIGRlaSBQYXNjaGkgZGkgU2llbmEg Uy5wLkEuMSQwIgYDVQQLDBtNUFMgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxODA2BgNVBAMML01Q UyBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUvG8NJ5++ulyjroG8apyZ7LdFSCSOlHbOAe8k3VIZd3qGs kndSNiT2O2BX1aqMDDIkFxgJTXYDaKunS/L8oWgIAoTs47cPNvVVMATPSH9YIjRQ9TyV32fq0gl1 XEIw8rc2e8wW17JCGWma3/0DzwQs+4iMK5ZoI+XxTMbog61LoU64mKDwGbW3pLjzWPj52Wmjvj7w We+rw33ydwcyqYMz0dmcLK5TPMfknv6fim1CWfJV8uj79eaAx0LfbtKBr19T5ofPHyJsf/hU28wG jfFLMhoIQdlMg2nvd3qdHYfTBj3OLoOi9b+KCzQKrphLGXI/HByapXYvAyKVpkEZiQIDAQABo4IB aDCCAWQwDwYDVR0TAQH/BAUwAwEB/zA8BgNVHSAENTAzMDEGCysGAQQBgZJWAQEBMCIwIAYIKwYB BQUHAgEWFGh0dHA6Ly9jYS5tcHMuaXQvY3BzMA4GA1UdDwEB/wQEAwIBBjCB4wYDVR0fBIHbMIHY MIHVoIHSoIHPhoHMbGRhcDovL2xkYXAubXBzLml0L2NuJTNkTVBTJTIwUHJvZHVjdGlvbiUyMElk ZW50cnVzJTIwQ2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZE1QUyUyMElkZW50cnVzJTIw SW5mcmFzdHJ1Y3R1cmUsbyUzZEJhbmNhJTIwTW9udGUlMjBkZWklMjBQYXNjaGklMjBkaSUyMFNp ZW5hJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQWBBSq EUvsgOCJ6s9Vrdoyj8YZ5TEUijANBgkqhkiG9w0BAQUFAAOCAQEAU4EiAwtVPvelfM6mxT9fRSJZ Dl7aQk6lqRuF3nFPNUSITBw1hhg9YFUIS6sYMefYc/adldc7CjHs6VR+4IByiHkdPdzmB0/u3AYx ZsrQIDCJDwaT+y4BgA324H3c3gR7D2dwG7kv/neRBm1B08QYZ2ZHM0W327/D5fCNSJIYsbl4Poxz j7aqj44pXEpOP3eDPNCUQc2XUmWk+HWxt3McwJYZXu4xhV0FC8hVndjLnlWWIk07e4yxrWU7YU50 KrsS85FNF5CwqZus83N88ko3TKED7EtA9n5ekdUbds1j+zAtvSKRWkqehAj89AowjrPFN6CxrJZk hagngL1xipaB9g== -----END CERTIFICATE----- Signature algorithm: ITALIA (ITALY) - Trusted List ID: ID100001 SHA1withRSA Page 142 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer CN: MPS Production Identrus Certification Authority Issuer OU: MPS Identrus Infrastructure Issuer O: Banca Monte dei Paschi di Siena S.p.A. Issuer C: IT Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT Valid from: Tue Feb 13 09:59:44 CET 2007 Valid to: Wed Dec 11 23:23:32 CET 2013 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C5:05:2F:1B:C3:49:E7:EF:AE:97:28:EB:A0:6F:1A:A7:26:7B:2D:D1:52:09:23:A5:1D:B3:80:7B:C9:37:54:86:5D:DE: A1:AC:92:77:52:36:24:F6:3B:60:57:D5:AA:8C:0C:32:24:17:18:09:4D:76:03:68:AB:A7:4B:F2:FC:A1:68:08:02:84:EC:E3:B7:0F:36:F5:55:30:04:CF:48:7F:58:22:34:50:F5:3C:95:DF:67:EA:D2:09:75:5C:42:30:F2:B7:36:7B:C C:16:D7:B2:42:19:69:9A:DF:FD:03:CF:04:2C:FB:88:8C:2B:96:68:23:E5:F1:4C:C6:E8:83:AD:4B:A1:4E:B8:98:A0:F0:19:B5:B7:A4:B8:F3:58:F8:F9:D9:69:A3:BE:3E:F0:59:EF:AB:C3:7D:F2:77:07:32:A9:83:33:D1:D9:9C:2 C:AE:53:3C:C7:E4:9E:FE:9F:8A:6D:42:59:F2:55:F2:E8:FB:F5:E6:80:C7:42:DF:6E:D2:81:AF:5F:53:E6:87:CF:1F:22:6C:7F:F8:54:DB:CC:06:8D:F1:4B:32:1A:08:41:D9:4C:83:69:EF:77:7A:9D:1D:87:D3:06:3D:CE:2E:83:A 2:F5:BF:8A:0B:34:0A:AE:98:4B:19:72:3F:1C:1C:9A:A5:76:2F:03:22:95:A6:41:19:89:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.mps.it/cps CRL Distribution Points ldap://ldap.mps.it/cn%3dMPS%20Production%20Identrus%20Certification%20Authority,ou%3dM PS%20Identrus%20Infrastructure,o%3dBanca%20Monte%20dei%20Paschi%20di%20Siena%20S.p .A.,c%3dIT?certificateRevocationList Subject Key Identifier AA:11:4B:EC:80:E0:89:EA:CF:55:AD:DA:32:8F:C6:19:E5:31:14:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2D:EC:AB:6D:5A:CD:9E:EF:DC:F8:89:E1:50:00:FF:EE:7D:D4:20:F8:7B:A5:81:05:60:95:66:44:2 9:34:62:AC X509SubjectName Subject CN: MPS Production Identrus Certification Authority Subject OU: MPS Identrus Infrastructure Subject O: Banca Monte dei Paschi di Siena S.p.A. Subject C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 143 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2007-02-13T09:59:44Z 6.3.4.3 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 144 ETSI 2014 - TSL HR - PDF/A-1b generator 7 - TSP: CEDACRI S.p.A. TSP Name Name [ en ] CEDACRI S.p.A. Name [ it ] CEDACRI S.p.A. Name [ en ] Cedacri SpA Name [ it ] Cedacri SpA Name [ en ] VATIT-00432960342 Name [ it ] VATIT-00432960342 Name [ en ] NTRIT-128475 Name [ it ] NTRIT-128475 Street Address [ en ] via del conventino 1 Locality [ en ] collecchio Postal Code [ en ] 43044 Country Name [ en ] IT Street Address [ it ] via del conventino 1 Locality [ it ] collecchio Postal Code [ it ] 43044 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.cedacricert.it/Portale/Cedacricert_eng.html URI mailto:[email protected] TSP Information URI ITALIA (ITALY) - Trusted List ID: ID100001 Page 145 ETSI 2014 - TSL HR - PDF/A-1b generator URI [ en ] http://www.cedacricert.it/Portale/Cedacricert_eng.html URI [ it ] www.cedacricert.it 7.1 - Service : CN=Cedacricert,O=Cedacri SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Cedacricert,O=Cedacri SpA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIID4TCCAsmgAwIBAgIBATANBgkqhkiG9w0BAQUFADA5MQswCQYDVQQGEwJJVDEUMBIGA1UECgwL Q2VkYWNyaSBTcEExFDASBgNVBAMMC0NlZGFjcmljZXJ0MB4XDTA0MDQyMTA5NTYyMVoXDTEwMDQy MTA5NTIzOFowOTELMAkGA1UEBhMCSVQxFDASBgNVBAoMC0NlZGFjcmkgU3BBMRQwEgYDVQQDDAtD ZWRhY3JpY2VydDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANA/qfrcPkJS8gUcvvjU PhJUEjQuKrnxUp/+iYn0Q8u2OFBFqKsNmZfU9gQNcBFkRGAB3XqDnBwwiJzkq1SDh3/Wcpq5+F78 ixhjN3w5DSnUBQX4qxNKP3Ikt+uJUXA0RCx2viNTs9yv+flDqlGQZpjlrVZCbUvfgxEsvad5iSKQ nL38Jp3xU8eFNGWiVKsfc1TonuPIb3kgOC2Ylm4kDXj1acbH1JbDdikN5gnoC/3lMqsLL0WoUfER yGKhzJ+8Q+4Zrdc8r7KklrdeuTFytTf51Z/w59dSJOd7w+f8LPtHzDyDC1n0hb5NLCRdZE6IZyGZ WUMcbSanBmd7QEpO9csCAwEAAaOB8zCB8DAPBgNVHRMBAf8EBTADAQH/MD0GA1UdIAQ2MDQwMgYG K0wbAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LmNlZGFjcmljZXJ0Lml0MG8GA1UdHwRo MGYwZKBioGCGXmxkYXA6Ly9sZGFwLmNlZGFjcmljZXJ0Lml0L2NuJTNkQ2VkYWNyaWNlcnQsbyUz ZENlZGFjcmklMjBTcEEsYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3QwDgYDVR0PAQH/ BAQDAgEGMB0GA1UdDgQWBBRB85KCg2VieVwgZ+blejz7e2kSNjANBgkqhkiG9w0BAQUFAAOCAQEA XtwQwoc1Liuejircv5KJcO6J3lm8/Ro/7EyHFEwEmWMxb4SrV4wd2XvpXpBQ5VStxVevnAGfNgzE nQxIJDNtGIkWKPkpHgFiTSo6SF3XhPC5rfr2gsCcpbZMzMfZ/EOKWJj5pja4fYsj9fNpz3v33tro AzVVKGlc2FHivMAlBSN3VxQTWUyhje0jK+RfSrvfsv9T0R+pmRkNH71swOveqe4fWrygdG/glrwL GAdCKMBXYd+d26v7Ho90eb3R2E1qxMyGcRumlDbJj5Pk3zAuDgV1a4r/IT2ztBQZOS4xorxiCVYy 0BIBSeT3EHdeJelC3CU1tMHVnHnsMwdMfPsDJA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Cedacricert Issuer O: Cedacri SpA Issuer C: IT Subject CN: Cedacricert Subject O: Cedacri SpA Subject C: IT Valid from: Wed Apr 21 11:56:21 CEST 2004 Valid to: Wed Apr 21 11:52:38 CEST 2010 ITALIA (ITALY) - Trusted List ID: ID100001 Page 146 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:D0:3F:A9:FA:DC:3E:42:52:F2:05:1C:BE:F8:D4:3E:12:54:12:34:2E:2A:B9:F1:52:9F:FE:89:89:F4:43:CB:B6:38:50:45 :A8:AB:0D:99:97:D4:F6:04:0D:70:11:64:44:60:01:DD:7A:83:9C:1C:30:88:9C:E4:AB:54:83:87:7F:D6:72:9A:B9:F8:5E:FC:8B:18:63:37:7C:39:0D:29:D4:05:05:F8:AB:13:4A:3F:72:24:B7:EB:89:51:70:34:44:2C:76:BE:23:53: B3:DC:AF:F9:F9:43:AA:51:90:66:98:E5:AD:56:42:6D:4B:DF:83:11:2C:BD:A7:79:89:22:90:9C:BD:FC:26:9D:F1:53:C7:85:34:65:A2:54:AB:1F:73:54:E8:9E:E3:C8:6F:79:20:38:2D:98:96:6E:24:0D:78:F5:69:C6:C7:D4:96:C 3:76:29:0D:E6:09:E8:0B:FD:E5:32:AB:0B:2F:45:A8:51:F1:11:C8:62:A1:CC:9F:BC:43:EE:19:AD:D7:3C:AF:B2:A4:96:B7:5E:B9:31:72:B5:37:F9:D5:9F:F0:E7:D7:52:24:E7:7B:C3:E7:FC:2C:FB:47:CC:3C:83:0B:59:F4:85:B E:4D:2C:24:5D:64:4E:88:67:21:99:59:43:1C:6D:26:A7:06:67:7B:40:4A:4E:F5:CB:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.27.1.1.1 CPS pointer: https://www.cedacricert.it CRL Distribution Points ldap://ldap.cedacricert.it/cn%3dCedacricert,o%3dCedacri%20SpA,c%3dIT?certificateRevocationLis t Subject Key Identifier 41:F3:92:82:83:65:62:79:5C:20:67:E6:E5:7A:3C:FB:7B:69:12:36 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FB:C2:AD:03:7B:FF:8C:67:25:2F:5D:2F:CB:B5:1F:91:D8:7A:E6:2A:30:EC:29:FA:0F:98:D8:CD: D9:4E:CC:FB Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-04-21T11:56:21Z 7.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 7.2 - Service : CN=Cedacricert,O=Cedacri SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Cedacricert,O=Cedacri SpA,C=IT Service Name Name Service digital identities Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 147 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 11448 -----BEGIN CERTIFICATE----MIIENTCCAx2gAwIBAgICLLgwDQYJKoZIhvcNAQEFBQAwOTELMAkGA1UEBhMCSVQxFDASBgNVBAoM C0NlZGFjcmkgU3BBMRQwEgYDVQQDDAtDZWRhY3JpY2VydDAeFw0wOTA2MDkwODQyNTNaFw0xOTA2 MDkwODQyNTNaMDkxCzAJBgNVBAYTAklUMRQwEgYDVQQKDAtDZWRhY3JpIFNwQTEUMBIGA1UEAwwL Q2VkYWNyaWNlcnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkd8dZQYysiJ9d72P X7OrTVNuXAP8FlcxcbcFp8cf2EW1bneWUoi4qW1rn8y12Xs1trom4JXDFOQugO7rDr14rnjdf54x XFrNK18R/co9+ye2h757b4L+ygposA4BxLumrsLDkhu7SYOSeYizBQBPN+6JwWmr4w7H9LTjgXrY Ta2EFa9ZrkX+RUY1KxhMD22pup3iZ6hroEIMhEo5RIKmOtuUjKP1BW2QfVKea8RG5LQCy/3aI8Co Cu64B9satXKvY5cVzwLsd/1ncaT/Yidc7vk/X93nzRPuJjQilgCQV66P+wVKpM9jDm98xjoYxyX9 MoFxEo10e/r1L5uJ/P5fAgMBAAGjggFFMIIBQTAPBgNVHRMBAf8EBTADAQH/MD0GA1UdIAQ2MDQw MgYGK0wbAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LmNlZGFjcmljZXJ0Lml0MIGeBgNV HR8EgZYwgZMwZKBioGCGXmxkYXA6Ly9sZGFwLmNlZGFjcmljZXJ0Lml0L2NuJTNkQ2VkYWNyaWNl cnQsbyUzZENlZGFjcmklMjBTcEEsYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3QwK6Ap oCeGJWh0dHA6Ly93d3cuY2VkYWNyaWNlcnQuaXQvY3JsL2NybC5jcmwwDgYDVR0PAQH/BAQDAgEG MB8GA1UdIwQYMBaAFHzYpDTbH1N/lvFC67d7b00u9D8TMB0GA1UdDgQWBBR82KQ02x9Tf5bxQuu3 e29NLvQ/EzANBgkqhkiG9w0BAQUFAAOCAQEAQ5anahPsIAOcq1bkg7kZYNcT536acP2bkhWEJ7uE RDWUHR05fFt/fCZbyiV2Ya9mtDbw/JGxaHeRIE0dontQkhNYTRBu2Qg/FuFrYAjkS4WoCK7qJ6GJ utlYOmAxWQ2B1MJsU99HurM9SIKXjUHl92kAehsqm8u25cMIgjdr0gkq2GAhZ5gVxs58EHBwayYa aOvqJHdv+91qpy6FnOqS3ywo9p9QGxbLntL4U+fk2bfP+mkuqK9dYT1OrBXsKyAkNNSTT3vimxpe 4c3oywA0eafbTE6kyRze5lasxCt+3audM2R7fmLGg0h9PQvJmck2erIgtlRzusrI3nbztddDDw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Cedacricert Issuer O: Cedacri SpA Issuer C: IT Subject CN: Cedacricert Subject O: Cedacri SpA Subject C: IT Valid from: Tue Jun 09 10:42:53 CEST 2009 Valid to: Sun Jun 09 10:42:53 CEST 2019 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.27.1.1.1 CPS pointer: https://www.cedacricert.it CRL Distribution Points ldap://ldap.cedacricert.it/cn%3dCedacricert,o%3dCedacri%20SpA,c%3dIT?certificateRevocationLis t http://www.cedacricert.it/crl/crl.crl Authority Key Identifier 7C:D8:A4:34:DB:1F:53:7F:96:F1:42:EB:B7:7B:6F:4D:2E:F4:3F:13 Subject Key Identifier 7C:D8:A4:34:DB:1F:53:7F:96:F1:42:EB:B7:7B:6F:4D:2E:F4:3F:13 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 7E:37:65:04:D2:DF:73:85:C6:DB:20:C1:31:58:02:FA:B9:63:3C:F0:0A:01:01:6C:D3:3A:46:96:DA: 5E:BE:3D ITALIA (ITALY) - Trusted List ID: ID100001 Page 148 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2009-06-09T10:42:53Z 7.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 7.3 - Service : CN=CedacricertCATS,O=Cedacri SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=CedacricertCATS,O=Cedacri SpA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIID7TCCAtWgAwIBAgIBATANBgkqhkiG9w0BAQUFADA9MQswCQYDVQQGEwJJVDEUMBIGA1UECgwL Q2VkYWNyaSBTcEExGDAWBgNVBAMMD0NlZGFjcmljZXJ0Q0FUUzAeFw0wNDA0MjExMjIzMTNaFw0x NDA0MjExMjIwMzVaMD0xCzAJBgNVBAYTAklUMRQwEgYDVQQKDAtDZWRhY3JpIFNwQTEYMBYGA1UE AwwPQ2VkYWNyaWNlcnRDQVRTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyH1oc05 9Ubcy7eRquovc6ojboKxJR0N4uvGi7uJKcOuR+m8nWgygSJK726dMk9NuVxRf+vs4gfIJO8/0Vn1 u/InVmkNIFEFZeyWEyGnO/3XG9nOm0x3BFCkBdInb3PyZ2oaL4ff2StqAqjjHxrp1XuPGPLRjj5J sDp9Fpj/O9YiZpzgO1qWmZsBRHaQNpBXPwG667kjCAZm6ZgyW1uhm6IlYQWlCN+xWejTkjpJQvbd AGK7XyD/9tS1waGeoya9RdTfDiDgKX+EmeyGcPpBo+KKqKgVZb1vq7nUI8El3svrwhxo/NvsM+oe lEKichnWApcReah6XQyMSvmGFauXZwIDAQABo4H3MIH0MA8GA1UdEwEB/wQFMAMBAf8wPQYDVR0g BDYwNDAyBgYrTBsBAgEwKDAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cuY2VkYWNyaWNlcnQuaXQw cwYDVR0fBGwwajBooGagZIZibGRhcDovL2xkYXAuY2VkYWNyaWNlcnQuaXQvY24lM2RDZWRhY3Jp Y2VydENBVFMsbyUzZENlZGFjcmklMjBTcEEsYyUzZElUP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3QwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRpLicztB19fmpG5Tpqb9RKAQQYZjANBgkqhkiG 9w0BAQUFAAOCAQEACVg2c7pVWYcbbWM+n6hmoYUjxHj2JLZgZWUOVWUA2pdvudqkulm1jYq7CWIB Gs799Nm34iHFN7BMGLGMgRWGdoIU1NAFXF6NsyWaYsSvhwLTkU8her3rjAkutRQJv+L9iZqDAEJS YNJyV9jCYCKkg1yj6/Pj4THYCaJaKdDarqj4s6vabrH8jWVb687pNMEW1SHYrQHR+gSeikpPzMVL OgJA/VxW8nDUUHcHDKnqNqxmRqzC1p0DUfaFtO3tna0D82nmk5IlfVsQkrkVkriE9cXuI4oNXODz MQjVvmKVE3SS1cK5TzZeUgJuRSu8zJ5EWMaxucttyDG2xgcHoVcGhA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: CedacricertCATS Issuer O: Cedacri SpA Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 149 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: CedacricertCATS Subject O: Cedacri SpA Subject C: IT Valid from: Wed Apr 21 14:23:13 CEST 2004 Valid to: Mon Apr 21 14:20:35 CEST 2014 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.27.1.2.1 CPS pointer: https://www.cedacricert.it CRL Distribution Points ldap://ldap.cedacricert.it/cn%3dCedacricertCATS,o%3dCedacri%20SpA,c%3dIT?certificateRevocat ionList Subject Key Identifier 69:2E:27:33:B4:1D:7D:7E:6A:46:E5:3A:6A:6F:D4:4A:01:04:18:66 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FB:8A:8E:90:96:28:57:2F:10:66:BA:81:CA:3F:B0:FA:6D:DD:5D:33:34:04:D7:2C:A4:80:19:23:0E :38:F4:87 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-04-21T14:23:13Z 7.4 - Service : CN=CedacricertCATS,O=Cedacri SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 150 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=CedacricertCATS,O=Cedacri SpA,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEQjCCAyqgAwIBAgIBATANBgkqhkiG9w0BAQsFADA9MQswCQYDVQQGEwJJVDEUMBIGA1UECgwL Q2VkYWNyaSBTcEExGDAWBgNVBAMMD0NlZGFjcmljZXJ0Q0FUUzAeFw0xNDA0MDkwOTI3MzlaFw0y NDA0MDkwOTI3MzlaMD0xCzAJBgNVBAYTAklUMRQwEgYDVQQKDAtDZWRhY3JpIFNwQTEYMBYGA1UE AwwPQ2VkYWNyaWNlcnRDQVRTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB08Pyxk Y8s/1CRLZHBIQJN3JphBJ69mO0dEEtE/AovXI61N1FWs/GsGQmCWN+l9ZAkMPYoJJQERrUjiyUXk JcdFPZSWWyN/k73KBMdVDb7iKt4qHbMRoIIr2g/hwRSKO2NqUDafE1IoshDh6pzaHLQsBiDot9DF rtdiD/aAueV7R1Gx7vi1V/yCN2dTdNY46dtac1yqncpLC+c+OLV69x2XgstH9twqBhuUY1Ge6gda RDcv034TvmZ1VfyIL8pCKi7XKhuPdKC44YS5djAAKVaOE7asRfLemR2xvGp3yFzBLf6NUbawWQl0 KRmwE66sOGx0Il6hWTXN5qPtpHAo0QIDAQABo4IBSzCCAUcwDwYDVR0TAQH/BAUwAwEB/zA9BgNV HSAENjA0MDIGBitMGwECATAoMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy5jZWRhY3JpY2VydC5p dDCBpAYDVR0fBIGcMIGZMGigZqBkhmJsZGFwOi8vbGRhcC5jZWRhY3JpY2VydC5pdC9jbiUzZENl ZGFjcmljZXJ0Q0FUUyxvJTNkQ2VkYWNyaSUyMFNwQSxjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0 aW9uTGlzdDAtoCugKYYnaHR0cDovL3d3dy5jZWRhY3JpY2VydC5pdC9jcmwvY3JsdHMuY3JsMA4G A1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBRx05VkwEjxWsmmGxgnY/fdOELvTTAdBgNVHQ4EFgQU cdOVZMBI8VrJphsYJ2P33ThC700wDQYJKoZIhvcNAQELBQADggEBAIjw/UNO6siG8WoQIAPL9lIj PDzSWbJO17yx6tOh4LM6Eu+OcMf1Dq+6Qsi8Hufrs8vvI7GLCFa7sB6cLuZNo/84fLgKYEeGkHV+ AbomgqehEu7GdPFssGjx5XkMpUkcb31TvFJQq/rNQuM/BitY8CRenVN/Jy3KXtxfximJ0Mhyb4fA wVuw342wl7Eg7dLwS4bPgSpcDbLJ+sdSt+DA2VjInIB1BI/Km9z0l8cSWN2b6HwxJstkC1K1lvW3 N2inl0aom7y1oDuRoDsDTFKVeXElVgncoyDp2Pqjtlnfj5m0JMy90+tJ79hU7HW5FQv3SopcFiUr QdNoWKqVkdNxggw= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: CedacricertCATS Issuer O: Cedacri SpA Issuer C: IT Subject CN: CedacricertCATS Subject O: Cedacri SpA Subject C: IT Valid from: Wed Apr 09 11:27:39 CEST 2014 Valid to: Tue Apr 09 11:27:39 CEST 2024 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.27.1.2.1 CPS pointer: https://www.cedacricert.it CRL Distribution Points ldap://ldap.cedacricert.it/cn%3dCedacricertCATS,o%3dCedacri%20SpA,c%3dIT?certificateRevocat ionList http://www.cedacricert.it/crl/crlts.crl Authority Key Identifier 71:D3:95:64:C0:48:F1:5A:C9:A6:1B:18:27:63:F7:DD:38:42:EF:4D Subject Key Identifier 71:D3:95:64:C0:48:F1:5A:C9:A6:1B:18:27:63:F7:DD:38:42:EF:4D ITALIA (ITALY) - Trusted List ID: ID100001 Page 151 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 95:4E:50:06:FB:DE:CC:4F:5A:05:57:C3:93:B6:C0:42:B8:14:19:67:E1:94:8B:31:A5:6D:EA:AD:4C :45:1A:B8 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2014-04-09T09:27:39Z Page 152 ETSI 2014 - TSL HR - PDF/A-1b generator 8 - TSP: Consiglio Nazionale dei Dottori Commercialisti e degli Esperti Contabili TSP Name Name [ en ] Consiglio Nazionale dei Dottori Commercialisti e degli Esperti Contabili Name [ it ] Consiglio Nazionale dei Dottori Commercialisti e degli Esperti Contabili Name [ en ] Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili Name [ it ] Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili Name [ en ] VATIT-09758941000 Name [ it ] VATIT-09758941000 Street Address [ en ] piazza della repubblica 59 Locality [ en ] roma Postal Code [ en ] 00185 Country Name [ en ] IT Street Address [ it ] piazza della repubblica 59 Locality [ it ] roma Postal Code [ it ] 00185 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.cndcec.it URI mailto:[email protected] TSP Information URI URI [ en ] http://www.cndcec.it URI [ it ] http://www.cndcec.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 153 ETSI 2014 - TSL HR - PDF/A-1b generator 8.1 - Service : CN=Certicomm CNDCEC,serialNumber=09758941000,OU=Firma Qualificata,O=Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Certicomm CNDCEC,serialNumber=09758941000,OU=Firma Qualificata,O=Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 9 X509 Certificate -----BEGIN CERTIFICATE----MIIFQjCCBCqgAwIBAgIBCTANBgkqhkiG9w0BAQUFADCBpDELMAkGA1UEBhMCSVQxSDBGBgNVBAoM P0NvbnNpZ2xpbyBOYXppb25hbGUgRG90dG9yaSBDb21tZXJjaWFsaXN0aSBlZCBFc3BlcnRpIENv bnRhYmlsaTEaMBgGA1UECwwRRmlybWEgUXVhbGlmaWNhdGExFDASBgNVBAUTCzA5NzU4OTQxMDAw MRkwFwYDVQQDDBBDZXJ0aWNvbW0gQ05EQ0VDMB4XDTA4MDkxMjA5MTEyOFoXDTE0MDkxMjEwMTEy OFowgaQxCzAJBgNVBAYTAklUMUgwRgYDVQQKDD9Db25zaWdsaW8gTmF6aW9uYWxlIERvdHRvcmkg Q29tbWVyY2lhbGlzdGkgZWQgRXNwZXJ0aSBDb250YWJpbGkxGjAYBgNVBAsMEUZpcm1hIFF1YWxp ZmljYXRhMRQwEgYDVQQFEwswOTc1ODk0MTAwMDEZMBcGA1UEAwwQQ2VydGljb21tIENORENFQzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5vRAIzfC86lwrJBteD5DPREc+H6F7hzsjF PQ+7GZAO5gKDQh2GZf8ZTOJ8jk5vHQDRhv5h6tkRJR2SU8QIGJtN+Y102aWK9+ltOGDuc62T/37K jIXPYYLrmMHmIAoZcu5Gg/I/uYce0KF1USVz0pBTzGCRyw9InjP8ZtaccBIN/UXFmAYHMyErYNHA mTcyLWyV66m2yv1ATYW1T8Z5ai2K/FgtcEQIpXfvr+YluhL3HVz2g6PcO3xKP2qYQEjhFnm/PIy8 0gNiwaDaspdQIJhY8fPQ+WMfgMP16X0wlfI19+SoQ1DKAjGF9jRWTlO6MEIVviPV8si4d9BC6c8C N9kCAwEAAaOCAXswggF3MCYGA1UdEgQfMB2BG2Zpcm1hLmRpZ2l0YWxlQGNlcnRpY29tbS5pdDAP BgNVHRMBAf8EBTADAQH/MDgGA1UdIAQxMC8wLQYEVR0gADAlMCMGCCsGAQUFBwIBFhdodHRwOi8v d3d3LmNlcnRpY29tbS5pdDCB0gYDVR0fBIHKMIHHMIHEoIHBoIG+hoG7bGRhcDovL2xkYXAyLmNl cnRpY29tbS5pdC9jbiUzRENlcnRpY29tbSUyMENORENFQyxvdSUzREZpcm1hJTIwUXVhbGlmaWNh dGEsbyUzRENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMERvdHRvcmklMjBDb21tZXJjaWFsaXN0aSUy MGVkJTIwRXNwZXJ0aSUyMENvbnRhYmlsaSxjJTNESVQ/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlz dDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDCttC0eZZ38hRxq6jkgPqrdBHVLMA0GCSqGSIb3 DQEBBQUAA4IBAQBoFXEBCL5C+IiEqZbk1/TVf3arssaSlRlU+zaiFQ88Rn+ut1wkGPCHL/eQNveb 7xeHg0oCXdchtYDGRhqziSHIYOlK6WBBkywV+49ed0JsDWDi3osUj5tAwXbc3EnVflm+uxbdd/bv 5EMIHxBpVtPDgnR6Dzol0cx+evyvAgA1CQkHunQcehfWUf5oI8pI1LYmEz3J7cmVoik66FqLEGMs eJn1GTlJ/zUO/DZGSln8LOpxCqZGIOwuMd7r/hRrfo1r73gJKbpS7ERQ1eiuW9BFGwg/3LVp8BoX +4yfnAwAfi3/z9eYeD6ESA4suWBanVf0m2b3/M8YJyfvSt7YOx7E -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Certicomm CNDCEC Issuer SERIAL NUMBER: 09758941000 Issuer OU: Firma Qualificata Issuer O: Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili Issuer C: IT Subject CN: Certicomm CNDCEC Subject SERIAL NUMBER: 09758941000 Subject OU: Firma Qualificata Subject O: Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili ITALIA (ITALY) - Trusted List ID: ID100001 Page 154 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Valid from: Fri Sep 12 11:11:28 CEST 2008 Valid to: Fri Sep 12 12:11:28 CEST 2014 Public Key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ssuer Alternative Name [email protected] Basic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.certicomm.it CRL Distribution Points ldap://ldap2.certicomm.it/cn%3DCerticomm%20CNDCEC,ou%3DFirma%20Qualificata,o%3DCon siglio%20Nazionale%20Dottori%20Commercialisti%20ed%20Esperti%20Contabili,c%3DIT?certifi caterevocationlist Subject Key Identifier 30:AD:B4:2D:1E:65:9D:FC:85:1C:6A:EA:39:20:3E:AA:DD:04:75:4B Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 3E:6D:21:7B:46:01:CD:62:69:02:36:53:74:8B:0F:C9:A9:E5:91:E4:65:27:0C:C9:0F:C3:A6:3C:7F:9 7:52:3C Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2008-09-12T11:11:28Z 8.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 8.2 - Service : CN=Certicomm CNDCEC 2,serialNumber=09758941000,OU=CA Accreditata,O=Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. ITALIA (ITALY) - Trusted List ID: ID100001 Page 155 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] CN=Certicomm CNDCEC 2,serialNumber=09758941000,OU=CA Accreditata,O=Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIFPzCCBCegAwIBAgIBATANBgkqhkiG9w0BAQsFADCBozELMAkGA1UEBhMCSVQxSDBGBgNVBAoM P0NvbnNpZ2xpbyBOYXppb25hbGUgRG90dG9yaSBDb21tZXJjaWFsaXN0aSBlZCBFc3BlcnRpIENv bnRhYmlsaTEXMBUGA1UECwwOQ0EgQWNjcmVkaXRhdGExFDASBgNVBAUTCzA5NzU4OTQxMDAwMRsw GQYDVQQDDBJDZXJ0aWNvbW0gQ05EQ0VDIDIwHhcNMTExMjIxMTAxNDI1WhcNMjMxMjIxMTExNDI1 WjCBozELMAkGA1UEBhMCSVQxSDBGBgNVBAoMP0NvbnNpZ2xpbyBOYXppb25hbGUgRG90dG9yaSBD b21tZXJjaWFsaXN0aSBlZCBFc3BlcnRpIENvbnRhYmlsaTEXMBUGA1UECwwOQ0EgQWNjcmVkaXRh dGExFDASBgNVBAUTCzA5NzU4OTQxMDAwMRswGQYDVQQDDBJDZXJ0aWNvbW0gQ05EQ0VDIDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjysalGvakMvziMom75lszqDOI0q+hDKGb96Y 21w3gvWQDFlfFzl20JJrWI5M6VheWpaN5wBvINuiHujbyhojOKox1pjYKfZsPqOH6z6+qpKCuv/x 4YGg32DdxwNwzG5rGExE1BNOIbr9RXegA9vF49MWhRH0hYQ2EPW2uVvS1nJSkhtSux+LrZm/z2XD Ay5nG6J06h0YSpvmkOZ53kpcJfG3HCxCHF67KdfyKKR3Jm7ZZeD1eLeisj+Lpa5AKR0AR/FdAQwI eN/QpcU8+kMI3ah2OiiROieG5U/HibD8UFxggnEgynP3wc61bCFapgAGqJFo3xCYS3DlHvsndjCZ AgMBAAGjggF6MIIBdjAmBgNVHRIEHzAdgRtmaXJtYS5kaWdpdGFsZUBjZXJ0aWNvbW0uaXQwDwYD VR0TAQH/BAUwAwEB/zA4BgNVHSAEMTAvMC0GBFUdIAAwJTAjBggrBgEFBQcCARYXaHR0cDovL3d3 dy5jZXJ0aWNvbW0uaXQwgdEGA1UdHwSByTCBxjCBw6CBwKCBvYaBumxkYXA6Ly9sZGFwMi5jZXJ0 aWNvbW0uaXQvY24lM0RDZXJ0aWNvbW0lMjBDTkRDRUMlMjAyLG91JTNEQ0ElMjBBY2NyZWRpdGF0 YSxvJTNEQ29uc2lnbGlvJTIwTmF6aW9uYWxlJTIwRG90dG9yaSUyMENvbW1lcmNpYWxpc3RpJTIw ZWQlMjBFc3BlcnRpJTIwQ29udGFiaWxpLGMlM0RJVD9hdXRob3JpdHlSZXZvY2F0aW9uTGlzdDAO BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHL+h63N5pyq6dv4JA4/tm0lT9kpMA0GCSqGSIb3DQEB CwUAA4IBAQAuXRTdqYQoiD7SU0dUUGAZenQaZkB+LJuOXyo8PpF5q2y7f6Y/6tv7f3S1e1LPrY6R Ie60C4zI+Utfl2PeU5G2ytpmFzQHwb2mgomwSvSV+51Gt2JuVAQUlHnOvHk81C7w8c3+4wWHOSgE zSp/k51XgrI2/iQfqtE3iDtUbSBc348aQUbkiCMo8yrWxpz3lCjcaNX/0GVdO69zP6reTlcdO9Nj wUT9xKDvJDXsrTJ3iRFziw2rcQJub9e+mD86MolC/muo5tnwt5K0pOV8BBW7lTCG8MM5ilUaUDBS IX+MzxDy+ckmvMCjcJhXKCRAHimCX2i1569nd3GrXcEtyzlS -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Certicomm CNDCEC 2 Issuer SERIAL NUMBER: 09758941000 Issuer OU: CA Accreditata Issuer O: Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili Issuer C: IT Subject CN: Certicomm CNDCEC 2 Subject SERIAL NUMBER: 09758941000 Subject OU: CA Accreditata Subject O: Consiglio Nazionale Dottori Commercialisti ed Esperti Contabili Subject C: IT Valid from: Wed Dec 21 11:14:25 CET 2011 Valid to: Thu Dec 21 12:14:25 CET 2023 Public Key: ITALIA (ITALY) - Trusted List ID: ID100001 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:D0:8F:2B:1A:94:6B:DA:90:CB:F3:88:CA:26:EF:99:6C:CE:A0:CE:23:4A:BE:84:32:86:6F:DE:98:DB:5C:37:82:F5:90 :0C:59:5F:17:39:76:D0:92:6B:58:8E:4C:E9:58:5E:5A:96:8D:E7:00:6F:20:DB:A2:1E:E8:DB:CA:1A:23:38:AA:31:D6:98:D8:29:F6:6C:3E:A3:87:EB:3E:BE:AA:92:82:BA:FF:F1:E1:81:A0:DF:60:DD:C7:03:70:CC:6E:6B:18:4 C:44:D4:13:4E:21:BA:FD:45:77:A0:03:DB:C5:E3:D3:16:85:11:F4:85:84:36:10:F5:B6:B9:5B:D2:D6:72:52:92:1B:52:BB:1F:8B:AD:99:BF:CF:65:C3:03:2E:67:1B:A2:74:EA:1D:18:4A:9B:E6:90:E6:79:DE:4A:5C:25:F1:B7:1 C:2C:42:1C:5E:BB:29:D7:F2:28:A4:77:26:6E:D9:65:E0:F5:78:B7:A2:B2:3F:8B:A5:AE:40:29:1D:00:47:F1:5D:01:0C:08:78:DF:D0:A5:C5:3C:FA:43:08:DD:A8:76:3A:28:91:3A:27:86:E5:4F:C7:89:B0:FC:50:5C:60:82:71:20: CA:73:F7:C1:CE:B5:6C:21:5A:A6:00:06:A8:91:68:DF:10:98:4B:70:E5:1E:FB:27:76:30:99:02:03:01:00:01 Page 156 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer Alternative Name [email protected] Basic Constraints IsCA: true Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.certicomm.it CRL Distribution Points ldap://ldap2.certicomm.it/cn%3DCerticomm%20CNDCEC%202,ou%3DCA%20Accreditata,o%3D Consiglio%20Nazionale%20Dottori%20Commercialisti%20ed%20Esperti%20Contabili,c%3DIT?a uthorityRevocationList Subject Key Identifier 72:FE:87:AD:CD:E6:9C:AA:E9:DB:F8:24:0E:3F:B6:6D:25:4F:D9:29 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4C:74:B1:2B:51:7B:48:4D:DA:86:AA:65:14:97:83:1F:CD:20:8C:83:16:EB:75:FC:EC:65:88:52:D6: 92:AC:E5 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2011-12-21T11:14:25Z 8.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2011-12-21T11:14:25Z Page 157 ETSI 2014 - TSL HR - PDF/A-1b generator 9 - TSP: Ministero della Difesa TSP Name Name [ en ] Ministero della Difesa Name [ it ] Ministero della Difesa Name [ en ] Comando C4 Difesa - Stato Maggiore della Difesa Name [ it ] Comando C4 Difesa - Stato Maggiore della Difesa Name [ en ] VATIT- 80425650589 Name [ it ] VATIT- 80425650589 Street Address [ en ] via stresa 31b Locality [ en ] roma Postal Code [ en ] 00135 Country Name [ en ] IT Street Address [ it ] via stresa 31b Locality [ it ] roma Postal Code [ it ] 00135 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.pkiff.difesa.it URI mailto:[email protected] TSP Information URI URI [ en ] http://www.pkiff.difesa.it URI [ it ] http://www.pkiff.difesa.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 158 ETSI 2014 - TSL HR - PDF/A-1b generator 9.1 - Service : [email protected],CN=Ministero della Difesa - PKI di Firma Qualificata,serialNumber=97355240587,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] [email protected],CN=Ministero della Difesa - PKI di Firma Qualificata,serialNumber=97355240587,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 16730377452159496508 X509 Certificate -----BEGIN CERTIFICATE----MIIFTDCCBDSgAwIBAgIJAOguPabCK/E8MA0GCSqGSIb3DQEBBQUAMIHLMQswCQYDVQQGEwJJVDEf MB0GA1UECgwWTWluaXN0ZXJvIGRlbGxhIERpZmVzYTEgMB4GA1UECwwXUy5NLkQuIC0gQy5kbyBD NCBEaWZlc2ExFDASBgNVBAUTCzk3MzU1MjQwNTg3MTowOAYDVQQDDDFNaW5pc3Rlcm8gZGVsbGEg RGlmZXNhIC0gUEtJIGRpIEZpcm1hIFF1YWxpZmljYXRhMScwJQYJKoZIhvcNAQkBFhhpbmZvX3Br aWZmQHNtZC5kaWZlc2EuaXQwHhcNMDYxMTA5MTA0ODQwWhcNMjExMTA4MTA0ODQwWjCByzELMAkG A1UEBhMCSVQxHzAdBgNVBAoMFk1pbmlzdGVybyBkZWxsYSBEaWZlc2ExIDAeBgNVBAsMF1MuTS5E LiAtIEMuZG8gQzQgRGlmZXNhMRQwEgYDVQQFEws5NzM1NTI0MDU4NzE6MDgGA1UEAwwxTWluaXN0 ZXJvIGRlbGxhIERpZmVzYSAtIFBLSSBkaSBGaXJtYSBRdWFsaWZpY2F0YTEnMCUGCSqGSIb3DQEJ ARYYaW5mb19wa2lmZkBzbWQuZGlmZXNhLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtK72UqrL/g1qiJ0nIy6vubIxpae2rAGKOEM0J2+nbDgUbHT3Ku3+qSbsh2OMWY6lhNDVLvzx Ua8KrIBmRDMQjWB9EyJHSmfDFYdRsCks+8Srg5Kx4hr7m7165m77/By2WLTtXV1+H5rUzdjo3cZ4 DtpSyYabQ1EQ5QjGj0vTJRsw04AQQ0aoKC7spSqtc2PxyEh0eHxq1RXsScfiX+T30cLTymr2brl1 4a7OyX+cXOILow0g/x/uk/M6EOY8/QJY60YWTK11qXn1P9byxmIcbnScO4iyUO7+yvaiqRDkBnl9 SZLvw8jDVattusIJ0hl/PtJY/g7lOYWFMEKJu+jZjwIDAQABo4IBLzCCASswDwYDVR0TAQH/BAUw AwEB/zAdBgNVHQ4EFgQUrJMeHH0fQeM5BVX96jPjFt0CXj8wDgYDVR0PAQH/BAQDAgEGMIGWBgNV HR8EgY4wgYswV6BVoFOGUUxEQVA6Ly9sZGFwcGtpZmYuZGlmZXNhLml0OjM4OS9jbj1jcmwtZmly bWFkaWdpdGFsZSxvPU1pbmlzdGVybyBkZWxsYSBEaWZlc2EsYz1JVDAwoC6gLIYqaHR0cDovL3d3 dy5wa2kuZGlmZXNhLml0L2Zpcm1hZGlnaXRhbGUuY3JsMFAGA1UdIARJMEcwRQYJKwYBBAHtTwEB MDgwNgYIKwYBBQUHAgEWKmh0dHA6Ly93d3cucGtpLmRpZmVzYS5pdC9maXJtYWRpZ2l0YWxlLnBk ZjANBgkqhkiG9w0BAQUFAAOCAQEAtJORMhGU98+87csLwT/h0wq7kEz2V8G6eNnOR009MwOKWUKl LH1kZjnkv4BwD862V4PagQZVYiUL5TcmE9LyDwB/AFxKdkePQQMukx9wsLRSvaVr7e0LwDklJV75 V/JdjttyGJxJ0pY8x9xrG6Q6nAA5rNr6n560sfqTtTiWwZqp2oNeksliYI/LjIfjFNyGv2hBRm1+ 8AXl/ohF8U2ZvzVyr9UhCnzINRZAjMx1kOcvdlsJNlJHKeNzF+rI8XJAKdgeHSyHT8EsGUP4vehF ry8BGgsQmJ+QD0UrBC9Q00Uj2BIWIP+WNJFzBd58RzqvnIt23vCQqG/UfGKuXyUHYw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Ministero della Difesa - PKI di Firma Qualificata Issuer SERIAL NUMBER: 97355240587 Issuer OU: S.M.D. - C.do C4 Difesa Issuer O: Ministero della Difesa Issuer C: IT Subject E: [email protected] Subject CN: Ministero della Difesa - PKI di Firma Qualificata ITALIA (ITALY) - Trusted List ID: ID100001 Page 159 ETSI 2014 - TSL HR - PDF/A-1b generator Subject SERIAL NUMBER: 97355240587 Subject OU: S.M.D. - C.do C4 Difesa Subject O: Ministero della Difesa Subject C: IT Valid from: Thu Nov 09 11:48:40 CET 2006 Valid to: Mon Nov 08 11:48:40 CET 2021 Public Key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asic Constraints IsCA: true Subject Key Identifier AC:93:1E:1C:7D:1F:41:E3:39:05:55:FD:EA:33:E3:16:DD:02:5E:3F CRL Distribution Points LDAP://ldappkiff.difesa.it:389/cn=crl-firmadigitale,o=Ministero della Difesa,c=IT http://www.pki.difesa.it/firmadigitale.crl Certificate Policies Policy OID: 1.3.6.1.4.1.14031.1.1 CPS pointer: http://www.pki.difesa.it/firmadigitale.pdf Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 20:1E:C6:B0:F8:A6:E5:BD:78:AC:10:1E:37:E9:39:2A:35:40:E3:46:B6:AD:37:61:A2:09:C8:8B:10: 2F:90:9E Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2006-11-09T11:48:40Z 9.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 9.2 - Service : [email protected],CN=Time Stamp Authority PKI di Firma Qualificata,serialNumber=97355240587,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 160 ETSI 2014 - TSL HR - PDF/A-1b generator Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] [email protected],CN=Time Stamp Authority PKI di Firma Qualificata,serialNumber=97355240587,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 13631765329005104380 X509 Certificate -----BEGIN CERTIFICATE----MIIFbTCCBFWgAwIBAgIJAL0twlew1cz8MA0GCSqGSIb3DQEBBQUAMIHHMQswCQYDVQQGEwJJVDEf MB0GA1UECgwWTWluaXN0ZXJvIGRlbGxhIERpZmVzYTEgMB4GA1UECwwXUy5NLkQuIC0gQy5kbyBD NCBEaWZlc2ExFDASBgNVBAUTCzk3MzU1MjQwNTg3MTYwNAYDVQQDDC1UaW1lIFN0YW1wIEF1dGhv cml0eSBQS0kgZGkgRmlybWEgUXVhbGlmaWNhdGExJzAlBgkqhkiG9w0BCQEWGGluZm9fcGtpZmZA c21kLmRpZmVzYS5pdDAeFw0wNjExMDkxMDM4MDRaFw0xMTExMDkxMDM4MDRaMIHHMQswCQYDVQQG EwJJVDEfMB0GA1UECgwWTWluaXN0ZXJvIGRlbGxhIERpZmVzYTEgMB4GA1UECwwXUy5NLkQuIC0g Qy5kbyBDNCBEaWZlc2ExFDASBgNVBAUTCzk3MzU1MjQwNTg3MTYwNAYDVQQDDC1UaW1lIFN0YW1w IEF1dGhvcml0eSBQS0kgZGkgRmlybWEgUXVhbGlmaWNhdGExJzAlBgkqhkiG9w0BCQEWGGluZm9f cGtpZmZAc21kLmRpZmVzYS5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMm8yY9W cAgaGi6IiKgXwimVMAe2QsLKHaAvbdO4m8dRh0mK8hg/1KU2OaQTDN9ZWvP4/cOwhBNELXfXp/jS Q1QI/ukI3u7GNjzOGVQwf4+U3vEIFFrvlRkOBXnJtxLWnGWBNJ3gjaL6SpAE/kg5FmYS87cpOk3j xZ8UlSh1SLTQBIOem+CRVK3NtkArkEbZD6JyiLnKMy2Tk+wHBoYlLO0lBvZVI2N0o9UCUVvlFwyV mxPmIaNB5GHJi8gr8XOS8iDLMovF93I6lOgaY0m1M880HHRdJI+ojAy+fie0GyuLuqa7+S2+emkq zuWfO/NfX/E7GU+qEEY1e6PK2rWk1ecCAwEAAaOCAVgwggFUMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFEdmngx990/DNF4JYNjPKvyU6vbnMB8GA1UdIwQYMBaAFEdmngx990/DNF4JYNjPKvyU 6vbnMA4GA1UdDwEB/wQEAwIBBjCBngYDVR0fBIGWMIGTMFugWaBXhlVMREFQOi8vbGRhcHBraWZm LmRpZmVzYS5pdDozODkvY249Y3JsLWZpcm1hZGlnaXRhbGUtdHNhLG89TWluaXN0ZXJvIGRlbGxh IERpZmVzYSxjPUlUMDSgMqAwhi5odHRwOi8vd3d3LnBraS5kaWZlc2EuaXQvZmlybWFkaWdpdGFs ZS10c2EuY3JsMFAGA1UdIARJMEcwRQYJKwYBBAHtTwEBMDgwNgYIKwYBBQUHAgEWKmh0dHA6Ly93 d3cucGtpLmRpZmVzYS5pdC9maXJtYWRpZ2l0YWxlLnBkZjANBgkqhkiG9w0BAQUFAAOCAQEAgkuq 70A27iEh5RG9LyuyQsCzTDsdk4TMYFbnMXPXwPPGmu8YT2ebs4Vg9l3I98vo1gBYnP6vepheXpQY UtwgWaNzNl85ZL2R7kO6t4j+TqC9P52sB1aJxHr/eUlqrzoLvUs3i7/mRedmAS6pMatz9AtxwWMr JxtyUiT9ytscKNNg4xpZVat695z3YGaWAJFG06y+A4+/wJwy87FY+IxFWFNzvAFptr/ri+3rip1u yQ8TOkIebH0T0vSXp3BaUbTW2iCG9kt43n2m37fA9eA3DqLgLDjQ2nyQEd1ezhry6zrw73GzG7wU QtNSGsobSa0wUiA0FuSqK+qCydrsSn2uEw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Time Stamp Authority PKI di Firma Qualificata Issuer SERIAL NUMBER: 97355240587 Issuer OU: S.M.D. - C.do C4 Difesa Issuer O: Ministero della Difesa Issuer C: IT Subject E: [email protected] Subject CN: Time Stamp Authority PKI di Firma Qualificata Subject SERIAL NUMBER: 97355240587 Subject OU: S.M.D. - C.do C4 Difesa ITALIA (ITALY) - Trusted List ID: ID100001 Page 161 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Ministero della Difesa Subject C: IT Valid from: Thu Nov 09 11:38:04 CET 2006 Valid to: Wed Nov 09 11:38:04 CET 2011 Public Key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asic Constraints IsCA: true Subject Key Identifier 47:66:9E:0C:7D:F7:4F:C3:34:5E:09:60:D8:CF:2A:FC:94:EA:F6:E7 Authority Key Identifier 47:66:9E:0C:7D:F7:4F:C3:34:5E:09:60:D8:CF:2A:FC:94:EA:F6:E7 CRL Distribution Points LDAP://ldappkiff.difesa.it:389/cn=crl-firmadigitale-tsa,o=Ministero della Difesa,c=IT http://www.pki.difesa.it/firmadigitale-tsa.crl Certificate Policies Policy OID: 1.3.6.1.4.1.14031.1.1 CPS pointer: http://www.pki.difesa.it/firmadigitale.pdf Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D4:C3:96:55:17:C9:B3:4F:AF:4E:4C:01:1D:EF:82:49:CC:40:06:2C:BF:5C:6E:44:69:93:C0:13:70:0 1:FB:6B Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2006-11-09T11:38:04Z 9.3 - Service : [email protected],CN=Time Stamp Authority PKI di Firma Qualificata EMISSIONE 2009,serialNumber=97355240587,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. ITALIA (ITALY) - Trusted List ID: ID100001 Page 162 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] [email protected],CN=Time Stamp Authority PKI di Firma Qualificata EMISSIONE 2009,serialNumber=97355240587,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 15648851572409398465 X509 Certificate -----BEGIN CERTIFICATE----MIIFmzCCBIOgAwIBAgIJANkr45gMRnTBMA0GCSqGSIb3DQEBBQUAMIHYMQswCQYDVQQGEwJJVDEf MB0GA1UECgwWTWluaXN0ZXJvIGRlbGxhIERpZmVzYTEgMB4GA1UECwwXUy5NLkQuIC0gQy5kbyBD NCBEaWZlc2ExFDASBgNVBAUTCzk3MzU1MjQwNTg3MUcwRQYDVQQDDD5UaW1lIFN0YW1wIEF1dGhv cml0eSBQS0kgZGkgRmlybWEgUXVhbGlmaWNhdGEgLSBFTUlTU0lPTkUgMjAwOTEnMCUGCSqGSIb3 DQEJARYYaW5mb19wa2lmZkBzbWQuZGlmZXNhLml0MB4XDTA5MDYwODEyNDg0NVoXDTI0MDYwODEy NDg0NVowgdgxCzAJBgNVBAYTAklUMR8wHQYDVQQKDBZNaW5pc3Rlcm8gZGVsbGEgRGlmZXNhMSAw HgYDVQQLDBdTLk0uRC4gLSBDLmRvIEM0IERpZmVzYTEUMBIGA1UEBRMLOTczNTUyNDA1ODcxRzBF BgNVBAMMPlRpbWUgU3RhbXAgQXV0aG9yaXR5IFBLSSBkaSBGaXJtYSBRdWFsaWZpY2F0YSAtIEVN SVNTSU9ORSAyMDA5MScwJQYJKoZIhvcNAQkBFhhpbmZvX3BraWZmQHNtZC5kaWZlc2EuaXQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkxHRkx4jIqaeJdNhWWTuAoRZWqmXXn7B9x8Q3 BSWke7C7tTwZbyvFlrj8UQxr9UTozzYMVaQqh81Ign0RFgHm8vsmmekY7c6hzKiFyOwnwL6SAOH7 l985v/xBXxv8z2rvnDLq6gQcp6hiIFREMknnbnUSJYZxf+Sqz6J6U76dHyy/GkpR5jvbSUL9dQGF CliPzEwpQVxjfnf2a+WT5f94AOH2xOv1G1yWoMh1Jp9nzjwq0eiXBL5HTSmICHg84b9DMnCz8xA6 Q7QYb6kBtS95odEEUkJw0UVCIOhGaMVwYzQPKmCW4ev+T5cS0cYVduSeOp376Z+3PswXWlf6qn3z AgMBAAGjggFkMIIBYDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCFGl+e22tg8ZSwE4kRe4t fB9/yTAfBgNVHSMEGDAWgBSCFGl+e22tg8ZSwE4kRe4tfB9/yTAOBgNVHQ8BAf8EBAMCAQYwgaoG A1UdHwSBojCBnzBjoGGgX4ZdbGRhcDovL2xkYXBwa2lmZi5kaWZlc2EuaXQ6Mzg5L2NuPWNybC1m aXJtYWRpZ2l0YWxlLXRzYTIwMDksbz1NaW5pc3Rlcm8lMjBkZWxsYSUyMERpZmVzYSxjPUlUMDig NqA0hjJodHRwOi8vd3d3LnBraS5kaWZlc2EuaXQvZmlybWFkaWdpdGFsZS10c2EyMDA5LmNybDBQ BgNVHSAESTBHMEUGCSsGAQQB7U8BATA4MDYGCCsGAQUFBwIBFipodHRwOi8vd3d3LnBraS5kaWZl c2EuaXQvZmlybWFkaWdpdGFsZS5wZGYwDQYJKoZIhvcNAQEFBQADggEBAD0rA19FpI+O9R2uQ7oZ OIqKpeSW4/cT1V5pzZGKjlgeff1Ik0pv/bElfIFnWi6keOwBS+vd8q7E5EYw7Jy9ERw8uqcLRtOp fpC9Wiab3lzOol+rbiP+V8gISXx+dHSsAWbAk2bX6EC0YDNupTGtMFIlSe6AxuY1pyEeCrYcJzga wtSWEMUOuKacBTAFWYRwMcCubsSHXLIM0Fb/Fl909wFnWmi/f+b8psk4yUan3Yu1PtyIOFvNak2X SMUnwc2fRx+UcmWVULX/Cd7OBle2d1xi/quSp99Ix2ldklCskMSussbNnVs7Xa/QjDtZuQgbsD/O oKhRGTEQ5tNEmpfLiSA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Time Stamp Authority PKI di Firma Qualificata - EMISSIONE 2009 Issuer SERIAL NUMBER: 97355240587 Issuer OU: S.M.D. - C.do C4 Difesa Issuer O: Ministero della Difesa Issuer C: IT Subject E: [email protected] Subject CN: Time Stamp Authority PKI di Firma Qualificata - EMISSIONE 2009 Subject SERIAL NUMBER: 97355240587 Subject OU: S.M.D. - C.do C4 Difesa Subject O: Ministero della Difesa Subject C: IT Valid from: Mon Jun 08 14:48:45 CEST 2009 ITALIA (ITALY) - Trusted List ID: ID100001 Page 163 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Sat Jun 08 14:48:45 CEST 2024 Public Key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asic Constraints IsCA: true Subject Key Identifier 82:14:69:7E:7B:6D:AD:83:C6:52:C0:4E:24:45:EE:2D:7C:1F:7F:C9 Authority Key Identifier 82:14:69:7E:7B:6D:AD:83:C6:52:C0:4E:24:45:EE:2D:7C:1F:7F:C9 CRL Distribution Points ldap://ldappkiff.difesa.it:389/cn=crl-firmadigitale-tsa2009,o=Ministero%20della%20Difesa,c=IT http://www.pki.difesa.it/firmadigitale-tsa2009.crl Certificate Policies Policy OID: 1.3.6.1.4.1.14031.1.1 CPS pointer: http://www.pki.difesa.it/firmadigitale.pdf Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 4A:3D:31:1B:7E:67:C9:5C:B9:E1:6B:CA:25:46:D3:85:60:1A:19:C9:37:7A:E7:C8:B8:0C:75:D1:5B :25:29:35 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2009-06-08T14:48:45Z 9.4 - Service : CN=Ministero della Difesa - CA di Firma Digitale,2.5.4.5=#130b3937333535323430353837,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Ministero della Difesa - CA di Firma Digitale,2.5.4.5=#130b3937333535323430353837,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Name Name Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 164 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 6936921824674324395 X509 Certificate -----BEGIN CERTIFICATE----MIIHjjCCBXagAwIBAgIIYETlpWpeH6swDQYJKoZIhvcNAQELBQAwgZ4xCzAJBgNVBAYTAklUMR8w HQYDVQQKDBZNaW5pc3Rlcm8gZGVsbGEgRGlmZXNhMSAwHgYDVQQLDBdTLk0uRC4gLSBDLmRvIEM0 IERpZmVzYTEUMBIGA1UEBRMLOTczNTUyNDA1ODcxNjA0BgNVBAMMLU1pbmlzdGVybyBkZWxsYSBE aWZlc2EgLSBDQSBkaSBGaXJtYSBEaWdpdGFsZTAeFw0xNDA3MTUwODExNDFaFw00NDA3MTUwODEx NDFaMIGeMQswCQYDVQQGEwJJVDEfMB0GA1UECgwWTWluaXN0ZXJvIGRlbGxhIERpZmVzYTEgMB4G A1UECwwXUy5NLkQuIC0gQy5kbyBDNCBEaWZlc2ExFDASBgNVBAUTCzk3MzU1MjQwNTg3MTYwNAYD VQQDDC1NaW5pc3Rlcm8gZGVsbGEgRGlmZXNhIC0gQ0EgZGkgRmlybWEgRGlnaXRhbGUwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDHkUnaWNJoyoBbHXc3dncmKMvQU136qBz3zk9WPV0R /OJQwJUWuRbhu18hThgezyBbKP1MrrmgSFYChOphf3I+7VqGAVZ+MnsF7qTMCU0lm15IZCLLdC/Y t75Do4tTR1gDdfc9DWvpb1J1QlmtgcV7yvnoDS1oMi/eNPfOm64JLhtoyuJeSwgBBV/Q8mBUIJbh GQkmV0Eg3s2sS7puZ/RxTgb+7YtrcEaZ/GZQcWan29/uXtbdPBuLa3jWag7GsvYyknRzWd+XSE/1 FZbFYQB5m3qve/ocyx5kuzFGWX7nhnrrLVzqnKUfrJjqbzUNFMIDed+nTBoxD2qxslEqnKuJr1yE smSpa+N03Q0pjya5A4+SBmsVdl7iCO9rIoQ+tMUUfDJAqfDSXYcv8Gd1bzQbxwLGNgnKcxQxHUlT Iux1gx/T2UQJLzS3ndXG8CDMwD/E4fHFzMQ0Q1rhKrWMtWqwf2d4Da1FFj41FWnDOYLZ0siO/OCG I0BLFH9i32K0nkIwu2aIgmQteWaT06orv+2Nmzx12WTQrFSAZ1md1Ln8fQEacw4App8n/FrSAUFh +z6sS6/S0K7ttTnPHTP1WUvVUK1oPVdPzIQlBtB9XzFxMkJVwoHRy//L9ZCARqgovmRd0GrPP/cu NUfctFoSznhcI5nQU0lpzj6ivtIc4yhUsQIDAQABo4IBzDCCAcgwNwYIKwYBBQUHAQEEKzApMCcG CCsGAQUFBzABhhtodHRwOi8vb2NzcHBraWZmLmRpZmVzYS5pdC8wHQYDVR0OBBYEFOA5UWCzMFBT pTJiIbuyiCHTtwUTMBIGA1UdEwEB/wQIMAYBAf8CAQAwWgYDVR0gBFMwUTBPBgorBgEEAe1PAgEB MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cucGtpLmRpZmVzYS5pdC9NYW51YWxlT3BlcmF0aXZv RGlmZXNhLnBkZjCB7QYDVR0fBIHlMIHiMDKgMKAuhixodHRwOi8vd3d3LnBraS5kaWZlc2EuaXQv Y2FmaXJtYWRpZ2l0YWxlLmNybDCBq6CBqKCBpYaBomxkYXA6Ly9sZGFwcGtpZmYuZGlmZXNhLml0 OjM4OS9DTj1NaW5pc3Rlcm8lMjBkZWxsYSUyMERpZmVzYSUyMC0lMjBDQSUyMGRpJTIwRmlybWEl MjBEaWdpdGFsZSxPVT1TLk0uRC4lMjAtJTIwQy5kbyUyMEM0JTIwRGlmZXNhLE89TWluaXN0ZXJv JTIwZGVsbGElMjBEaWZlc2EsQz1JVDAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIB AHGdjKd0QFzbnXAtuXhWqr7Zpx8rj3K2fzWz4ePa7UePODghr906sHjKHlC1eJ3aI6svVfLsaLUf xIxbYZ8i/g2pfJNRrMmrFbFNxRMrzNdIVve17D9yE04cpFpVDHGqOtPUtsGkQ/dGG13ZcH294lck JRgxx8Eiy+oxhQuslJVytv+LIhkvhpAWhl314ApeB6ag6ed3tBx3Z4rDxjIPHvObiUWhq6jjBunT DSuvQ44BQ6434BRPLlIzvac84M/Q5nk6UJNDxyrSY7aJ4t+jh3uC+5G7P71uvhoPrLyen1aBftAv liHHGUE0cvTP0Qdn/qQiE1mygwli58AZSv1AATGgAyalwc5qDj3RX81f8+DoIMQigyHx/lzS2Oov /G+CXFsb5/xGqZ8MYKMgUlug/ngBZ094UEFov6B6CcW5y+kofPgPV8QZJJmo0ECfJKgF41Pmfcmp e2zYyK/0EzzFX7LHGPYGUmD42JkwCaCQQonZCPHn5dZJP9Hgj4fBtqaC/2Ee/DQMLeY6aNh1h1I2 7mXsYyOzClpKdHT35G7koMaCLtDMMzONOpe82mBqVGEiOk8qmFDXmYojEsCRYulCcBAl4VR99Rod F/8itXMswGI1lP8JqbpmIgrBHg+aks0D6+Fo1IFT1s4dFCF3VzkylSnqyQOKv96eOFe4FYz8tKbv -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Ministero della Difesa - CA di Firma Digitale Issuer SERIAL NUMBER: 97355240587 Issuer OU: S.M.D. - C.do C4 Difesa Issuer O: Ministero della Difesa Issuer C: IT Subject CN: Ministero della Difesa - CA di Firma Digitale Subject SERIAL NUMBER: 97355240587 Subject OU: S.M.D. - C.do C4 Difesa Subject O: Ministero della Difesa Subject C: IT Valid from: Tue Jul 15 10:11:41 CEST 2014 Valid to: Fri Jul 15 10:11:41 CEST 2044 Public Key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uthority Info Access http://ocsppkiff.difesa.it/ Subject Key Identifier E0:39:51:60:B3:30:50:53:A5:32:62:21:BB:B2:88:21:D3:B7:05:13 ITALIA (ITALY) - Trusted List ID: ID100001 Page 165 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.14031.2.1.1 CPS pointer: http://www.pki.difesa.it/ManualeOperativoDifesa.pdf CRL Distribution Points http://www.pki.difesa.it/cafirmadigitale.crl ldap://ldappkiff.difesa.it:389/CN=Ministero%20della%20Difesa%20%20CA%20di%20Firma%20Digitale,OU=S.M.D.%20%20C.do%20C4%20Difesa,O=Ministero%20della%20Difesa,C=IT Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 05:3A:A9:AE:51:A7:B6:09:CC:96:1E:58:BD:FD:9E:85:B6:0E:97:3A:DF:44:AE:C3:F0:23:58:58:7 C:30:31:B7 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2014-07-15T08:12:00Z 9.5 - Service : CN=Ministero della Difesa - Time Stamp Authority,2.5.4.5=#130b3937333535323430353837,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Ministero della Difesa - Time Stamp Authority,2.5.4.5=#130b3937333535323430353837,OU=S.M.D. - C.do C4 Difesa,O=Ministero della Difesa,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 4977308710577825761 ITALIA (ITALY) - Trusted List ID: ID100001 Page 166 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIHjzCCBXegAwIBAgIIRRLz5r9y5+EwDQYJKoZIhvcNAQELBQAwgZ4xCzAJBgNVBAYTAklUMR8w HQYDVQQKDBZNaW5pc3Rlcm8gZGVsbGEgRGlmZXNhMSAwHgYDVQQLDBdTLk0uRC4gLSBDLmRvIEM0 IERpZmVzYTEUMBIGA1UEBRMLOTczNTUyNDA1ODcxNjA0BgNVBAMMLU1pbmlzdGVybyBkZWxsYSBE aWZlc2EgLSBUaW1lIFN0YW1wIEF1dGhvcml0eTAeFw0xNDA3MTUwOTA1MTZaFw00NDA3MTQwOTA1 MTZaMIGeMQswCQYDVQQGEwJJVDEfMB0GA1UECgwWTWluaXN0ZXJvIGRlbGxhIERpZmVzYTEgMB4G A1UECwwXUy5NLkQuIC0gQy5kbyBDNCBEaWZlc2ExFDASBgNVBAUTCzk3MzU1MjQwNTg3MTYwNAYD VQQDDC1NaW5pc3Rlcm8gZGVsbGEgRGlmZXNhIC0gVGltZSBTdGFtcCBBdXRob3JpdHkwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCp3sbGYzPpL8mx4UX3pdHi4fX8oZB8bHbRlx0vO4gy kzIPI3PGnPppJwe7q1oiCb0lr+gppOztjIYt5hPVUuEAzbkk3jtUOp+Zcy2h8lBossvYAdNQA3XO 3LxwgWXLbRGKosZjCZ5Rhp6+YYJjntlXEfhDl0ga1/XBtJeCmD+41BghL+wJ5vZBwslM+CAsdqr3 bV6/AgWIx4kW+ZnWXuAN20H/YRb5/QL2Xf5450gDpgEAd/0L9e9YitIKd3HDWDQQNyA0hKlYZLVT 1PZ8HupnaSIB3kiwruDymQyUfDqCErG3dq9b4LVGs3LVs6dG9fCj0BaJ61pf0sLt4GrqQSry2s+U 5RqiSV8YaH/SULAZ4YocGSp1OeRWHyIu/me3uOZZcA8TCG8tA7NHrxt5z3nio/zCaNpqmuQINpGt 8ONywUVhkli2aoAM5RjwTh8Ed5NsJFsRPL+NIoSBCt7N90JEZHBRMnF/YICqv2PRaSX+yA1PgEG4 bMAVzAlqEr+hdEPutG/M5KRUsx2cXNBs5iYBEqEyHOfvOAMst54WxcZXTaWLUWRP0lO76FRt42V3 VUFVdWPGSURxAwjTnaZaV0MR7aVF9kI5MQ5BpuSFn/yUquHI12Ynth6DTI+UXkoSWxe4DCtC+hpo omVLtY41ptlq2ih3VrgIJHWOig7khSDLFQIDAQABo4IBzTCCAckwNwYIKwYBBQUHAQEEKzApMCcG CCsGAQUFBzABhhtodHRwOi8vb2NzcHBraWZmLmRpZmVzYS5pdC8wHQYDVR0OBBYEFMRwrM/wHYfV ozn8WmPRMP3KLQ3yMBIGA1UdEwEB/wQIMAYBAf8CAQAwWgYDVR0gBFMwUTBPBgorBgEEAe1PAgED MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cucGtpLmRpZmVzYS5pdC9NYW51YWxlT3BlcmF0aXZv RGlmZXNhLnBkZjCB7gYDVR0fBIHmMIHjMDWgM6Axhi9odHRwOi8vd3d3LnBraS5kaWZlc2EuaXQv dGltZXN0YW1wYXV0aG9yaXR5LmNybDCBqaCBpqCBo4aBoGxkYXA6Ly9sZGFwcGtpZmYuZGlmZXNh Lml0OjM4OS9DTj1NaW5pc3Rlcm8lMjBkZWxsYSUyMERpZmVzYSUyMC0lMjBUaW1lJTIwU3RhbXAl MjBBdXRob3JpdHksT1U9Uy5NLkQuJTIwLSUyMEMuZG8lMjBDNCUyMERpZmVzYSxPPU1pbmlzdGVy byUyMGRlbGxhJTIwRGlmZXNhLEM9SVQwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IC AQBmAdteOEAkKJu5UGp3G2+6MbB4D7lUJyBwVNSO9uyBsdcodqDV2OmO/MJv2zLWR/1ZOIIv52eR AjG/vuZAa0vptf7SkICqC6d1JotpTP1uFVUj9kjsUvuCuGO+QxRT0J/fJ5aG8JMisxHj04YZsVdP uYgw8HGxw90zFADcu+zaDLnCza3pIm1RcaZ6tj1I2ajfkt8AQMiBWZ3Y64vANk+/G2Apra7D1JL3 kIknxQ5Jist0YIMe7EV308Ijui0Q19o4FaLXcc6Fby2UpWUeZsCDQBZuW3Z7o65dVrse/SKpACB6 Cgys2EGgCwhTLFvClIefhn+B6spcYTN45AgztT4WObSsFAY+IcDktjJxiKtkQYAL5FSePbk7qHV5 h8pUA8rqB7Qx5vGQmOz7jIqMH1EiCXfsyWGoxW5EYuHAC82Z/RI3ADicCa5rp2h1pW6I5GmtJGkr Z2YzLS4LIZiDvsUILoi+u2fFNJne3VyWjxhoQ1/UIe267yqjB8K168YRqtzbQIli5P6PLzF4CyET c+un1nHc5F7FWkxLsi3vTEycmERnzY4wZLRXCNPVvKMaof3C0fRMOuX6Q69MIBScQIXFEUBk2gOK cg2JC8Vg9oCT6l2QqChqrL0SEy48Wq/ehCkxtyq3/Qz+kYMdwbPlt8VijSZwwirp+u4kIE3QWkf4 Lw== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Ministero della Difesa - Time Stamp Authority Issuer SERIAL NUMBER: 97355240587 Issuer OU: S.M.D. - C.do C4 Difesa Issuer O: Ministero della Difesa Issuer C: IT Subject CN: Ministero della Difesa - Time Stamp Authority Subject SERIAL NUMBER: 97355240587 Subject OU: S.M.D. - C.do C4 Difesa Subject O: Ministero della Difesa Subject C: IT Valid from: Tue Jul 15 11:05:16 CEST 2014 Valid to: Thu Jul 14 11:05:16 CEST 2044 Public Key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uthority Info Access http://ocsppkiff.difesa.it/ Subject Key Identifier C4:70:AC:CF:F0:1D:87:D5:A3:39:FC:5A:63:D1:30:FD:CA:2D:0D:F2 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.14031.2.1.3 CPS pointer: http://www.pki.difesa.it/ManualeOperativoDifesa.pdf ITALIA (ITALY) - Trusted List ID: ID100001 Page 167 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points http://www.pki.difesa.it/timestampauthority.crl ldap://ldappkiff.difesa.it:389/CN=Ministero%20della%20Difesa%20%20Time%20Stamp%20Authority,OU=S.M.D.%20%20C.do%20C4%20Difesa,O=Ministero%20della%20Difesa,C=IT Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D0:A9:7C:4C:2A:F9:C8:88:A2:EB:A3:82:07:73:98:8A:F3:D8:34:4B:18:73:FA:2D:DB:B8:E4:5D:6 E:07:D3:2C Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2014-07-15T09:05:16Z Page 168 ETSI 2014 - TSL HR - PDF/A-1b generator 10 - TSP: Consiglio Nazionale del Notariato TSP Name Name [ en ] Consiglio Nazionale del Notariato Name [ it ] Consiglio Nazionale del Notariato Name [ en ] Consiglio Nazionale del Notariato Name [ it ] Consiglio Nazionale del Notariato Name [ it ] VATIT-80052590587 Name [ en ] VATIT-80052590587 Street Address [ en ] via flaminia 160 Locality [ en ] roma Postal Code [ en ] 00196 Country Name [ en ] IT Street Address [ it ] via flaminia 160 Locality [ it ] roma Postal Code [ it ] 00196 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://ca.notariato.it/Tsp_Information.asp URI mailto:[email protected] TSP Information URI URI [ en ] http://ca.notariato.it/Tsp_Information.asp URI [ it ] http://ca.notariato.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 169 ETSI 2014 - TSL HR - PDF/A-1b generator 10.1 - Service : [email protected],CN=Consiglio Nazionale del Notariato-Firma Digitale,O=Consiglio Nazionale del Notariato,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] [email protected],CN=Consiglio Nazionale del Notariato-Firma Digitale,O=Consiglio Nazionale del Notariato,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 5910 X509 Certificate -----BEGIN CERTIFICATE----MIIE7zCCA9egAwIBAgICFxYwDQYJKoZIhvcNAQEFBQAwgaAxCzAJBgNVBAYTAklUMSowKAYDVQQK EyFDb25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8xOTA3BgNVBAMTMENvbnNpZ2xpbyBO YXppb25hbGUgZGVsIE5vdGFyaWF0by1GaXJtYSBEaWdpdGFsZTEqMCgGCSqGSIb3DQEJARYbY2Vy dGlmaWNhemlvbmVAbm90YXJpYXRvLml0MB4XDTAyMDkzMDEwMjYxOVoXDTA4MDkzMDEwMjYxOVow gaAxCzAJBgNVBAYTAklUMSowKAYDVQQKEyFDb25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3Rhcmlh dG8xOTA3BgNVBAMTMENvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0by1GaXJtYSBEaWdp dGFsZTEqMCgGCSqGSIb3DQEJARYbY2VydGlmaWNhemlvbmVAbm90YXJpYXRvLml0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ntn+Oo+p1l5U1K6/xHPKaBxqquPpZ1Wz9S6ozzm6pHV ItihMS415R/VSot1fRZkIKlub54igxPBiRrdf5QVIBzuMOtM+Dq2QUqZ0dLRc44JlhW0kTmx+jpC CTrqzBCeO7E1jBCpJh1/o/B5M+p0XY8dSXk+CwB0/zsfJVCyQSiYiT08se0SPl6zHz5EPwLu3OTw 0l4D+5ROro3JRFiz4Lg0rA65A9h5uzlvs0/GrNq5WCHiI69gSchHhiinZ3jQjnplmaFR0lt3DlhU CVuzaPbew9aezBCuV/aqCh1WZtJXk62Nprn2z8PznvS9ceXpfwSE0khMxY7Ht/yvQ7oLuwIDAQAB o4IBLzCCASswDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwXQYDVR0gBFYwVDBSBgor BgEEAcJOAQEBMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly93d3cubm90YXJpYXRvLml0L2Zpcm1hZGln aXRhbGUvbWFudWFsZW9wZXJhdGl2bzCBiQYDVR0fBIGBMH8wfaB7oHmGd2xkYXA6Ly9sZGFwLmNh Lm5vdGFyaWF0by5pdDozODkvb3U9Q29uc2lnbGlvIE5hemlvbmFsZSBkZWwgTm90YXJpYXRvLUZp cm1hIERpZ2l0YWxlLG89Q29uc2lnbGlvIE5hemlvbmFsZSBkZWwgTm90YXJpYXRvMB0GA1UdDgQW BBTe0Elw9+eCaWyCLW58cdUESdFGTTANBgkqhkiG9w0BAQUFAAOCAQEAHVI2pN/Sx3VobEaCERQ8 tA+V6PhAm0Wtqpc0w28yas0DbQK68xqfKbi0UKu+idhAjVwoa6zIuCM4Lu30OLueuhcPlTUuxQA7 swNEj3IyoZP2cUn3UU017dgyKjxa5lNDjMlQSBAtFqq/JRSQOApB0ggA14FlMlt8w43W2D9o8NKU RnrZpz3w3koueyidQOYCgch2Xb3PpxMMWZNQLLa4PFLIJHNdxKnACFamXl4N9o5pvNMv+0xC/Pog yBx4+OxTBzyp1llxvZzwhgKGxcN0CNv0ruzMtIa7iv4sArgDHmbCbJr5Hz6qmus8S2F79PwIuQL8 aIB2hrUxUVSKC5fu4Q== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale del Notariato-Firma Digitale Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale del Notariato-Firma Digitale Subject O: Consiglio Nazionale del Notariato Subject C: IT Valid from: Mon Sep 30 12:26:19 CEST 2002 ITALIA (ITALY) - Trusted List ID: ID100001 Page 170 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Tue Sep 30 12:26:19 CEST 2008 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.1.1 CPS pointer: http://www.notariato.it/firmadigitale/manualeoperativo CRL Distribution Points ldap://ldap.ca.notariato.it:389/ou=Consiglio Nazionale del Notariato-Firma Digitale,o=Consiglio Nazionale del Notariato Subject Key Identifier DE:D0:49:70:F7:E7:82:69:6C:82:2D:6E:7C:71:D5:04:49:D1:46:4D Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 48:E6:2D:CA:98:B5:C5:49:5B:C1:30:04:6B:58:C2:58:CA:B4:CC:87:96:59:55:92:35:B6:22:5C:4E: C5:1F:6B Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2002-09-30T12:26:19Z 10.2 - Service : [email protected],CN=Consiglio Nazionale del Notariato - Servizio Firma Digitale,OU=Servizio Firma Digitale,O=Consiglio Nazionale del Notariato,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] [email protected],CN=Consiglio Nazionale del Notariato - Servizio Firma Digitale,OU=Servizio Firma Digitale,O=Consiglio Nazionale del Notariato,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 171 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFgTCCBGmgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBzTELMAkGA1UEBhMCSVQxKjAoBgNVBAoT IUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0bzEgMB4GA1UECxMXU2Vydml6aW8gRmly bWEgRGlnaXRhbGUxRDBCBgNVBAMTO0NvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0byAt IFNlcnZpemlvIEZpcm1hIERpZ2l0YWxlMSowKAYJKoZIhvcNAQkBFhtjZXJ0aWZpY2F6aW9uZUBu b3RhcmlhdG8uaXQwHhcNMDUwNjI0MDg1MzE4WhcNMTUwNjI0MDg1MzE4WjCBzTELMAkGA1UEBhMC SVQxKjAoBgNVBAoTIUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0bzEgMB4GA1UECxMX U2Vydml6aW8gRmlybWEgRGlnaXRhbGUxRDBCBgNVBAMTO0NvbnNpZ2xpbyBOYXppb25hbGUgZGVs IE5vdGFyaWF0byAtIFNlcnZpemlvIEZpcm1hIERpZ2l0YWxlMSowKAYJKoZIhvcNAQkBFhtjZXJ0 aWZpY2F6aW9uZUBub3RhcmlhdG8uaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI JR3azXZtq6wDILPBdEUXVyg7aHcAixO2CATg9hZJ2YfddhWNSlkRawWpkwm2sqa4eIA03B84JaDm HTnBOdS8LlH8ASPOz1HMSg73mp4SqU1lfkZJcA61yiybhdFj32vdwD2wpuXxQVEVPYF6EgJdS8Yg Hn7+D7SetuAuwRpe1MW4gCcRtfB7e/yGLBY4NdOA44BaLnUQqP9+0X5bRq8vXnn2sBp/h/CLU7Ff 9IaPMOU3C0bkPItmaCqIYrAZwbkCaXqh75/9596cGDlmRCCh5twRH60YB3idVtc5w95H8siJz8wY vBuwBhpur08jKKSTOZld6XwtxuKDhyysFt5VAgMBAAGjggFoMIIBZDAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBBjBXBgNVHSAEUDBOMEwGCisGAQQBwk4BAQIwPjA8BggrBgEFBQcCARYw aHR0cDovL2NhLm5vdGFyaWF0by5pdC9tYW51YWxlb3BlcmF0aXZvL01PdjIucGRmMIHIBgNVHR8E gcAwgb0wgbqggbeggbSGgbFsZGFwOi8vbGRhcC5jYS5ub3RhcmlhdG8uaXQvb3UlM0RDb25zaWds aW8lMjBOYXppb25hbGUyMGRlbCUyME5vdGFyaWF0byUyMC0lMjBTZXJ2aXppbyUyMEZpcm1hJTIw RGlnaXRhbGUlMkNvJTNEQ29uc2lnbGlvJTIwTmF6aW9uYWxlJTIwZGVsJTIwTm90YXJpYXRvP2Nl cnRpZmljYXRlcmV2b2NhdGlvbmxpc3QwHQYDVR0OBBYEFCaIa3pQyvEAu91dIf5snjjcPcLVMA0G CSqGSIb3DQEBBQUAA4IBAQBT2G5MWHBNwtXV233CK+HA2RkT4cu7a318tTFTJ2sdaSofcCX4INO8 prTmqLHXjkYNHBx+akx1PnEB5m2Cul8VfgkU8I83vJqTukIQug2Clh1qYrnzuG2NTEMWSCkaLNsZ hORPo1zjn/JMutDheIEl8icH4YCmkYsuosPXn/EIJtTrRmNBppZJkE0/hBQLTQL4iwzV0VYqNQ2L 5wYZCaQS7AHbEYtp/ihDyeixQWSgbzCFH78ee11l9o4Y7P5hJ0P4WO6xmGVE8ah7LiN3CR5f/SOb EgF4u2Lz605+OCsfogeUzOGDY4M3CsCSvrYLlhV6HIabCqnyxxMW/XZxmuey -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale del Notariato - Servizio Firma Digitale Issuer OU: Servizio Firma Digitale Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale del Notariato - Servizio Firma Digitale Subject OU: Servizio Firma Digitale Subject O: Consiglio Nazionale del Notariato Subject C: IT Valid from: Fri Jun 24 10:53:18 CEST 2005 Valid to: Wed Jun 24 10:53:18 CEST 2015 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.1.2 CPS pointer: http://ca.notariato.it/manualeoperativo/MOv2.pdf CRL Distribution Points ldap://ldap.ca.notariato.it/ou%3DConsiglio%20Nazionale20del%20Notariato%20%20Servizio%20Firma%20Digitale%2Co%3DConsiglio%20Nazionale%20del%20Notariato?certifi caterevocationlist Subject Key Identifier 26:88:6B:7A:50:CA:F1:00:BB:DD:5D:21:FE:6C:9E:38:DC:3D:C2:D5 Key Usage: keyCertSign - cRLSign ITALIA (ITALY) - Trusted List ID: ID100001 Page 172 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint algorithm: SHA-256 Thumbprint: A9:C8:96:18:0F:41:D1:00:B3:E5:BE:1A:DA:27:07:22:B7:59:87:0C:96:F1:C8:8E:E1:9C:5E:E4:28: 91:04:AC Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2005-06-24T10:53:18Z 10.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 10.3 - Service : CN=Consiglio Nazionale del Notariato Certification Authority,OU=Servizio Firma Digitale,O=Consiglio Nazionale del Notariato,C=IT,serialNumber=80052590587 Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Consiglio Nazionale del Notariato Certification Authority,OU=Servizio Firma Digitale,O=Consiglio Nazionale del Notariato,C=IT,serialNumber=80052590587 Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 424 X509 Certificate -----BEGIN CERTIFICATE----MIIF6DCCBNCgAwIBAgICAagwDQYJKoZIhvcNAQEFBQAwgbUxFDASBgNVBAUTCzgwMDUyNTkwNTg3 MQswCQYDVQQGEwJJVDEqMCgGA1UECgwhQ29uc2lnbGlvIE5hemlvbmFsZSBkZWwgTm90YXJpYXRv MSAwHgYDVQQLDBdTZXJ2aXppbyBGaXJtYSBEaWdpdGFsZTFCMEAGA1UEAww5Q29uc2lnbGlvIE5h emlvbmFsZSBkZWwgTm90YXJpYXRvIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA4MDcxNTEz MTk0OFoXDTIwMDcxNTEzMTk0OFowgbUxFDASBgNVBAUTCzgwMDUyNTkwNTg3MQswCQYDVQQGEwJJ VDEqMCgGA1UECgwhQ29uc2lnbGlvIE5hemlvbmFsZSBkZWwgTm90YXJpYXRvMSAwHgYDVQQLDBdT ZXJ2aXppbyBGaXJtYSBEaWdpdGFsZTFCMEAGA1UEAww5Q29uc2lnbGlvIE5hemlvbmFsZSBkZWwg Tm90YXJpYXRvIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAoySDKkcO9F8sk5nBH0Bx83diJ6keoEnv/FtSstTubV1fVDedwVbX2o4AfzuchJ9U nSzVFQ01dMO7W8VoMEEFpiEPHL8jT83PLTlJeENFfcmGxgHlb9xth5DuWjklnILurZqoCWcBJI3F KVFAXJbD056EiaseyMz7NB/QliPsNb/Ri+DGXAZOI55/H8IctkfQt/muo8Dyc6DAlacDlO/L0eyz rOSApsasW9GUbVeM0eBwYVu2QZ9tl8AAzru5DArlNsJU1z/5DFuC2jQUIA6dsDIoSCR9cWrgITmk l/m4kmXtssHgNctbslGamhi4Bs0tb58HmQrwZUH5a3c3S8fVmwIDAQABo4IB/jCCAfowDwYDVR0T AQH/BAUwAwEB/zCBogYDVR0gBIGaMIGXMEsGCisGAQQBwk4BAQMwPTA7BggrBgEFBQcCARYvaHR0 cDovL2NhLm5vdGFyaWF0by5pdC9kb2N1bWVudGF6aW9uZS9NT0NOTi5wZGYwSAYGBACLMAEBMD4w PAYIKwYBBQUHAgEWMGh0dHA6Ly9jYS5ub3RhcmlhdG8uaXQvZG9jdW1lbnRhemlvbmUvQ1BTQ05O LnBkZjCB6gYDVR0fBIHiMIHfMIHcoIHZoIHWhoHTbGRhcDovL2xkYXAuY2Eubm90YXJpYXRvLm9y Zy9jbiUzZENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMGRlbCUyME5vdGFyaWF0byUyMENlcnRpZmlj YXRpb24lMjBBdXRob3JpdHksb3UlM2RTZXJ2aXppbyUyMEZpcm1hJTIwRGlnaXRhbGUsbyUzZENv bnNpZ2xpbyUyME5hemlvbmFsZSUyMGRlbCUyME5vdGFyaWF0byxjJTNkSVQ/Y2VydGlmaWNhdGVS ZXZvY2F0aW9uTGlzdDAOBgNVHQ8BAf8EBAMCAQYwJgYDVR0SBB8wHYEbY2VydGlmaWNhemlvbmVA bm90YXJpYXRvLml0MB0GA1UdDgQWBBTUzlnXmPzPylrOkS+qVEFqLmNAeDANBgkqhkiG9w0BAQUF AAOCAQEASN2z6UzNYYx6VjXsF+6SB+LFDhLhVkr6NAZbYiVwOrg2Ur4aS3C9kBE59olGkdyC9FCN 3XLCt9spBts3IRnjOj0PXJ/+2263I55qa2alBeLzr3oCQjXSXSTZlpZBK9Exc/uJff0whWSy28oL 0HeUYZUrWfBRZQX+AtqgzgHrmbDjBs80UEunr67QlCfcjV6Jl+UDTZZyEUKoDOuvgYsbG/Q4E6XN Xw4ngMM0tj9PCv8oNQWuclMoqwlv5aC1UNauMpnTjFjQx9azgs4ug52zD9f2QfCuKzbVAaVqIJXU pPqpA6B7oTLS2WZVcjGicoZyrT/P6OBnrGLWAD9nV63gqw== -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 173 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: Consiglio Nazionale del Notariato Certification Authority Issuer OU: Servizio Firma Digitale Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Issuer SERIAL NUMBER: 80052590587 Subject CN: Consiglio Nazionale del Notariato Certification Authority Subject OU: Servizio Firma Digitale Subject O: Consiglio Nazionale del Notariato Subject C: IT Subject SERIAL NUMBER: 80052590587 Valid from: Tue Jul 15 15:19:48 CEST 2008 Valid to: Wed Jul 15 15:19:48 CEST 2020 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:A3:24:83:2A:47:0E:F4:5F:2C:93:99:C1:1F:40:71:F3:77:62:27:A9:1E:A0:49:EF:FC:5B:52:B2:D4:EE:6D:5D:5F:54:37 :9D:C1:56:D7:DA:8E:00:7F:3B:9C:84:9F:54:9D:2C:D5:15:0D:35:74:C3:BB:5B:C5:68:30:41:05:A6:21:0F:1C:BF:23:4F:CD:CF:2D:39:49:78:43:45:7D:C9:86:C6:01:E5:6F:DC:6D:87:90:EE:5A:39:25:9C:82:EE:AD:9A:A8:09 :67:01:24:8D:C5:29:51:40:5C:96:C3:D3:9E:84:89:AB:1E:C8:CC:FB:34:1F:D0:96:23:EC:35:BF:D1:8B:E0:C6:5C:06:4E:23:9E:7F:1F:C2:1C:B6:47:D0:B7:F9:AE:A3:C0:F2:73:A0:C0:95:A7:03:94:EF:CB:D1:EC:B3:AC:E4:8 0:A6:C6:AC:5B:D1:94:6D:57:8C:D1:E0:70:61:5B:B6:41:9F:6D:97:C0:00:CE:BB:B9:0C:0A:E5:36:C2:54:D7:3F:F9:0C:5B:82:DA:34:14:20:0E:9D:B0:32:28:48:24:7D:71:6A:E0:21:39:A4:97:F9:B8:92:65:ED:B2:C1:E0:35:C B:5B:B2:51:9A:9A:18:B8:06:CD:2D:6F:9F:07:99:0A:F0:65:41:F9:6B:77:37:4B:C7:D5:9B:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.1.3 CPS pointer: http://ca.notariato.it/documentazione/MOCNN.pdf Policy OID: 0.4.0.1456.1.1 CPS pointer: http://ca.notariato.it/documentazione/CPSCNN.pdf CRL Distribution Points ldap://ldap.ca.notariato.org/cn%3dConsiglio%20Nazionale%20del%20Notariato%20Certification%2 0Authority,ou%3dServizio%20Firma%20Digitale,o%3dConsiglio%20Nazionale%20del%20Notaria to,c%3dIT?certificateRevocationList Issuer Alternative Name [email protected] Subject Key Identifier D4:CE:59:D7:98:FC:CF:CA:5A:CE:91:2F:AA:54:41:6A:2E:63:40:78 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 60:E4:AA:F5:17:C9:4A:E6:3D:B0:51:F2:F7:D8:F2:3B:20:87:A4:51:91:A5:DA:77:A5:9E:20:5B:89: 2F:F8:86 ITALIA (ITALY) - Trusted List ID: ID100001 Page 174 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2008-07-15T15:19:48Z 10.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 10.4 - Service : [email protected],CN=Consiglio Nazionale del Notariato-Time Stamp,O=Consiglio Nazionale del Notariato,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] [email protected],CN=Consiglio Nazionale del Notariato-Time Stamp,O=Consiglio Nazionale del Notariato,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIID3DCCA0WgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBnDELMAkGA1UEBhMCSVQxKjAoBgNVBAoT IUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0bzE1MDMGA1UEAxMsQ29uc2lnbGlvIE5h emlvbmFsZSBkZWwgTm90YXJpYXRvLVRpbWUgU3RhbXAxKjAoBgkqhkiG9w0BCQEWG2NlcnRpZmlj YXppb25lQG5vdGFyaWF0by5pdDAeFw0wMjA5MjcxNjA0MDhaFw0wNTA5MjYxNjA0MDhaMIGcMQsw CQYDVQQGEwJJVDEqMCgGA1UEChMhQ29uc2lnbGlvIE5hemlvbmFsZSBkZWwgTm90YXJpYXRvMTUw MwYDVQQDEyxDb25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8tVGltZSBTdGFtcDEqMCgG CSqGSIb3DQEJARYbY2VydGlmaWNhemlvbmVAbm90YXJpYXRvLml0MIGfMA0GCSqGSIb3DQEBAQUA A4GNADCBiQKBgQCiPL8jghGMTq7ieEY2R/HzrZUZmPA8UXG45+vCpPnpRCxArnHFOIuWxBjIIEnR TbQKk+vrFUnLzBxqLpBMhopJ8i4PyM8PEt7TNvgMbihwCE6MQBbQTQ6a4YXg+rz3Crx3/VueQRiB lGwrdhPqkPEnb067FTjsog9DYX+nKmaqZQIDAQABo4IBKjCCASYwDwYDVR0TAQH/BAUwAwEB/zAO BgNVHQ8BAf8EBAMCAQYwXQYDVR0gBFYwVDBSBgorBgEEAcJOAQEBMEQwQgYIKwYBBQUHAgEWNmh0 dHA6Ly93d3cubm90YXJpYXRvLml0L2Zpcm1hZGlnaXRhbGUvbWFudWFsZW9wZXJhdGl2bzCBhAYD VR0fBH0wezB5oHegdYZzbGRhcDovL2xkYXAuY2Eubm90YXJpYXRvLml0OjM4OS9vdT1Db25zaWds aW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8tVGltZSBTdGFtcCxvPUNvbnNpZ2xpbyBOYXppb25h bGUgZGVsIE5vdGFyaWF0bzAdBgNVHQ4EFgQUIuBRZaHydh10YyNwrthViTeEP+MwDQYJKoZIhvcN AQEFBQADgYEASfpdEgpdHMloS9HqIrmYtormTKtpy8ly6+Un+0hQWpQcvIx9u49PUBTa6PtoB2Dk bHKUEZfSMqM2RLCySZt2cH4RCtRdhufpK9ueOf9bZmHnfjtvyh6NC+0AldB5CwIaX6nvPynWOlKA 6XKB3SXYLo8fbf7QbqmQMQ22ey+aT80= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale del Notariato-Time Stamp ITALIA (ITALY) - Trusted List ID: ID100001 Page 175 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale del Notariato-Time Stamp Subject O: Consiglio Nazionale del Notariato Subject C: IT Valid from: Fri Sep 27 18:04:08 CEST 2002 Valid to: Mon Sep 26 18:04:08 CEST 2005 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:A2:3C:BF:23:82:11:8C:4E:AE:E2:78:46:36:47:F1:F3:AD:95:19:98:F0:3C:51:71:B8:E7:EB:C2:A4:F9:E9:44:2C:40:AE:71:C5:38:8 B:96:C4:18:C8:20:49:D1:4D:B4:0A:93:EB:EB:15:49:CB:CC:1C:6A:2E:90:4C:86:8A:49:F2:2E:0F:C8:CF:0F:12:DE:D3:36:F8:0C:6E:28:70:08:4E:8C:40:16:D0:4D:0E:9A:E1:85:E0:FA:BC:F7:0A:BC:77:FD:5B:9E:41:18:81:9 4:6C:2B:76:13:EA:90:F1:27:6F:4E:BB:15:38:EC:A2:0F:43:61:7F:A7:2A:66:AA:65:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.1.1 CPS pointer: http://www.notariato.it/firmadigitale/manualeoperativo CRL Distribution Points ldap://ldap.ca.notariato.it:389/ou=Consiglio Nazionale del Notariato-Time Stamp,o=Consiglio Nazionale del Notariato Subject Key Identifier 22:E0:51:65:A1:F2:76:1D:74:63:23:70:AE:D8:55:89:37:84:3F:E3 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 84:23:59:6A:2F:A2:14:B3:53:F4:DB:45:CE:D9:B7:3B:29:15:46:41:A8:03:47:38:1E:57:86:4F:ED:D F:D1:5F Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2002-09-27T18:04:08Z 10.5 - Service : [email protected],CN=Consiglio Nazionale del Notariato - TS Authority,O=Consiglio Nazionale del Notariato,C=IT Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Page 176 ETSI 2014 - TSL HR - PDF/A-1b generator Service type description [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] [email protected],CN=Consiglio Nazionale del Notariato - TS Authority,O=Consiglio Nazionale del Notariato,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIE7jCCA9agAwIBAgIBATANBgkqhkiG9w0BAQUFADCBoDELMAkGA1UEBhMCSVQxKjAoBgNVBAoT IUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0bzE5MDcGA1UEAxMwQ29uc2lnbGlvIE5h emlvbmFsZSBkZWwgTm90YXJpYXRvIC0gVFMgQXV0aG9yaXR5MSowKAYJKoZIhvcNAQkBFhtjZXJ0 aWZpY2F6aW9uZUBub3RhcmlhdG8uaXQwHhcNMDMwNTE1MDkwMDQxWhcNMDYwNTE0MDkwMDQxWjCB oDELMAkGA1UEBhMCSVQxKjAoBgNVBAoTIUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0 bzE5MDcGA1UEAxMwQ29uc2lnbGlvIE5hemlvbmFsZSBkZWwgTm90YXJpYXRvIC0gVFMgQXV0aG9y aXR5MSowKAYJKoZIhvcNAQkBFhtjZXJ0aWZpY2F6aW9uZUBub3RhcmlhdG8uaXQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMDhduFucx1qj4cm/Nb9E8tY3e26+NRx4rV4kakpYBQ19 umAbRlF0JeXinPHuQWVbtRRc0AuPQAAPdCHJdgg5B0MrFM1XJ5vSD+Q4jb5ODhcztvxClIYcZq5y C7nsroZmzSCjUE8QRTmteKxXs5YHHXCYnPgjiba1+h6T0NUVBpR/jktN+PZcu0aqK2XrAIjapC1I IoLj1eTUTG2LVQMIrR8HaDIdcTSdL6kcfppB59Biuz+eN9Oxfejyy6Lp62RQUK+VX9NmxXb5T+VA VfSdGzuWHAhHKpmDokKP4VdilD0DXoXqmJnEcXAw0uSGScKiIeXvCMU5R7ctYYtTYpFfAgMBAAGj ggEvMIIBKzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBdBgNVHSAEVjBUMFIGCisG AQQBwk4BAQEwRDBCBggrBgEFBQcCARY2aHR0cDovL3d3dy5ub3RhcmlhdG8uaXQvZmlybWFkaWdp dGFsZS9tYW51YWxlb3BlcmF0aXZvMIGJBgNVHR8EgYEwfzB9oHugeYZ3bGRhcDovL2xkYXAuY2Eu bm90YXJpYXRvLml0OjM4OS9vdT1Db25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8gLSBU UyBBdXRob3JpdHksbz1Db25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8wHQYDVR0OBBYE FEH2y1orclCqkPX0r23+o9p2imTrMA0GCSqGSIb3DQEBBQUAA4IBAQCOpSXzKN+a99FM3N2OKIGX qbInCLx4Q4nkTso3hCEcn2XsIyl/t3y7c9dHqK1Q73xFpbtienqT2EPDiS/NbllRuPAfK+OQnQXD G3dIAaSFY/Tq99+uRoVmAuMxB5Gn9oCp7jMWN7diSii3/LvYk41GGdnVYCaDRE4SEhMeWF8tCL/h DTFnOtUKfOqwWXiTp6UnLRUjip4fUA33x4ipWS6l+93d7LherCE0O+0RvKRIflTiuqckgLgdhwTJ CtyadW01nY7GHQztxRuXOAAXTbKY2czLyCZh2Q6zGIshIhD1wkq8jFKtvmHVntlLDKosP3p2Ha2k qOrGa+arYMEGC2VK -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale del Notariato - TS Authority Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale del Notariato - TS Authority Subject O: Consiglio Nazionale del Notariato Subject C: IT Valid from: Thu May 15 11:00:41 CEST 2003 Valid to: Sun May 14 11:00:41 CEST 2006 Public Key: ITALIA (ITALY) - Trusted List ID: ID100001 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:D1:30:38:5D:B8:5B:9C:C7:5A:A3:E1:C9:BF:35:BF:44:F2:D6:37:7B:6E:BE:35:1C:78:AD:5E:24:6A:4A:58:05:0D:7D :BA:60:1B:46:51:74:25:E5:E2:9C:F1:EE:41:65:5B:B5:14:5C:D0:0B:8F:40:00:0F:74:21:C9:76:08:39:07:43:2B:14:CD:57:27:9B:D2:0F:E4:38:8D:BE:4E:0E:17:33:B6:FC:42:94:86:1C:66:AE:72:0B:B9:EC:AE:86:66:CD:20:A3 :50:4F:10:45:39:AD:78:AC:57:B3:96:07:1D:70:98:9C:F8:23:89:B6:B5:FA:1E:93:D0:D5:15:06:94:7F:8E:4B:4D:F8:F6:5C:BB:46:AA:2B:65:EB:00:88:DA:A4:2D:48:22:82:E3:D5:E4:D4:4C:6D:8B:55:03:08:AD:1F:07:68:32:1 D:71:34:9D:2F:A9:1C:7E:9A:41:E7:D0:62:BB:3F:9E:37:D3:B1:7D:E8:F2:CB:A2:E9:EB:64:50:50:AF:95:5F:D3:66:C5:76:F9:4F:E5:40:55:F4:9D:1B:3B:96:1C:08:47:2A:99:83:A2:42:8F:E1:57:62:94:3D:03:5E:85:EA:98:99: C4:71:70:30:D2:E4:86:49:C2:A2:21:E5:EF:08:C5:39:47:B7:2D:61:8B:53:62:91:5F:02:03:01:00:01 Page 177 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.1.1 CPS pointer: http://www.notariato.it/firmadigitale/manualeoperativo CRL Distribution Points ldap://ldap.ca.notariato.it:389/ou=Consiglio Nazionale del Notariato - TS Authority,o=Consiglio Nazionale del Notariato Subject Key Identifier 41:F6:CB:5A:2B:72:50:AA:90:F5:F4:AF:6D:FE:A3:DA:76:8A:64:EB Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:DA:4B:32:75:6F:AE:B6:51:07:0D:18:D2:0D:86:75:70:38:09:90:E8:4B:6B:E7:23:06:BA:69:3E: 75:AA:27 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-05-15T11:00:41Z 10.6 - Service : [email protected],CN=CNN - Servizio marche temporali,O=Consiglio Nazionale del Notariato,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] [email protected],CN=CNN - Servizio marche temporali,O=Consiglio Nazionale del Notariato,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 178 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIE6DCCA9CgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBjzELMAkGA1UEBhMCSVQxKjAoBgNVBAoT IUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0bzEoMCYGA1UEAxMfQ05OIC0gU2Vydml6 aW8gbWFyY2hlIHRlbXBvcmFsaTEqMCgGCSqGSIb3DQEJARYbY2VydGlmaWNhemlvbmVAbm90YXJp YXRvLml0MB4XDTA2MDUwNTA3NTgwNVoXDTE2MDUwNDA3NTgwNVowgY8xCzAJBgNVBAYTAklUMSow KAYDVQQKEyFDb25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8xKDAmBgNVBAMTH0NOTiAt IFNlcnZpemlvIG1hcmNoZSB0ZW1wb3JhbGkxKjAoBgkqhkiG9w0BCQEWG2NlcnRpZmljYXppb25l QG5vdGFyaWF0by5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANs0V7HlBHgG95YR 3Vj5wGsS3Jr0xNJ2Xje7jFL+TfzxIPyHnDIUe6fO9NUdNTKruU4ImrOS5ZYdO/Iyw+jIyoqKD140 YXdBzs+1VzVMBVs2G4AIdWSL1RNt/qui11fcDwz++9JRw4LXYe7Z0xknTU4UChqQCTTy3G8fitNz STfPgvXkZ/kZFpuXQbFsFQbeBak58M4ME7g2OWzsSHvabCWvfbQ/AReY4dGI5HwkcRn3FBnRu2sp p9Y6UKfmHaf+45hTjfE8Ypuw5jsOGVEy6URh/9cpgp8/5vdbRRhht5swtR9LnGDnRr9ROxlX/LA5 w0jQAU/d5x0TKQrbBP422X8CAwEAAaOCAUswggFHMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E BTADAQH/MB0GA1UdDgQWBBQ+xVC060xYdUB9kzOifZWpsvSHszBXBgNVHSAEUDBOMEwGCisGAQQB wk4BAgMwPjA8BggrBgEFBQcCARYwaHR0cDovL2NhLm5vdGFyaWF0by5pdC9tYW51YWxlb3BlcmF0 aXZvL01PdjMucGRmMIGrBgNVHR8EgaMwgaAwgZ2ggZqggZeGgZRsZGFwOi8vbGRhcC5jYS5ub3Rh cmlhdG8uaXQ6Mzg5L291JTNEQ05OJTIwLSUyMFNlcnZpemlvJTIwbWFyY2hlJTIwdGVtcG9yYWxp JTJDbyUzRENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMGRlbCUyME5vdGFyaWF0bz9jZXJ0aWZpY2F0 ZXJldm9jYXRpb25saXN0MA0GCSqGSIb3DQEBBQUAA4IBAQBOfCOhHHmtp9vmW7xQ2syMdXsPIBhi x4I/iWJDqXpk2H+IshW1AvW+XeXihhGNtn+WpJ/A6x28Nji5a6oZGe+52PAXVN7IHCA0m7SUvosE 9NLFGPhGeROZY2doGE3FkvZjjPYHrC7gtrbCiFB0JHTOyGpgTWlKgKV5EDdXqpbIk8uLrpVG+O3l 06QzjXJ1oYVBIeT9FffmcVOkn450qCZOVT6blBSNYCsSSc4G+YP9dJ0hG6HTR97M/OvutWLdnGbQ DW7VmYHCI/Evwn5kgDWmAM8xozjBZudYRjsuavrCpz4tz/mjBVoVMh+T7oimLFaTFvCSmQfQyDhI 1as8rlup -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: CNN - Servizio marche temporali Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Subject E: [email protected] Subject CN: CNN - Servizio marche temporali Subject O: Consiglio Nazionale del Notariato Subject C: IT Valid from: Fri May 05 09:58:05 CEST 2006 Valid to: Wed May 04 09:58:05 CEST 2016 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:DB:34:57:B1:E5:04:78:06:F7:96:11:DD:58:F9:C0:6B:12:DC:9A:F4:C4:D2:76:5E:37:BB:8C:52:FE:4D:FC:F1:20:FC: 87:9C:32:14:7B:A7:CE:F4:D5:1D:35:32:AB:B9:4E:08:9A:B3:92:E5:96:1D:3B:F2:32:C3:E8:C8:CA:8A:8A:0F:5E:34:61:77:41:CE:CF:B5:57:35:4C:05:5B:36:1B:80:08:75:64:8B:D5:13:6D:FE:AB:A2:D7:57:DC:0F:0C:FE:FB :D2:51:C3:82:D7:61:EE:D9:D3:19:27:4D:4E:14:0A:1A:90:09:34:F2:DC:6F:1F:8A:D3:73:49:37:CF:82:F5:E4:67:F9:19:16:9B:97:41:B1:6C:15:06:DE:05:A9:39:F0:CE:0C:13:B8:36:39:6C:EC:48:7B:DA:6C:25:AF:7D:B4:3F:0 1:17:98:E1:D1:88:E4:7C:24:71:19:F7:14:19:D1:BB:6B:29:A7:D6:3A:50:A7:E6:1D:A7:FE:E3:98:53:8D:F1:3C:62:9B:B0:E6:3B:0E:19:51:32:E9:44:61:FF:D7:29:82:9F:3F:E6:F7:5B:45:18:61:B7:9B:30:B5:1F:4B:9C:60:E7:46 :BF:51:3B:19:57:FC:B0:39:C3:48:D0:01:4F:DD:E7:1D:13:29:0A:DB:04:FE:36:D9:7F:02:03:01:00:01 Basic Constraints IsCA: true Subject Key Identifier 3E:C5:50:B4:EB:4C:58:75:40:7D:93:33:A2:7D:95:A9:B2:F4:87:B3 Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.2.3 CPS pointer: http://ca.notariato.it/manualeoperativo/MOv3.pdf CRL Distribution Points ldap://ldap.ca.notariato.it:389/ou%3DCNN%20%20Servizio%20marche%20temporali%2Co%3DConsiglio%20Nazionale%20del%20Notariato?cer tificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 27:28:92:50:84:CE:68:DF:F0:F5:80:33:D3:95:79:8D:B0:6B:C9:B7:3E:2A:61:82:BD:60:CB:80:82: CB:B4:28 ITALIA (ITALY) - Trusted List ID: ID100001 Page 179 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2006-05-05T09:58:05Z 10.7 - Service : CN=Consiglio Nazionale del Notariato Time Stamping Authority CA,OU=Servizio Marcatura Temporale,O=Consiglio Nazionale del Notariato,C=IT,serialNumber=80052590587 Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Consiglio Nazionale del Notariato Time Stamping Authority CA,OU=Servizio Marcatura Temporale,O=Consiglio Nazionale del Notariato,C=IT,serialNumber=80052590587 Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIH1TCCBb2gAwIBAgIBATANBgkqhkiG9w0BAQsFADCBvTEUMBIGA1UEBRMLODAwNTI1OTA1ODcx CzAJBgNVBAYTAklUMSowKAYDVQQKDCFDb25zaWdsaW8gTmF6aW9uYWxlIGRlbCBOb3RhcmlhdG8x JTAjBgNVBAsMHFNlcnZpemlvIE1hcmNhdHVyYSBUZW1wb3JhbGUxRTBDBgNVBAMMPENvbnNpZ2xp byBOYXppb25hbGUgZGVsIE5vdGFyaWF0byBUaW1lIFN0YW1waW5nIEF1dGhvcml0eSBDQTAeFw0x MjExMjExMTEyMzZaFw00MjExMjExMTEyMzZaMIG9MRQwEgYDVQQFEws4MDA1MjU5MDU4NzELMAkG A1UEBhMCSVQxKjAoBgNVBAoMIUNvbnNpZ2xpbyBOYXppb25hbGUgZGVsIE5vdGFyaWF0bzElMCMG A1UECwwcU2Vydml6aW8gTWFyY2F0dXJhIFRlbXBvcmFsZTFFMEMGA1UEAww8Q29uc2lnbGlvIE5h emlvbmFsZSBkZWwgTm90YXJpYXRvIFRpbWUgU3RhbXBpbmcgQXV0aG9yaXR5IENBMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAskpLF4wM1m+0qbPUGZ9reqKA7b1j55MmMfQmz/Xb6eRf TH+9RmKvJzwqd48iROcMwwYNhEkAu5qw7XLmLHQB6TBNQ9YpjDQtTuvb/Aca+nBz49TqujVfJY6R ctu8/GCFgfBN2CAh8KUKUsqcIPzb20iN43zlJf8QVorl/t9Usd4wihq5R96A/eI2lZHTQ5oMx9VY 70Pv3a1fCWGprneTIFXjUp0HCksugSQdl+VpwoHuT1tImqZSDA+ApRyyzBHadv/D9f1SSx95Q/vj bFVyL0YK6F2QVtYyRSW0tmaWfEZxyv10XAkjIJ5zm5v4y4NlfSBTK0HjDm2xziOMK5qGwDziF9Cv HsW9Pf7DPiBmgHxLPM84HS0Z7TFMp8TWDq9j4moW0QHXLvv6DmEzCUASMbmbFCDVur/XS3pg3k0F CTg4X6K2agxa0ONONrxSME3KnIyOiYI1IkoiKXqiqQhkym1z0ZuBqcr8I6iNIVXgOudcVy7FZhvn MMmQB5GKDWsX4RKcRe2nBvU25Xs9y3PQSEAPeHFT8IVSBjGUxAbDLLZdCiiRQcHg30bzyJtSIb/v eop0q0rAmNcgepUTzoWYBGvmt8xFyOMhLdJ++BQMsLJzm7h3A+OlWA42W6WnyGFH6pt9/K9pf4kv HqGAWuXOPiGMhGXQ6sgIg9DmEdvfz6kCAwEAAaOCAdwwggHYMA8GA1UdEwEB/wQFMAMBAf8wVgYD VR0gBE8wTTBLBgorBgEEAcJOAQIEMD0wOwYIKwYBBQUHAgEWL2h0dHA6Ly9jYS5ub3RhcmlhdG8u aXQvZG9jdW1lbnRhemlvbmUvTU9DTk4ucGRmMIH2BgNVHR8Ege4wgeswgeiggeWggeKGgd9sZGFw Oi8vbGRhcC5jYS5ub3RhcmlhdG8ub3JnL2NuJTNkQ29uc2lnbGlvJTIwTmF6aW9uYWxlJTIwZGVs JTIwTm90YXJpYXRvJTIwVGltZSUyMFN0YW1waW5nJTIwQXV0aG9yaXR5JTIwQ0Esb3UlM2RTZXJ2 aXppbyUyME1hcmNhdHVyYSUyMFRlbXBvcmFsZSxvJTNkQ29uc2lnbGlvJTIwTmF6aW9uYWxlJTIw ZGVsJTIwTm90YXJpYXRvLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MA4GA1UdDwEB /wQEAwIBBjAkBgNVHRIEHTAbgRl0aW1lc3RhbXBpbmdAbm90YXJpYXRvLml0MB8GA1UdIwQYMBaA FAtlJ7nbj1Nz7HoOOBMsUo/DlrT/MB0GA1UdDgQWBBQLZSe5249Tc+x6DjgTLFKPw5a0/zANBgkq hkiG9w0BAQsFAAOCAgEAZQRLMRGlUZtNmjPhzkeiYwRQLvu3kGWsV1kQN+Gu9v0pWsfwL/mPhx6U IskJ2cZHp7xr/PsMtDSFtd3VjGKPPNWHxW7MkrQkXQabXsK6SnSJMxWlyohhlrKNpRvAxrL+E/i7 CrkktMGoTx3o2x1omNklJ2NIRk5oMSEicYePT3U2GbGMNWSYo2URhVzMjgHL/HkjNp1ZDnJrQ4xM aQ7jZUfcw2DdUHRRf/LSZBKRMvtOZyxRd0IQ1M7BbmHKrHe5+IfAwfUK7HV5HnxuHrD4K+JOIZfk RPJlkNgWFj6nElIRLOdmy8bMF+drskWku089StiAhe0brlm3r7Q8DqtlTdzCQTtbsEQQNlK570XX tXenqikalU3P2QnKqDLvJeERxFYHSyWglTqovsk6AkeBqISL1UN0aTOKn3XX+cpgfsPIDhPIZCTD JGUVTS814cQ0Dlu9u8Zbg1bAnonjaLaunFUoCXyOoYjjoAFF4ASPZlOcie+1K7ab6NIY3SWwMz5o 4E3n9sYVnrKB7OTykXEOER7vNk+3zXTDb5EQ8BKx1hngDzOhvcr948pTh821IHlZ75tcN5xEWojD hz5iWIhXIpI4UPoY7eR1OwLX+8Y62z5yf973QgKK+52lJb4Aivun+WNA8JYO7x1qb1NFJNmoNEdZ WhnesnAitBrVkF/OiN0= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Consiglio Nazionale del Notariato Time Stamping Authority CA Issuer OU: Servizio Marcatura Temporale ITALIA (ITALY) - Trusted List ID: ID100001 Page 180 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Consiglio Nazionale del Notariato Issuer C: IT Issuer SERIAL NUMBER: 80052590587 Subject CN: Consiglio Nazionale del Notariato Time Stamping Authority CA Subject OU: Servizio Marcatura Temporale Subject O: Consiglio Nazionale del Notariato Subject C: IT Subject SERIAL NUMBER: 80052590587 Valid from: Wed Nov 21 12:12:36 CET 2012 Valid to: Fri Nov 21 12:12:36 CET 2042 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.8526.1.2.4 CPS pointer: http://ca.notariato.it/documentazione/MOCNN.pdf CRL Distribution Points ldap://ldap.ca.notariato.org/cn%3dConsiglio%20Nazionale%20del%20Notariato%20Time%20Stam ping%20Authority%20CA,ou%3dServizio%20Marcatura%20Temporale,o%3dConsiglio%20Nazion ale%20del%20Notariato,c%3dIT?certificateRevocationList Issuer Alternative Name [email protected] Authority Key Identifier 0B:65:27:B9:DB:8F:53:73:EC:7A:0E:38:13:2C:52:8F:C3:96:B4:FF Subject Key Identifier 0B:65:27:B9:DB:8F:53:73:EC:7A:0E:38:13:2C:52:8F:C3:96:B4:FF Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 19:5B:16:8E:4D:92:A6:3F:1E:6B:AA:2C:C0:D9:DA:07:BE:8F:7F:96:31:7E:B1:95:F0:7D:36:67:F1 :DF:C9:73 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. ITALIA (ITALY) - Trusted List ID: ID100001 Page 181 ETSI 2014 - TSL HR - PDF/A-1b generator Status Starting Time ITALIA (ITALY) - Trusted List ID: ID100001 2012-11-21T12:12:36Z Page 182 ETSI 2014 - TSL HR - PDF/A-1b generator 11 - TSP: Consiglio Nazionale Forense TSP Name Name [ en ] Consiglio Nazionale Forense Name [ it ] Consiglio Nazionale Forense Name [ en ] Consiglio Nazionale Forense Name [ it ] Consiglio Nazionale Forense Name [ en ] VATIT-99999999999 Street Address [ en ] via arenula 71 Locality [ en ] roma Postal Code [ en ] 00196 Country Name [ en ] IT Street Address [ it ] via arenula 71 Locality [ it ] roma Postal Code [ it ] 00196 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://ca.consiglionazionaleforense.it URI mailto:[email protected] TSP Information URI URI [ en ] http://ca.consiglionazionaleforense.it URI [ it ] http://ca.consiglionazionaleforense.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 183 ETSI 2014 - TSL HR - PDF/A-1b generator 11.1 - Service (supervisionceased): [email protected],CN=Consiglio Nazionale Forense - Firma Digitale,O=Consiglio Nazionale Forense,L=Roma,ST=RM,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] [email protected],CN=Consiglio Nazionale Forense - Firma Digitale,O=Consiglio Nazionale Forense,L=Roma,ST=RM,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 15646 X509 Certificate -----BEGIN CERTIFICATE----MIIFTzCCBDegAwIBAgICPR4wDQYJKoZIhvcNAQEFBQAwgcIxCzAJBgNVBAYTAklUMQswCQYDVQQI EwJSTTENMAsGA1UEBxMEUm9tYTEkMCIGA1UEChMbQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNl MTUwMwYDVQQDEyxDb25zaWdsaW8gTmF6aW9uYWxlIEZvcmVuc2UgLSBGaXJtYSBEaWdpdGFsZTE6 MDgGCSqGSIb3DQEJARYrY2VydGlmaWNhemlvbmVAY29uc2lnbGlvbmF6aW9uYWxlZm9yZW5zZS5p dDAeFw0wMzA5MzAxNzExMjZaFw0xNDA5MzAyMzU5NTlaMIHCMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCUk0xDTALBgNVBAcTBFJvbWExJDAiBgNVBAoTG0NvbnNpZ2xpbyBOYXppb25hbGUgRm9yZW5z ZTE1MDMGA1UEAxMsQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNlIC0gRmlybWEgRGlnaXRhbGUx OjA4BgkqhkiG9w0BCQEWK2NlcnRpZmljYXppb25lQGNvbnNpZ2xpb25hemlvbmFsZWZvcmVuc2Uu aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoFqQ/C2YvuxveqB4g4kkn/ZK74Qw kU9PlkUNHQvFPZAMJiHY4TEcLdQc6ncfvgi4oaH5TZifW8lA8Sk3vEjD3M7QOAgGcm+IA/tOZlxL 3Xm6lTfpA1ax64xIZvT0xCL+NXaY6Uyamxz5IPmq5MO/bvTEAUj2NwbT5qvMPUBUHqwMCVDZ3R5U 9/67ceIQdEbF3btKCESg6I4TK1DUEenAIA1vd2HGUf240CwACL0X26ek6p0b3k3OPXrz+kLV5dy4 lpF0JfU75B2z6djDKQ/e4hZF1KgpGRF3/D2/lalKOja3+iUN3iRbg/6dNPxrFRRi0MwUllqmLmnY zMO9TyHDAgMBAAGjggFLMIIBRzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBpBgNV HSAEYjBgMF4GBitMHAEBATBUMFIGCCsGAQUFBwIBFkZodHRwOi8vd3d3LmNvbnNpZ2xpb25hemlv bmFsZWZvcmVuc2UuaXQvZmlybWFkaWdpdGFsZS9tYW51YWxlb3BlcmF0aXZvMB0GA1UdDgQWBBQm 4Rw0AGwKsXvXTqPYIR+RLUSYuTCBmQYDVR0fBIGRMIGOMIGLoIGIoIGFhoGCbGRhcDovL2ZlLmNz cC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMEZvcmVu c2UlMjAtJTIwRmlybWElMjBEaWdpdGFsZSUyQ28lM0RDU1A/Y2VydGlmaWNhdGVyZXZvY2F0aW9u bGlzdDANBgkqhkiG9w0BAQUFAAOCAQEAq26M70o3Qk2QJqxfkahbcJOPpuEl0VGJesnuQ1fJkw1W jFkoyJg5HfxIlPm1O4Vh6QoSoAoi1CS5+eMS/6Som0Xq7cgkoHBFmyUJUO2iqwyw0WJvF7YZxQTj alyWKYEstmJ/Hd07uMRH/bGCOVKujtwZtNLSetS+0CH3XGfhWFBHbm1shF04FokDSx7Ep7q4jUrn 75aPic3zlr167ZEHiBeycCBiKFlllyk0pqQ9GA2i4oOYxFuKjq5oXEnaB7UxyBD+vGJyiJV91qam ZDWo1XJ3rCGn4mpjN9+DWq6dLBSfsJNwc79vp8tJi/96gom9Y7bNYES2j/svquNwC8RqwQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale Forense - Firma Digitale Issuer O: Consiglio Nazionale Forense Issuer L: Roma Issuer ST: RM Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense ITALIA (ITALY) - Trusted List ID: ID100001 Page 184 ETSI 2014 - TSL HR - PDF/A-1b generator Subject L: Roma Subject ST: RM Subject C: IT Valid from: Tue Sep 30 19:11:26 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.28.1.1.1 CPS pointer: http://www.consiglionazionaleforense.it/firmadigitale/manualeoperativo Subject Key Identifier 26:E1:1C:34:00:6C:0A:B1:7B:D7:4E:A3:D8:21:1F:91:2D:44:98:B9 CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DConsiglio%20Nazionale%20Forense%20%20Firma%20Digitale%2Co%3DCSP?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 79:EA:17:DF:A7:61:0D:5F:04:6C:46:D5:CE:42:3C:42:E1:6A:69:D0:7D:9B:9A:71:8F:61:D2:F0:E3 :EB:A3:20 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2014-06-30T22:02:00Z 11.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 11.1.2 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 185 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] [email protected],CN=Consiglio Nazionale Forense - Firma Digitale,O=Consiglio Nazionale Forense,L=Roma,ST=RM,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 15646 X509 Certificate -----BEGIN CERTIFICATE----MIIFTzCCBDegAwIBAgICPR4wDQYJKoZIhvcNAQEFBQAwgcIxCzAJBgNVBAYTAklUMQswCQYDVQQI EwJSTTENMAsGA1UEBxMEUm9tYTEkMCIGA1UEChMbQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNl MTUwMwYDVQQDEyxDb25zaWdsaW8gTmF6aW9uYWxlIEZvcmVuc2UgLSBGaXJtYSBEaWdpdGFsZTE6 MDgGCSqGSIb3DQEJARYrY2VydGlmaWNhemlvbmVAY29uc2lnbGlvbmF6aW9uYWxlZm9yZW5zZS5p dDAeFw0wMzA5MzAxNzExMjZaFw0xNDA5MzAyMzU5NTlaMIHCMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCUk0xDTALBgNVBAcTBFJvbWExJDAiBgNVBAoTG0NvbnNpZ2xpbyBOYXppb25hbGUgRm9yZW5z ZTE1MDMGA1UEAxMsQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNlIC0gRmlybWEgRGlnaXRhbGUx OjA4BgkqhkiG9w0BCQEWK2NlcnRpZmljYXppb25lQGNvbnNpZ2xpb25hemlvbmFsZWZvcmVuc2Uu aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoFqQ/C2YvuxveqB4g4kkn/ZK74Qw kU9PlkUNHQvFPZAMJiHY4TEcLdQc6ncfvgi4oaH5TZifW8lA8Sk3vEjD3M7QOAgGcm+IA/tOZlxL 3Xm6lTfpA1ax64xIZvT0xCL+NXaY6Uyamxz5IPmq5MO/bvTEAUj2NwbT5qvMPUBUHqwMCVDZ3R5U 9/67ceIQdEbF3btKCESg6I4TK1DUEenAIA1vd2HGUf240CwACL0X26ek6p0b3k3OPXrz+kLV5dy4 lpF0JfU75B2z6djDKQ/e4hZF1KgpGRF3/D2/lalKOja3+iUN3iRbg/6dNPxrFRRi0MwUllqmLmnY zMO9TyHDAgMBAAGjggFLMIIBRzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBpBgNV HSAEYjBgMF4GBitMHAEBATBUMFIGCCsGAQUFBwIBFkZodHRwOi8vd3d3LmNvbnNpZ2xpb25hemlv bmFsZWZvcmVuc2UuaXQvZmlybWFkaWdpdGFsZS9tYW51YWxlb3BlcmF0aXZvMB0GA1UdDgQWBBQm 4Rw0AGwKsXvXTqPYIR+RLUSYuTCBmQYDVR0fBIGRMIGOMIGLoIGIoIGFhoGCbGRhcDovL2ZlLmNz cC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMEZvcmVu c2UlMjAtJTIwRmlybWElMjBEaWdpdGFsZSUyQ28lM0RDU1A/Y2VydGlmaWNhdGVyZXZvY2F0aW9u bGlzdDANBgkqhkiG9w0BAQUFAAOCAQEAq26M70o3Qk2QJqxfkahbcJOPpuEl0VGJesnuQ1fJkw1W jFkoyJg5HfxIlPm1O4Vh6QoSoAoi1CS5+eMS/6Som0Xq7cgkoHBFmyUJUO2iqwyw0WJvF7YZxQTj alyWKYEstmJ/Hd07uMRH/bGCOVKujtwZtNLSetS+0CH3XGfhWFBHbm1shF04FokDSx7Ep7q4jUrn 75aPic3zlr167ZEHiBeycCBiKFlllyk0pqQ9GA2i4oOYxFuKjq5oXEnaB7UxyBD+vGJyiJV91qam ZDWo1XJ3rCGn4mpjN9+DWq6dLBSfsJNwc79vp8tJi/96gom9Y7bNYES2j/svquNwC8RqwQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale Forense - Firma Digitale Issuer O: Consiglio Nazionale Forense Issuer L: Roma Issuer ST: RM Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense Subject L: Roma Subject ST: RM Subject C: IT Valid from: Tue Sep 30 19:11:26 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 ITALIA (ITALY) - Trusted List ID: ID100001 Page 186 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.28.1.1.1 CPS pointer: http://www.consiglionazionaleforense.it/firmadigitale/manualeoperativo Subject Key Identifier 26:E1:1C:34:00:6C:0A:B1:7B:D7:4E:A3:D8:21:1F:91:2D:44:98:B9 CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DConsiglio%20Nazionale%20Forense%20%20Firma%20Digitale%2Co%3DCSP?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 79:EA:17:DF:A7:61:0D:5F:04:6C:46:D5:CE:42:3C:42:E1:6A:69:D0:7D:9B:9A:71:8F:61:D2:F0:E3 :EB:A3:20 X509SubjectName Subject E: #162b6365727469666963617a696f6e6540636f6e7369676c696f6e617a696f6e616c65666f72656e73 652e6974 Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense Subject L: Roma Subject ST: RM Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2014-06-30T22:01:00Z 11.1.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 11.1.3 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 187 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] [email protected],CN=Consiglio Nazionale Forense - Firma Digitale,O=Consiglio Nazionale Forense,L=Roma,ST=RM,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 15646 X509 Certificate -----BEGIN CERTIFICATE----MIIFTzCCBDegAwIBAgICPR4wDQYJKoZIhvcNAQEFBQAwgcIxCzAJBgNVBAYTAklUMQswCQYDVQQI EwJSTTENMAsGA1UEBxMEUm9tYTEkMCIGA1UEChMbQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNl MTUwMwYDVQQDEyxDb25zaWdsaW8gTmF6aW9uYWxlIEZvcmVuc2UgLSBGaXJtYSBEaWdpdGFsZTE6 MDgGCSqGSIb3DQEJARYrY2VydGlmaWNhemlvbmVAY29uc2lnbGlvbmF6aW9uYWxlZm9yZW5zZS5p dDAeFw0wMzA5MzAxNzExMjZaFw0xNDA5MzAyMzU5NTlaMIHCMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCUk0xDTALBgNVBAcTBFJvbWExJDAiBgNVBAoTG0NvbnNpZ2xpbyBOYXppb25hbGUgRm9yZW5z ZTE1MDMGA1UEAxMsQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNlIC0gRmlybWEgRGlnaXRhbGUx OjA4BgkqhkiG9w0BCQEWK2NlcnRpZmljYXppb25lQGNvbnNpZ2xpb25hemlvbmFsZWZvcmVuc2Uu aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoFqQ/C2YvuxveqB4g4kkn/ZK74Qw kU9PlkUNHQvFPZAMJiHY4TEcLdQc6ncfvgi4oaH5TZifW8lA8Sk3vEjD3M7QOAgGcm+IA/tOZlxL 3Xm6lTfpA1ax64xIZvT0xCL+NXaY6Uyamxz5IPmq5MO/bvTEAUj2NwbT5qvMPUBUHqwMCVDZ3R5U 9/67ceIQdEbF3btKCESg6I4TK1DUEenAIA1vd2HGUf240CwACL0X26ek6p0b3k3OPXrz+kLV5dy4 lpF0JfU75B2z6djDKQ/e4hZF1KgpGRF3/D2/lalKOja3+iUN3iRbg/6dNPxrFRRi0MwUllqmLmnY zMO9TyHDAgMBAAGjggFLMIIBRzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBpBgNV HSAEYjBgMF4GBitMHAEBATBUMFIGCCsGAQUFBwIBFkZodHRwOi8vd3d3LmNvbnNpZ2xpb25hemlv bmFsZWZvcmVuc2UuaXQvZmlybWFkaWdpdGFsZS9tYW51YWxlb3BlcmF0aXZvMB0GA1UdDgQWBBQm 4Rw0AGwKsXvXTqPYIR+RLUSYuTCBmQYDVR0fBIGRMIGOMIGLoIGIoIGFhoGCbGRhcDovL2ZlLmNz cC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMEZvcmVu c2UlMjAtJTIwRmlybWElMjBEaWdpdGFsZSUyQ28lM0RDU1A/Y2VydGlmaWNhdGVyZXZvY2F0aW9u bGlzdDANBgkqhkiG9w0BAQUFAAOCAQEAq26M70o3Qk2QJqxfkahbcJOPpuEl0VGJesnuQ1fJkw1W jFkoyJg5HfxIlPm1O4Vh6QoSoAoi1CS5+eMS/6Som0Xq7cgkoHBFmyUJUO2iqwyw0WJvF7YZxQTj alyWKYEstmJ/Hd07uMRH/bGCOVKujtwZtNLSetS+0CH3XGfhWFBHbm1shF04FokDSx7Ep7q4jUrn 75aPic3zlr167ZEHiBeycCBiKFlllyk0pqQ9GA2i4oOYxFuKjq5oXEnaB7UxyBD+vGJyiJV91qam ZDWo1XJ3rCGn4mpjN9+DWq6dLBSfsJNwc79vp8tJi/96gom9Y7bNYES2j/svquNwC8RqwQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale Forense - Firma Digitale Issuer O: Consiglio Nazionale Forense Issuer L: Roma Issuer ST: RM Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense Subject L: Roma Subject ST: RM Subject C: IT Valid from: Tue Sep 30 19:11:26 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 ITALIA (ITALY) - Trusted List ID: ID100001 Page 188 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.28.1.1.1 CPS pointer: http://www.consiglionazionaleforense.it/firmadigitale/manualeoperativo Subject Key Identifier 26:E1:1C:34:00:6C:0A:B1:7B:D7:4E:A3:D8:21:1F:91:2D:44:98:B9 CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DConsiglio%20Nazionale%20Forense%20%20Firma%20Digitale%2Co%3DCSP?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 79:EA:17:DF:A7:61:0D:5F:04:6C:46:D5:CE:42:3C:42:E1:6A:69:D0:7D:9B:9A:71:8F:61:D2:F0:E3 :EB:A3:20 X509SubjectName Subject E: #162b6365727469666963617a696f6e6540636f6e7369676c696f6e617a696f6e616c65666f72656e73 652e6974 Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense Subject L: Roma Subject ST: RM Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2014-06-30T22:00:01Z 11.1.3.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 11.1.4 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 189 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] [email protected],CN=Consiglio Nazionale Forense - Firma Digitale,O=Consiglio Nazionale Forense,L=Roma,ST=RM,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 15646 X509 Certificate -----BEGIN CERTIFICATE----MIIFTzCCBDegAwIBAgICPR4wDQYJKoZIhvcNAQEFBQAwgcIxCzAJBgNVBAYTAklUMQswCQYDVQQI EwJSTTENMAsGA1UEBxMEUm9tYTEkMCIGA1UEChMbQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNl MTUwMwYDVQQDEyxDb25zaWdsaW8gTmF6aW9uYWxlIEZvcmVuc2UgLSBGaXJtYSBEaWdpdGFsZTE6 MDgGCSqGSIb3DQEJARYrY2VydGlmaWNhemlvbmVAY29uc2lnbGlvbmF6aW9uYWxlZm9yZW5zZS5p dDAeFw0wMzA5MzAxNzExMjZaFw0xNDA5MzAyMzU5NTlaMIHCMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCUk0xDTALBgNVBAcTBFJvbWExJDAiBgNVBAoTG0NvbnNpZ2xpbyBOYXppb25hbGUgRm9yZW5z ZTE1MDMGA1UEAxMsQ29uc2lnbGlvIE5hemlvbmFsZSBGb3JlbnNlIC0gRmlybWEgRGlnaXRhbGUx OjA4BgkqhkiG9w0BCQEWK2NlcnRpZmljYXppb25lQGNvbnNpZ2xpb25hemlvbmFsZWZvcmVuc2Uu aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoFqQ/C2YvuxveqB4g4kkn/ZK74Qw kU9PlkUNHQvFPZAMJiHY4TEcLdQc6ncfvgi4oaH5TZifW8lA8Sk3vEjD3M7QOAgGcm+IA/tOZlxL 3Xm6lTfpA1ax64xIZvT0xCL+NXaY6Uyamxz5IPmq5MO/bvTEAUj2NwbT5qvMPUBUHqwMCVDZ3R5U 9/67ceIQdEbF3btKCESg6I4TK1DUEenAIA1vd2HGUf240CwACL0X26ek6p0b3k3OPXrz+kLV5dy4 lpF0JfU75B2z6djDKQ/e4hZF1KgpGRF3/D2/lalKOja3+iUN3iRbg/6dNPxrFRRi0MwUllqmLmnY zMO9TyHDAgMBAAGjggFLMIIBRzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjBpBgNV HSAEYjBgMF4GBitMHAEBATBUMFIGCCsGAQUFBwIBFkZodHRwOi8vd3d3LmNvbnNpZ2xpb25hemlv bmFsZWZvcmVuc2UuaXQvZmlybWFkaWdpdGFsZS9tYW51YWxlb3BlcmF0aXZvMB0GA1UdDgQWBBQm 4Rw0AGwKsXvXTqPYIR+RLUSYuTCBmQYDVR0fBIGRMIGOMIGLoIGIoIGFhoGCbGRhcDovL2ZlLmNz cC5tdWx0aWNlcnRpZnkuY29tOjM4OS9vdSUzRENvbnNpZ2xpbyUyME5hemlvbmFsZSUyMEZvcmVu c2UlMjAtJTIwRmlybWElMjBEaWdpdGFsZSUyQ28lM0RDU1A/Y2VydGlmaWNhdGVyZXZvY2F0aW9u bGlzdDANBgkqhkiG9w0BAQUFAAOCAQEAq26M70o3Qk2QJqxfkahbcJOPpuEl0VGJesnuQ1fJkw1W jFkoyJg5HfxIlPm1O4Vh6QoSoAoi1CS5+eMS/6Som0Xq7cgkoHBFmyUJUO2iqwyw0WJvF7YZxQTj alyWKYEstmJ/Hd07uMRH/bGCOVKujtwZtNLSetS+0CH3XGfhWFBHbm1shF04FokDSx7Ep7q4jUrn 75aPic3zlr167ZEHiBeycCBiKFlllyk0pqQ9GA2i4oOYxFuKjq5oXEnaB7UxyBD+vGJyiJV91qam ZDWo1XJ3rCGn4mpjN9+DWq6dLBSfsJNwc79vp8tJi/96gom9Y7bNYES2j/svquNwC8RqwQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer E: [email protected] Issuer CN: Consiglio Nazionale Forense - Firma Digitale Issuer O: Consiglio Nazionale Forense Issuer L: Roma Issuer ST: RM Issuer C: IT Subject E: [email protected] Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense Subject L: Roma Subject ST: RM Subject C: IT Valid from: Tue Sep 30 19:11:26 CEST 2003 Valid to: Wed Oct 01 01:59:59 CEST 2014 ITALIA (ITALY) - Trusted List ID: ID100001 Page 190 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.28.1.1.1 CPS pointer: http://www.consiglionazionaleforense.it/firmadigitale/manualeoperativo Subject Key Identifier 26:E1:1C:34:00:6C:0A:B1:7B:D7:4E:A3:D8:21:1F:91:2D:44:98:B9 CRL Distribution Points ldap://fe.csp.multicertify.com:389/ou%3DConsiglio%20Nazionale%20Forense%20%20Firma%20Digitale%2Co%3DCSP?certificaterevocationlist Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 79:EA:17:DF:A7:61:0D:5F:04:6C:46:D5:CE:42:3C:42:E1:6A:69:D0:7D:9B:9A:71:8F:61:D2:F0:E3 :EB:A3:20 X509SubjectName Subject E: #162b6365727469666963617a696f6e6540636f6e7369676c696f6e617a696f6e616c65666f72656e73 652e6974 Subject CN: Consiglio Nazionale Forense - Firma Digitale Subject O: Consiglio Nazionale Forense Subject L: Roma Subject ST: RM Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2003-09-30T19:11:26Z 11.1.4.3 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 191 ETSI 2014 - TSL HR - PDF/A-1b generator 12 - TSP: IT Telecom S.r.l. TSP Name Name [ en ] IT Telecom S.r.l. Name [ it ] IT Telecom S.r.l. Name [ en ] I.T. Telecom S.R.L. Name [ it ] I.T. Telecom S.R.L. Name [ it ] VATIT-04599340967 Name [ en ] VATIT-04599340967 Street Address [ en ] SS 148 pontina, km 29,100 Locality [ en ] Pomezia State Or Province [ en ] Rome Postal Code [ en ] 00040 Country Name [ en ] IT Street Address [ it ] SS 148 pontina, km 29,100 Locality [ it ] Pomezia State Or Province [ it ] Roma Postal Code [ it ] 00040 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.ittelecom.it/default.aspx?idPage=699 URI mailto:[email protected] TSP Information URI ITALIA (ITALY) - Trusted List ID: ID100001 Page 192 ETSI 2014 - TSL HR - PDF/A-1b generator URI [ en ] http://www.ittelecom.it/default.aspx?idPage=699 URI [ it ] http://www.ittelecom.it 12.1 - Service : CN=I.T. Telecom FirmaSicura CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=I.T. Telecom FirmaSicura CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEOzCCAyOgAwIBAgIBATANBgkqhkiG9w0BAQUFADB1MQswCQYDVQQGEwJJVDEcMBoGA1UEChMT SS5ULiBUZWxlY29tIFMuUi5MLjEiMCAGA1UECxMZU2Vydml6aSBkaSBjZXJ0aWZpY2F6aW9uZTEk MCIGA1UEAxMbSS5ULiBUZWxlY29tIEZpcm1hU2ljdXJhIENBMB4XDTA0MTIxNDE2NDQ1N1oXDTE0 MTIxNDE2NDMwN1owdTELMAkGA1UEBhMCSVQxHDAaBgNVBAoTE0kuVC4gVGVsZWNvbSBTLlIuTC4x IjAgBgNVBAsTGVNlcnZpemkgZGkgY2VydGlmaWNhemlvbmUxJDAiBgNVBAMTG0kuVC4gVGVsZWNv bSBGaXJtYVNpY3VyYSBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANpdrIrl7Fyn 9F4DuHpIKNC1QZmIWo7bzjhwmBqw0yD9SxUjmhestMGM7qy8BIypQcTkRXNJTssn9AaSRP9ovSIc pTsil+OcoEVjVbZgu+QXQ/Zd1nAI/ml3/95eZ6oDVs9+4A2V3Kee3VxssAOqglEwwD6ZFX85keF3 /apBpHyGk+LIlZL0CQg8kVv/Hvg+XGNf0Y6VNBOFPHJtDGw3/qFvBHguXcfKc56pB5sFEk7B8EOT Nrl8yCTVv5LRzo60/7h8osuPCZrpkXUAiiQzAoXdQ4rAZvU3VKdctJDkypjW7b8n0XFSaZSBZpLq hhr2oN4b9U2Uz9+rkfXyMAdpoF0CAwEAAaOB1TCB0jASBgNVHRMBAf8ECDAGAQH/AgEAME8GA1Ud IARIMEYwRAYGK0wMAQEBMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmZpcm1hc2ljdXJhLml0 L0NlcnRpZmljYXRvcmUvQ1BTMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuZmlybWFzaWN1 cmEuaXQvQ2VydGlmaWNhdG9yZS9DUkwwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR3yhVVWAZQ 1QSbDDPyPuOwb+danDANBgkqhkiG9w0BAQUFAAOCAQEAaLzN/GVNyxn4mGr8jQ+rh/kUmMILSFrr QKeGcS6TQkIYi3Y2AN/OlQC9RyBzAOvvpH+2nsx+afJ8os6M/lWZLvuP/sdVH404BiPh4Wa3TxgN 4A+705qP8OI/CVm8qSeuUD6JslCJMvCOa2uqa7SWb8C/iff/y2Lro15NpHyoal8tlDY2bIwe4WKS JnmWJrgZd5s8LPkGIN6hHMX4pDhw3kho+yoHrHeYkxTw+QuXdl01eA6E2sse39Qanve86u3FhafW bGIfwiXvFRbxMadeUjyknon8MF3s4AfSeyQsM1oO4ojsLzPjbqGGhTrwyr4PazFKiTLj3Oi4zb1P 6xZKww== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: I.T. Telecom FirmaSicura CA Issuer OU: Servizi di certificazione Issuer O: I.T. Telecom S.R.L. Issuer C: IT Subject CN: I.T. Telecom FirmaSicura CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 193 ETSI 2014 - TSL HR - PDF/A-1b generator Valid from: Tue Dec 14 17:44:57 CET 2004 Valid to: Sun Dec 14 17:43:07 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.12.1.1.1 CPS pointer: https://www.firmasicura.it/Certificatore/CPS CRL Distribution Points http://crl.firmasicura.it/Certificatore/CRL Subject Key Identifier 77:CA:15:55:58:06:50:D5:04:9B:0C:33:F2:3E:E3:B0:6F:E7:5A:9C Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 88:45:E1:F2:66:3D:D6:1C:45:73:BD:AB:76:40:3C:21:31:AE:21:EC:09:AA:A3:E0:73:F4:B3:03:FE :90:3E:3A Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2013-12-31T23:01:00Z 12.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.1.2 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.trusttechnologies.it Name [ en ] Telecom Italia Trust Technologies S.r.l. Name [ it ] Telecom Italia Trust Technologies S.r.l. TSP Name Scheme Operator Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 194 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale Scheme Territory IT 12.1.3 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom FirmaSicura CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom FirmaSicura CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-12-31T23:00:00Z 12.1.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.1.4 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom FirmaSicura CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: ITALIA (ITALY) - Trusted List ID: ID100001 I.T. Telecom FirmaSicura CA Page 195 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-12-14T17:44:00Z 12.1.4.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.2 - Service : CN=I.T. Telecom Firma Qualificata CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=I.T. Telecom Firma Qualificata CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEPDCCAySgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDEcMBoGA1UECgwT SS5ULiBUZWxlY29tIFMuUi5MLjEiMCAGA1UECwwZU2Vydml6aSBkaSBjZXJ0aWZpY2F6aW9uZTEq MCgGA1UEAwwhSS5ULiBUZWxlY29tIEZpcm1hIFF1YWxpZmljYXRhIENBMB4XDTA4MTIwMjE1MTQ1 NVoXDTIwMTIwMjE1MTQ1NVowezELMAkGA1UEBhMCSVQxHDAaBgNVBAoME0kuVC4gVGVsZWNvbSBT LlIuTC4xIjAgBgNVBAsMGVNlcnZpemkgZGkgY2VydGlmaWNhemlvbmUxKjAoBgNVBAMMIUkuVC4g VGVsZWNvbSBGaXJtYSBRdWFsaWZpY2F0YSBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAafbzk43nIC7O2N0FbrQkORHkDyXBB9gsvuTKdVEVfPpNnfM79C6Anaw2KprzKFop5fn3O XQpHmaakOpkcDblDpLfqol2o+3exzW8//WCFkq1s+N/uEsqAJGzxIZEG/EVds+YRnNoneBqKBN/O NTlapMvPhTXBWdzvSlMXQmCbhTFgjEd9cR34BIYnM2M1fim7JXra3TvgiJb+PBxDpYlyaASK2TAh iS3Zvdn/Kea238q4pg+J3S/ux2hHbLP1B6+8/U8J7BG+tKy6bVKVT4m15UHtV0uZqhQ3FXZXFnFS QMxcZbhLHdKMdit6we9uwikQSbj1ANuAVuvO7pHAA30CAwEAAaOByjCBxzASBgNVHRMBAf8ECDAG AQH/AgEAMEkGA1UdIARCMEAwPgYGK0whAQEBMDQwMgYIKwYBBQUHAgEWJmh0dHA6Ly9jYS5pdHRl bGVjb20uaXQvSVRUZWxlY29tQ0EvQ1BTMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jYS5pdHRl bGVjb20uaXQvSVRUZWxlY29tQ0EvQ1JMMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUFr2Yv38Z B0Wr8UOqPcYejM17aQQwDQYJKoZIhvcNAQEFBQADggEBACHPU04BQ3aRlpftpwRNfHTXo6l2Xvic TDDBC8IZErSzfjvutcodZhYqhOa9t1HWeYlnUljkqma2q3cL7EmSiwbJ6A8dkYLCIgLJQN2z5FN4 NIrV7PBTgQ91xmYte7FVTaElHvxp2qqNbvUOjMU7CQF4RpIt/LClMkxisnh1vJJAb+90vi+ixxYp flGsNhGKm1/CUeCx+mSwPPZn1VCzx9HI1ztYfF2nr0GNNkPkhkHEL5QTiV6+63Ahz6qGF/ddBlNh Ii7oqP3z9ehHXGzOXR2Ru0HefH5iEX+FnpFF5iLVroi9BSgmoVezogZP2fpDqA/kE55MvAgEu+Jf 9qwTK1o= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: I.T. Telecom Firma Qualificata CA Issuer OU: Servizi di certificazione ITALIA (ITALY) - Trusted List ID: ID100001 Page 196 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: I.T. Telecom S.R.L. Issuer C: IT Subject CN: I.T. Telecom Firma Qualificata CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Valid from: Tue Dec 02 16:14:55 CET 2008 Valid to: Wed Dec 02 16:14:55 CET 2020 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:A0:1A:7D:BC:E4:E3:79:C8:0B:B3:B6:37:41:5B:AD:09:0E:44:79:03:C9:70:41:F6:0B:2F:B9:32:9D:54:45:5F:3E:93:6 7:7C:CE:FD:0B:A0:27:6B:0D:8A:A6:BC:CA:16:8A:79:7E:7D:CE:5D:0A:47:99:A6:A4:3A:99:1C:0D:B9:43:A4:B7:EA:A2:5D:A8:FB:77:B1:CD:6F:3F:FD:60:85:92:AD:6C:F8:DF:EE:12:CA:80:24:6C:F1:21:91:06:FC:45:5D :B3:E6:11:9C:DA:27:78:1A:8A:04:DF:CE:35:39:5A:A4:CB:CF:85:35:C1:59:DC:EF:4A:53:17:42:60:9B:85:31:60:8C:47:7D:71:1D:F8:04:86:27:33:63:35:7E:29:BB:25:7A:DA:DD:3B:E0:88:96:FE:3C:1C:43:A5:89:72:68:04:8 A:D9:30:21:89:2D:D9:BD:D9:FF:29:E6:B6:DF:CA:B8:A6:0F:89:DD:2F:EE:C7:68:47:6C:B3:F5:07:AF:BC:FD:4F:09:EC:11:BE:B4:AC:BA:6D:52:95:4F:89:B5:E5:41:ED:57:4B:99:AA:14:37:15:76:57:16:71:52:40:CC:5C:65 :B8:4B:1D:D2:8C:76:2B:7A:C1:EF:6E:C2:29:10:49:B8:F5:00:DB:80:56:EB:CE:EE:91:C0:03:7D:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.33.1.1.1 CPS pointer: http://ca.ittelecom.it/ITTelecomCA/CPS CRL Distribution Points http://ca.ittelecom.it/ITTelecomCA/CRL Subject Key Identifier 16:BD:98:BF:7F:19:07:45:AB:F1:43:AA:3D:C6:1E:8C:CD:7B:69:04 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: A5:5A:6E:17:92:C0:6A:83:14:EB:C5:D6:3F:C6:3E:B5:46:9B:92:94:55:20:E8:DB:55:C1:C2:47:05: FF:2A:38 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2013-12-31T23:01:00Z 12.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.2.2 - Extension (critical): TakenOverBy ITALIA (ITALY) - Trusted List ID: ID100001 Page 197 ETSI 2014 - TSL HR - PDF/A-1b generator TakenOverBy URI [ en ] http://www.trusttechnologies.it Name [ en ] Telecom Italia Trust Technologies S.r.l. Name [ it ] Telecom Italia Trust Technologies S.r.l. Name [ en ] Agenzia per l'Italia Digitale Name [ it ] Agenzia per l'Italia Digitale TSP Name Scheme Operator Name Scheme Territory IT 12.2.3 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom Firma Qualificata CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom Firma Qualificata CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-12-31T23:00:00Z 12.2.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 198 ETSI 2014 - TSL HR - PDF/A-1b generator 12.2.4 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom Firma Qualificata CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom Firma Qualificata CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2008-12-02T16:14:00Z 12.2.4.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.3 - Service : CN=I.T. Telecom per GOLEM Software s.r.l.,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=I.T. Telecom per GOLEM Software s.r.l.,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 199 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1 -----BEGIN CERTIFICATE----MIIESzCCAzOgAwIBAgIBATANBgkqhkiG9w0BAQUFADCBgDELMAkGA1UEBhMCSVQxHDAaBgNVBAoT E0kuVC4gVGVsZWNvbSBTLlIuTC4xIjAgBgNVBAsTGVNlcnZpemkgZGkgY2VydGlmaWNhemlvbmUx LzAtBgNVBAMTJkkuVC4gVGVsZWNvbSBwZXIgR09MRU0gU29mdHdhcmUgcy5yLmwuMB4XDTA0MTIx NDE2NTk0MFoXDTE0MTIxNDE2NTg1MFowgYAxCzAJBgNVBAYTAklUMRwwGgYDVQQKExNJLlQuIFRl bGVjb20gUy5SLkwuMSIwIAYDVQQLExlTZXJ2aXppIGRpIGNlcnRpZmljYXppb25lMS8wLQYDVQQD EyZJLlQuIFRlbGVjb20gcGVyIEdPTEVNIFNvZnR3YXJlIHMuci5sLjCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALJ0EngJXgILNwDJLMTUOg36E2SsjZZrp1FhRsAdm8k2/JWGrH4M4cme b2GRPNJ1pAscGoyTzXN0lmmI/0G6Jk8OzXiGSht9HEbXAtXSpZFv+A3wTTTuT1x9i6GB9k6OzTIj oSJK6U684u19AHgQOuDq5ZGUwgz8fR/HMV9S5PNx+G8Q2J9VwoGny+D7HQ/4fhGj0Jqvj3d8bPxx 5uEF42vEFcikZXnyyB1uwA4d27XNMxN0a2UJvixpAoNn8zxLc1UhGPRntGxDbE6fLqioAQBNQa8t cqks4WEOY212VIqoDG3Le05buVvjPTR0/7cnZ1W+wWc3zclsCMHbw/zh2pMCAwEAAaOBzTCByjAS BgNVHRMBAf8ECDAGAQH/AgEAME8GA1UdIARIMEYwRAYGK0wMAQEBMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmZpcm1hc2ljdXJhLml0L0NlcnRpZmljYXRvcmUvQ1BTMDQGA1UdHwQtMCswKaAn oCWGI2h0dHA6Ly9jcmwuZmlybWFzaWN1cmEuaXQvR29sZW0vQ1JMMA4GA1UdDwEB/wQEAwIBBjAd BgNVHQ4EFgQUPAy4C2rTkS0BM9ZaaQyKkqEZclswDQYJKoZIhvcNAQEFBQADggEBABnxF5VqKFS/ qfqQ5rGd6VWm/MPwMzL9dszzMjHUNVw1cWpPas1oKECDqR2KO0O/uV7l8LuIrRM3ypJczVbaAfTt uD9oKqfKg538Z13HOhYRt9b8U2jlfJK4AkuKFU8x9+7a5Fa+/Wm9sGa0HZeIzfPh/EhEoPKw9d6P gPQ2HHkkz0EtJn6BT0ronawoyBxgX52Z2sLl2raduu3CBO7fbDORulozR9/6gH29JNEFLexs3ISc nKSo5rxFpwo7Ww1poi5f2QBJdU4jnohqiF+xON5buTSSefBchXenlkKX/6xS4ws1EvY3NK0bJzUf Rrb8oh3Q6Z+TfeRMhBkxT4K4DX8= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: I.T. Telecom per GOLEM Software s.r.l. Issuer OU: Servizi di certificazione Issuer O: I.T. Telecom S.R.L. Issuer C: IT Subject CN: I.T. Telecom per GOLEM Software s.r.l. Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Valid from: Tue Dec 14 17:59:40 CET 2004 Valid to: Sun Dec 14 17:58:50 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.12.1.1.1 CPS pointer: https://www.firmasicura.it/Certificatore/CPS CRL Distribution Points http://crl.firmasicura.it/Golem/CRL Subject Key Identifier 3C:0C:B8:0B:6A:D3:91:2D:01:33:D6:5A:69:0C:8A:92:A1:19:72:5B Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 0A:B8:67:BF:C6:8D:88:EB:F1:28:4F:4D:A7:E3:48:75:D4:60:22:05:67:A7:94:E5:4F:5D:B6:B0:32: 3E:C4:C2 ITALIA (ITALY) - Trusted List ID: ID100001 Page 200 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2014-01-01T00:01:00Z 12.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.3.2 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.trusttechnologies.it Name [ en ] Telecom Italia Trust Technologies S.r.l. Name [ it ] Telecom Italia Trust Technologies S.r.l. [ en ] Agenzia per l'Italia Digitale TSP Name Scheme Operator Name Name Scheme Territory IT 12.3.3 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom per GOLEM Software s.r.l.,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom per GOLEM Software s.r.l. Subject OU: Servizi di certificazione ITALIA (ITALY) - Trusted List ID: ID100001 Page 201 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2014-01-01T00:00:00Z 12.3.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.3.4 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom per GOLEM Software s.r.l.,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom per GOLEM Software s.r.l. Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2003-09-09T13:14:22Z 12.3.4.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.4 - Service : CN=I.T. Telecom per il Ministero dell'Interno CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/CA/QC Page 202 ETSI 2014 - TSL HR - PDF/A-1b generator Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=I.T. Telecom per il Ministero dell'Interno CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEVzCCAz+gAwIBAgIBATANBgkqhkiG9w0BAQUFADCBhzELMAkGA1UEBhMCSVQxHDAaBgNVBAoT E0kuVC4gVGVsZWNvbSBTLlIuTC4xIjAgBgNVBAsTGVNlcnZpemkgZGkgY2VydGlmaWNhemlvbmUx NjA0BgNVBAMTLUkuVC4gVGVsZWNvbSBwZXIgaWwgTWluaXN0ZXJvIGRlbGwnSW50ZXJubyBDQTAe Fw0wNDEyMTQxNzA2MzRaFw0xNDEyMTQxNzA1NDBaMIGHMQswCQYDVQQGEwJJVDEcMBoGA1UEChMT SS5ULiBUZWxlY29tIFMuUi5MLjEiMCAGA1UECxMZU2Vydml6aSBkaSBjZXJ0aWZpY2F6aW9uZTE2 MDQGA1UEAxMtSS5ULiBUZWxlY29tIHBlciBpbCBNaW5pc3Rlcm8gZGVsbCdJbnRlcm5vIENBMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf9NPR4fxPb2L2pvqeoDFRNBrziIRur2WNp1 DQG3BWUKpNlE+0SxfATbWOWjjPq7si0EblIuW81e+PJZY9y7Rbxu7bL8PMcwb8z9Jkk4rAvdRAjz CcegyH2onS6gcwDONYgJcsC4+DUmFaZn5ZFMFEd2yIN94fC2wkkybVm4k3zK835TngEuQNRdAQzX mbpuGyJ8A/jdhz8U/rWOITjRr0ojNAY1ktoQXCehznPtTKxxFqP4Ksc/yg9GGUaTYwnzdqDxNzRw NvA8t6rb61G/wt+RrMn5wFk8cnNNGqSD4vqzM0aQIrlwxvEHk0Lime56Jllr+AZj0QB1sm8Qg51a 2wIDAQABo4HLMIHIMBIGA1UdEwEB/wQIMAYBAf8CAQAwTwYDVR0gBEgwRjBEBgYrTAwBAQEwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuZmlybWFzaWN1cmEuaXQvQ2VydGlmaWNhdG9yZS9DUFMw MgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5maXJtYXNpY3VyYS5pdC9NREkvQ1JMMA4GA1Ud DwEB/wQEAwIBBjAdBgNVHQ4EFgQUeibTx3sgN48qq5+I78NwDDg58oUwDQYJKoZIhvcNAQEFBQAD ggEBADa30ESGaqRMQaPimEy3w0DFaXJKV7+HYU7XUY0O4KiF9lsKPww76/H+TFKJiS7xoJjSIml0 wjN6k82IMrKmfyDIEHoRaBa2+MfcEQYZuuuUOqMfZAe6ZJeYwCkQjiKC017R3a3VyiMASgqXru0f Lw5JGhqP7sA5jHjbBD/vBZ4QyA50Jc8j1/LWkLYpEiyLHXJJkxJsow6pKOZdZFCq4MaKepVSq+zu Mif2C5Pr9gE3tAy+8N1KLHp+PQD3IOounHxiH3nq09qupT29lgitd+BO5SQxMlq1q3H5aX+J/hBm y1aujVWOOILlww3jSibZzfndXR0qw8d7zmwa6Sf0w+0= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: I.T. Telecom per il Ministero dell'Interno CA Issuer OU: Servizi di certificazione Issuer O: I.T. Telecom S.R.L. Issuer C: IT Subject CN: I.T. Telecom per il Ministero dell'Interno CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Valid from: Tue Dec 14 18:06:34 CET 2004 Valid to: Sun Dec 14 18:05:40 CET 2014 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true - Path length: 0 Page 203 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.76.12.1.1.1 CPS pointer: https://www.firmasicura.it/Certificatore/CPS CRL Distribution Points http://crl.firmasicura.it/MDI/CRL Subject Key Identifier 7A:26:D3:C7:7B:20:37:8F:2A:AB:9F:88:EF:C3:70:0C:38:39:F2:85 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: AA:52:4A:70:24:C3:6E:E1:DD:82:D4:7A:BE:02:86:0C:DF:EB:B3:D6:14:9B:38:9C:DD:79:D1:9F: 54:01:70:3A Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2013-12-31T23:01:00Z 12.4.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.4.2 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.trusttechnologies.it [ en ] Telecom Italia Trust Technologies S.r.l. [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Name Scheme Territory IT 12.4.3 - History instance n.1 - Status: accreditationceased Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/CA/QC Page 204 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] CN=I.T. Telecom per il Ministero dell'Interno CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom per il Ministero dell'Interno CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-12-31T23:00:00Z 12.4.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.4.4 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom per il Ministero dell'Interno CA,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom per il Ministero dell'Interno CA Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-12-14T18:06:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 205 ETSI 2014 - TSL HR - PDF/A-1b generator 12.4.4.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 12.5 - Service : CN=I.T. Telecom Time Stamp Authority,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=I.T. Telecom Time Stamp Authority,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEMzCCAxugAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDEcMBoGA1UEChMT SS5ULiBUZWxlY29tIFMuUi5MLjEiMCAGA1UECxMZU2Vydml6aSBkaSBjZXJ0aWZpY2F6aW9uZTEq MCgGA1UEAxMhSS5ULiBUZWxlY29tIFRpbWUgU3RhbXAgQXV0aG9yaXR5MB4XDTA0MTIxNDE3MTU1 M1oXDTE0MTIxNDE3MTM0NVowezELMAkGA1UEBhMCSVQxHDAaBgNVBAoTE0kuVC4gVGVsZWNvbSBT LlIuTC4xIjAgBgNVBAsTGVNlcnZpemkgZGkgY2VydGlmaWNhemlvbmUxKjAoBgNVBAMTIUkuVC4g VGVsZWNvbSBUaW1lIFN0YW1wIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcD/xFFbySGfeIa2SF5QBQFl+Lt+TIEbDH9djSTS0WlG/kF/h7FZqJspcVsvufJV0sJOJMu C0b/vGdBc96UyTUJvI9hE6lhGF/+8zn+ihyLYmc1BS7WNuKUKGVQAYcn+d27ipCblox0M8PzuBay mILkrXBsQ1z4DbW8Kf/ZDZTOxFnIGjReQ5Wkn31xLYBb9Nk0orvvjVGTZplJFCx6bzXY9scrkFsM TCvjvPT9c9whg4mOHWieb+rUMI5zTIddMTqIlPXmslXwWd6eD51NCmwN5l0kJuixoLfp6MwYcR+E n07GPvVAwVn35ReNla2GFIwfUID2zgFYpYmxKHBl6I0CAwEAAaOBwTCBvjASBgNVHRMBAf8ECDAG AQH/AgEAMEUGA1UdIAQ+MDwwOgYGK0wMAQECMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmZp cm1hc2ljdXJhLml0L1RTQS9DUFMwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5maXJtYXNp Y3VyYS5pdC9UU0EvQ1JMMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUHptz107Vi+WvXUAVD+k6 BrU89yswDQYJKoZIhvcNAQEFBQADggEBAGgfQ8tSxL44JpGKOHnR+Q8+v5DoTczlLItvwGs58cMt nTeWQLDIcV010RE2fw7BRgIegjxU0WaTr2R3ojkEMc6L9PPeVHPQzLoRzwHu/0YQoqoth+Droo4/ 4GMX8oIWiaS2XvtdXolIWG0Dcj+u7biiX284PgND5KddPBNhaWLZi/7Apn6JVcFYvwE6tubo2sAM rHC2lTG47hlHO/yGtI3VWdBqlU0BRLUx67xVDjbG/2vc0DLhThHUB+CXlB98HnQHawfUackOs8B1 EloHs9jtPSaWhWmrrva4tl3rM2wz91UELrYXfUsOAthwlWi/2yrCb0V2kEzWErwymdrGPkc= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: I.T. Telecom Time Stamp Authority Issuer OU: Servizi di certificazione Issuer O: I.T. Telecom S.R.L. Issuer C: IT Subject CN: I.T. Telecom Time Stamp Authority Subject OU: Servizi di certificazione ITALIA (ITALY) - Trusted List ID: ID100001 Page 206 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: I.T. Telecom S.R.L. Subject C: IT Valid from: Tue Dec 14 18:15:53 CET 2004 Valid to: Sun Dec 14 18:13:45 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.12.1.1.2 CPS pointer: https://www.firmasicura.it/TSA/CPS CRL Distribution Points http://crl.firmasicura.it/TSA/CRL Subject Key Identifier 1E:9B:73:D7:4E:D5:8B:E5:AF:5D:40:15:0F:E9:3A:06:B5:3C:F7:2B Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2B:87:DD:AF:6F:AB:E8:A8:73:8E:E6:72:F0:9F:3C:51:33:21:6E:5A:A0:B3:30:57:28:BA:A4:CC:1 C:46:46:5C Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2013-12-31T23:01:00Z 12.5.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.trusttechnologies.it [ en ] Telecom Italia Trust Technologies S.r.l. [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Name Scheme Territory ITALIA (ITALY) - Trusted List ID: ID100001 IT Page 207 ETSI 2014 - TSL HR - PDF/A-1b generator 12.5.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=I.T. Telecom Time Stamp Authority,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom Time Stamp Authority Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-12-31T23:00:00Z 12.5.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=I.T. Telecom Time Stamp Authority,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom Time Stamp Authority Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-12-14T18:15:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 208 ETSI 2014 - TSL HR - PDF/A-1b generator 12.6 - Service : CN=I.T. Telecom per il Ministero dell'Interno CA 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=I.T. Telecom per il Ministero dell'Interno CA 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEUDCCAzigAwIBAgIBATANBgkqhkiG9w0BAQsFADCBiTELMAkGA1UEBhMCSVQxHDAaBgNVBAoM E0kuVC4gVGVsZWNvbSBTLlIuTC4xIjAgBgNVBAsMGVNlcnZpemkgZGkgY2VydGlmaWNhemlvbmUx ODA2BgNVBAMML0kuVC4gVGVsZWNvbSBwZXIgaWwgTWluaXN0ZXJvIGRlbGwnSW50ZXJubyBDQSAx MB4XDTEyMDQxNzE2MjMzN1oXDTMyMDQxNzE2MjMzN1owgYkxCzAJBgNVBAYTAklUMRwwGgYDVQQK DBNJLlQuIFRlbGVjb20gUy5SLkwuMSIwIAYDVQQLDBlTZXJ2aXppIGRpIGNlcnRpZmljYXppb25l MTgwNgYDVQQDDC9JLlQuIFRlbGVjb20gcGVyIGlsIE1pbmlzdGVybyBkZWxsJ0ludGVybm8gQ0Eg MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPTuCvjyeAPwbxhDHbMXuXb8dwcukCjw EpxrgISzFD+Y9viMh/TB+BWfjesDvpPU/RJi2sgxJScwiAGBYOTRkT++mDopo1wccP7NEHxbwA6M vnXxmfAvFWclb6yHGnoakOeOnUmixDxdfWvZ0gGtCmK+GAGIt7olOhZ5kf1bLYnZjSJnLeaz8ZDn +IEM0gobkupWdBeCL8mR4kzAenfIWncwu+mUOSznHMRSrHgMPMaPuTgYDDBQXsxD0bbCX5DMIFeT XDLqDRHWO76K5MXYfeRZL7jUsr5BO+rPcDisr97Gc6ctazHG/eGRwVm107fR8ABfRmxRXacwbI9y CQaawYMCAwEAAaOBwDCBvTASBgNVHRMBAf8ECDAGAQH/AgEAMEQGA1UdIAQ9MDswOQYGK0whAQEB MC8wLQYIKwYBBQUHAgEWIWh0dHA6Ly9jYS5pdHRlbGVjb20uaXQvTURJQ0ExL0NQUzAyBgNVHR8E KzApMCegJaAjhiFodHRwOi8vY2EuaXR0ZWxlY29tLml0L01ESUNBMS9DUkwwDgYDVR0PAQH/BAQD AgEGMB0GA1UdDgQWBBTReja/t3UXjoWmpa9vZJ4gx+LpczANBgkqhkiG9w0BAQsFAAOCAQEA17Li G/4Bxem00u0lVV0z0PqnZ/5CL2SKLdI05PgccX6Hv43WwB60OMyQz93ncBz0WguvTNb02tWFVd+t 51I41dHYD0kdNv8ivxCMELLXLi6qf2SVo7cdjhaj0tx9XIs2h4Nj4QGS9QKO6ED86aJlCjvnyvOR kPfpH/DNhep/B2QABiWAR1FIO2HfwuPss8kkhuyhFdy4m+pnRCxZLplsT+0TT/+VWHmZNBCJFM5r WeU1CoBTrectIpbtEV4Of1YK/2VGPD6ZZxEwHkuCfKSopuJVX/MkOQI1cmw2TSWwd5Ofy3iL6r/4 lJBmc/mzMno+bHqSoyfTBWi7oCFmZbedBQ== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: I.T. Telecom per il Ministero dell'Interno CA 1 Issuer OU: Servizi di certificazione Issuer O: I.T. Telecom S.R.L. Issuer C: IT Subject CN: I.T. Telecom per il Ministero dell'Interno CA 1 Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Valid from: Tue Apr 17 18:23:37 CEST 2012 ITALIA (ITALY) - Trusted List ID: ID100001 Page 209 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Sat Apr 17 18:23:37 CEST 2032 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:F4:EE:0A:F8:F2:78:03:F0:6F:18:43:1D:B3:17:B9:76:FC:77:07:2E:90:28:F0:12:9C:6B:80:84:B3:14:3F:98:F6:F8:8C:8 7:F4:C1:F8:15:9F:8D:EB:03:BE:93:D4:FD:12:62:DA:C8:31:25:27:30:88:01:81:60:E4:D1:91:3F:BE:98:3A:29:A3:5C:1C:70:FE:CD:10:7C:5B:C0:0E:8C:BE:75:F1:99:F0:2F:15:67:25:6F:AC:87:1A:7A:1A:90:E7:8E:9D:49:A2: C4:3C:5D:7D:6B:D9:D2:01:AD:0A:62:BE:18:01:88:B7:BA:25:3A:16:79:91:FD:5B:2D:89:D9:8D:22:67:2D:E6:B3:F1:90:E7:F8:81:0C:D2:0A:1B:92:EA:56:74:17:82:2F:C9:91:E2:4C:C0:7A:77:C8:5A:77:30:BB:E9:94:39:2C: E7:1C:C4:52:AC:78:0C:3C:C6:8F:B9:38:18:0C:30:50:5E:CC:43:D1:B6:C2:5F:90:CC:20:57:93:5C:32:EA:0D:11:D6:3B:BE:8A:E4:C5:D8:7D:E4:59:2F:B8:D4:B2:BE:41:3B:EA:CF:70:38:AC:AF:DE:C6:73:A7:2D:6B:31:C6: FD:E1:91:C1:59:B5:D3:B7:D1:F0:00:5F:46:6C:51:5D:A7:30:6C:8F:72:09:06:9A:C1:83:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.33.1.1.1 CPS pointer: http://ca.ittelecom.it/MDICA1/CPS CRL Distribution Points http://ca.ittelecom.it/MDICA1/CRL Subject Key Identifier D1:7A:36:BF:B7:75:17:8E:85:A6:A5:AF:6F:64:9E:20:C7:E2:E9:73 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: C6:62:29:06:A2:98:5F:0C:28:B7:1D:40:12:7D:60:91:65:09:B7:1C:3E:CB:DA:82:E6:DB:24:46:DF: 35:7E:22 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2013-12-31T23:01:00Z 12.6.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2012-04-17T18:23:37Z 12.6.2 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.trusttechnologies.it [ en ] Telecom Italia Trust Technologies S.r.l. [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Name Scheme Territory ITALIA (ITALY) - Trusted List ID: ID100001 IT Page 210 ETSI 2014 - TSL HR - PDF/A-1b generator 12.6.3 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom per il Ministero dell'Interno CA 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom per il Ministero dell'Interno CA 1 Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-12-31T23:00:00Z 12.6.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2012-04-17T18:23:37Z 12.6.4 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=I.T. Telecom per il Ministero dell'Interno CA 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom per il Ministero dell'Interno CA 1 Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. ITALIA (ITALY) - Trusted List ID: ID100001 Page 211 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2012-04-17T18:23:00Z 12.6.4.2 - Extension (not critical): expiredCertsRevocationInfo dateTime 2012-04-17T18:23:37Z 12.7 - Service : CN=I.T. Telecom Time Stamp Authority 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=I.T. Telecom Time Stamp Authority 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJJVDEcMBoGA1UECgwT SS5ULiBUZWxlY29tIFMuUi5MLjEiMCAGA1UECwwZU2Vydml6aSBkaSBjZXJ0aWZpY2F6aW9uZTEs MCoGA1UEAwwjSS5ULiBUZWxlY29tIFRpbWUgU3RhbXAgQXV0aG9yaXR5IDEwHhcNMTIwMjIxMTEy OTQwWhcNMzIwMjIxMTEyOTQwWjB9MQswCQYDVQQGEwJJVDEcMBoGA1UECgwTSS5ULiBUZWxlY29t IFMuUi5MLjEiMCAGA1UECwwZU2Vydml6aSBkaSBjZXJ0aWZpY2F6aW9uZTEsMCoGA1UEAwwjSS5U LiBUZWxlY29tIFRpbWUgU3RhbXAgQXV0aG9yaXR5IDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCgLYC1SEb4CwaTbM2dfjwgRQACkxBrJ1172cwGgieFoFjFdcNMnkARm+sGBlT6Yhzy iZLWez88/hzrN2is93eCPPxRhOcexdR/jnAXM+I00/CUzlrYV4ZK298dnUtW3ETpc4562ClqfyJA L6wArn5YPVtDGH34weTGeGRYuTMqYKQoQR/HAf+GBiVFXFqKaH5mc/wFz7CfSeCW8HG10jK30Of9 EpSqSu0+dspwEwunxKStkoJBwtbbxeJpySOpkTxMPqtsPyPSR2X13V31D0E5seF9s57C8KlKpEr1 177nZQygdQsVZgg7y6VCitj4p7ywdrjStL6qKY5XSQiyHNCfAgMBAAGjgbwwgbkwEgYDVR0TAQH/ BAgwBgEB/wIBADBCBgNVHSAEOzA5MDcGBitMIQEBAjAtMCsGCCsGAQUFBwIBFh9odHRwOi8vY2Eu aXR0ZWxlY29tLml0L1RTQTEvQ1BTMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9jYS5pdHRlbGVj b20uaXQvVFNBMS9DUkwwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTfQ/dakmRjHkYgQ7q7DcN+ bh+yIjANBgkqhkiG9w0BAQsFAAOCAQEAcvozvUDyM+VyVBgMq5Y84tfZDEYaaV1IQuWFu2krRMIj XHJ6ubs8if/DV5c2UPyTSXkIjcmaVdKRBqRNZwMz6m9QcNIh8rAJvm2TzO5g2/rZ/LH+SPJK3hW6 pF+Yi7lXDwXSsUrXC+a2m9WcZD+4MM5NXJ4XZBuXMtEwkzOCXTNzlFi4gST1CC4nXVlyydCPeRA4 fJh5kmSk+R5mB0zdnly03ozhL1AZmomBIBLxU1nD5cRWih2LrIALyUVTwoq8Lfnuv5zd6o4Z4fEH cCDbpm2fO1z2TcaWLo/YdFPcBk6cx24h1iyvVpaf7uQt9EtvXvrBrcXLaGA4UjlXzNGoUA== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: I.T. Telecom Time Stamp Authority 1 Issuer OU: Servizi di certificazione Issuer O: I.T. Telecom S.R.L. ITALIA (ITALY) - Trusted List ID: ID100001 Page 212 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer C: IT Subject CN: I.T. Telecom Time Stamp Authority 1 Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Valid from: Tue Feb 21 12:29:40 CET 2012 Valid to: Sat Feb 21 12:29:40 CET 2032 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.33.1.1.2 CPS pointer: http://ca.ittelecom.it/TSA1/CPS CRL Distribution Points http://ca.ittelecom.it/TSA1/CRL Subject Key Identifier DF:43:F7:5A:92:64:63:1E:46:20:43:BA:BB:0D:C3:7E:6E:1F:B2:22 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: CC:61:E9:39:9D:D5:10:2B:EF:E2:18:E9:65:DD:A9:EC:6A:74:6E:4D:77:A6:05:F6:4A:B6:9C:07:7 9:69:19:A8 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2013-12-31T23:01:00Z 12.7.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.trusttechnologies.it TSP Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 213 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] Telecom Italia Trust Technologies S.r.l. [ en ] Agenzia per l'Italia Digitale Scheme Operator Name Name Scheme Territory IT 12.7.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=I.T. Telecom Time Stamp Authority 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom Time Stamp Authority 1 Subject OU: Servizi di certificazione Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-12-31T23:00:00Z 12.7.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=I.T. Telecom Time Stamp Authority 1,OU=Servizi di certificazione,O=I.T. Telecom S.R.L.,C=IT Service digital identities X509SubjectName Subject CN: I.T. Telecom Time Stamp Authority 1 Subject OU: Servizi di certificazione ITALIA (ITALY) - Trusted List ID: ID100001 Page 214 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: I.T. Telecom S.R.L. Subject C: IT Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2012-02-21T12:29:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 215 ETSI 2014 - TSL HR - PDF/A-1b generator 13 - TSP: In.Te.S.A. S.p.A. TSP Name Name [ en ] In.Te.S.A. S.p.A. Name [ it ] In.Te.S.A. S.p.A. Name [ en ] Intesa Name [ it ] Intesa Name [ it ] VATIT-05262890014 Name [ en ] VATIT-05262890014 Street Address [ en ] Via Pianezza, 289 Locality [ en ] torino Postal Code [ en ] 10137 Country Name [ en ] IT Street Address [ it ] Via Pianezza, 289 Locality [ it ] torino Postal Code [ it ] 10137 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI mailto:[email protected] URI http://e-trustcom.intesa.it/ca_pubblica/TSPinfo.html TSP Information URI URI [ en ] http://e-trustcom.intesa.it/ca_pubblica/TSPinfo.html URI [ it ] http://e-trustcom.intesa.it/ca_pubblica/pubblica.html ITALIA (ITALY) - Trusted List ID: ID100001 Page 216 ETSI 2014 - TSL HR - PDF/A-1b generator 13.1 - Service : CN=In.Te.S.A. - Certification Authority,O=In.Te.S.A. S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=In.Te.S.A. - Certification Authority,O=In.Te.S.A. S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1020330259 X509 Certificate -----BEGIN CERTIFICATE----MIIEeDCCA2CgAwIBAgIEPNEBEzANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJJVDEaMBgGA1UE ChMRSW4uVGUuUy5BLiBTLnAuQS4xLTArBgNVBAMTJEluLlRlLlMuQS4gLSBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eTAeFw0wMjA1MDIwOTA0MzVaFw0xMjA0MjkwODA0MzVaMFgxCzAJBgNVBAYTAklU MRowGAYDVQQKExFJbi5UZS5TLkEuIFMucC5BLjEtMCsGA1UEAxMkSW4uVGUuUy5BLiAtIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6zvgeBQ hxfMRWGxKxnBlwsYeyVU+zdxwz8RlPqbfKw6hb1j8l1aVP4Jfcji/Z+BjBwB2/eUYgKPHsMkNNVq 8EpoEHeJiEjN6yire2Txn7weJXz+udw80EEkR1IRkFTEL9Kiq1tHzZqpm2r3hNo1xWU39hN7V3sS AJSOWo9d/Rhbgh2P142NhrnTdqXB9sp1ro6GgwoXrj7ljDwTRjgEDcDJMf5CtP+Qb60cv246x+pG 32iP794/17vf6aY+SureZGI9lLFaqlXkktXkFvZ6r1J67LRDWKYO9Hr2OZllK8Zdbn7pgxJ7LSeU OLfSXSlxGNdlGBiyihABKGYnw0GSPwIDAQABo4IBSDCCAUQwDwYDVR0TAQH/BAUwAwEB/zA+BgNV HSAENzA1MDMGBitMFQEBATApMCcGCCsGAQUFBwIBFhtodHRwOi8vZS10cnVzdGNvbS5pbnRlc2Eu aXQwPAYDVR0fBDUwMzAxoC+gLYYraHR0cHM6Ly9lLXRydXN0Y29tLmludGVzYS5pdC9DUkwvSU5U RVNBLmNybDAdBgNVHQ4EFgQUGQkDltG4xVgbfhDkbsT2oBIJEKgwgYMGA1UdIwR8MHqAFBkJA5bR uMVYG34Q5G7E9qASCRCooVykWjBYMQswCQYDVQQGEwJJVDEaMBgGA1UEChMRSW4uVGUuUy5BLiBT LnAuQS4xLTArBgNVBAMTJEluLlRlLlMuQS4gLSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eYIEPNEB EzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAC2EoFxzHPhxH+eqAMr6ylOW85UB k6BQwQWu0iwbxmII5//xD4WCQlPROvIXZYzCjOX5fsrSuHr3PFVgY5AzeGitjBTWT0R+nUy2/p6C TV5Hc6jWfom86S/qUWt5Jtfmm2D47C6yohhmhJiGcyb/OZvXwcLa1/ClPc1jEHcqoGHk/cTmI9vw jaThe1JgsaNnS7TVnmI91np4s0vlBqV0/YRdYMH/u2KyXjcOl5wPEPqdyv2EAb/Z0PN38PfqCI8j xIz58h1iQc/0finygBYXnVuFV1HXgKx+Q9O3wHikFslxPsJRHYl/1dcn1qu4e04vNE8ZdJX7lpTP KMu57CjHOGE= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: In.Te.S.A. - Certification Authority Issuer O: In.Te.S.A. S.p.A. Issuer C: IT Subject CN: In.Te.S.A. - Certification Authority Subject O: In.Te.S.A. S.p.A. Subject C: IT Valid from: Thu May 02 11:04:35 CEST 2002 Valid to: Sun Apr 29 10:04:35 CEST 2012 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true Page 217 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.76.21.1.1.1 CPS pointer: http://e-trustcom.intesa.it CRL Distribution Points https://e-trustcom.intesa.it/CRL/INTESA.crl Subject Key Identifier 19:09:03:96:D1:B8:C5:58:1B:7E:10:E4:6E:C4:F6:A0:12:09:10:A8 Authority Key Identifier 19:09:03:96:D1:B8:C5:58:1B:7E:10:E4:6E:C4:F6:A0:12:09:10:A8 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 9B:CF:0D:B1:4D:58:AA:B0:09:7A:19:74:C1:88:24:8A:DF:44:6B:F8:95:2C:76:D6:0E:96:58:72:A9: 8D:5A:CA Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2002-05-02T11:04:35Z 13.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 13.2 - Service : CN=IN.TE.S.A. Certification Authority,O=IN.TE.S.A. S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=IN.TE.S.A. Certification Authority,O=IN.TE.S.A. S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1269951323 ITALIA (ITALY) - Trusted List ID: ID100001 Page 218 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIEhjCCA26gAwIBAgIES7HrWzANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJJVDEaMBgGA1UE CgwRSU4uVEUuUy5BLiBTLnAuQS4xKzApBgNVBAMMIklOLlRFLlMuQS4gQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkwHhcNMTAwMzMwMTE0NTI0WhcNMjUwMzMwMTIxNTI0WjBWMQswCQYDVQQGEwJJVDEa MBgGA1UECgwRSU4uVEUuUy5BLiBTLnAuQS4xKzApBgNVBAMMIklOLlRFLlMuQS4gQ2VydGlmaWNh dGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpFOnt3V83F1Q xO5o4J88VX96ovjBRuHHt9oyDGz90+e1FEnxVmWmOX1o/0ZQMeJ84cJfP4p3ny4gyRviWtW4ipME zGV9DfhPkPvom/AW9al8q/DRHdIlXK2NXE30FLtWldutjxmONLNsFTiLA4CwQiAnH/h9v6YUWqZ6 dkGhxxVbPE6A9r1nSaNiHV4u2p/15nieJ3UZRm0vIshWkQNmmM6ttEASwwISX7czyVzXqnmZxXTk Zf23LL/HMLzHdc3cd26/frdWHXnhgQXiX5cBY3MQRbFlZbC8UIGXhdW4CsEMJmn24fTAV7LRZbNb P1PBi+X0K2ELrrV+ezLmycBpAgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1Ud DwEB/wQEAwIBBjA+BgNVHSAENzA1MDMGBitMFQEDATApMCcGCCsGAQUFBwIBFhtodHRwOi8vZS10 cnVzdGNvbS5pbnRlc2EuaXQwga8GA1UdHwSBpzCBpDAzoDGgL4YtaHR0cDovL2UtdHJ1c3Rjb20u aW50ZXNhLml0L0NSTC9JTlRFU0FfQ0EuY3JsMG2ga6BppGcwZTELMAkGA1UEBhMCSVQxGjAYBgNV BAoMEUlOLlRFLlMuQS4gUy5wLkEuMSswKQYDVQQDDCJJTi5URS5TLkEuIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MQ0wCwYDVQQDDARDUkwxMB8GA1UdIwQYMBaAFB11i9nPhYOC8ya3VneKzlDbLMs9 MB0GA1UdDgQWBBQddYvZz4WDgvMmt1Z3is5Q2yzLPTANBgkqhkiG9w0BAQUFAAOCAQEAkBak6Gw3 5HjyjyEOvw+kFuwxPDRUdV8laJ7LTvqbIZ/Hg9jvMulN0v57FUB/Q4Kjye6pJufFhwsfIPRCoJvw orlCPVQoMYrkSio1w0eawJpwoNSHuIDHsIyHwHjn8P5WeTFIOeGVSVy8gPIuTErrQIIEE1Ht5p9/ lz7gzYC59o+NEn1TR25/bNqm3/8MZPQr8tIdJ296MnrxWfVyBchvoI1Q0aMEh1jW7JJGceldAlNx f2jo/46mtIlcPqVS1KWXT8Ca7FN9xTAsviZKCRRDDAoa79wh6G8PF5nQ7I9sCvJMOWMd7WtoVnH3 ReLe9/HlC263S2AWI6WRAxFuOdS6+w== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: IN.TE.S.A. Certification Authority Issuer O: IN.TE.S.A. S.p.A. Issuer C: IT Subject CN: IN.TE.S.A. Certification Authority Subject O: IN.TE.S.A. S.p.A. Subject C: IT Valid from: Tue Mar 30 13:45:24 CEST 2010 Valid to: Sun Mar 30 14:15:24 CEST 2025 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.21.1.3.1 CPS pointer: http://e-trustcom.intesa.it CRL Distribution Points http://e-trustcom.intesa.it/CRL/INTESA_CA.crl C=IT,O=IN.TE.S.A. S.p.A.,CN=IN.TE.S.A. Certification Authority,CN=CRL1 Authority Key Identifier 1D:75:8B:D9:CF:85:83:82:F3:26:B7:56:77:8A:CE:50:DB:2C:CB:3D Subject Key Identifier 1D:75:8B:D9:CF:85:83:82:F3:26:B7:56:77:8A:CE:50:DB:2C:CB:3D Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FF:AE:CE:B7:39:E1:3B:3F:CA:24:A6:35:33:1B:8C:B8:90:1F:DF:4D:85:3E:F0:8B:E4:22:47:6B:F3 :9E:EA:C5 Service Status ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Page 219 ETSI 2014 - TSL HR - PDF/A-1b generator Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2010-03-30T13:45:24Z 13.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 13.3 - Service : CN=In.Te.S.A. - Time Stamping Certification Authority,O=In.Te.S.A. S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=In.Te.S.A. - Time Stamping Certification Authority,O=In.Te.S.A. S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1020334448 X509 Certificate -----BEGIN CERTIFICATE----MIIEpzCCA4+gAwIBAgIEPNERcDANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJJVDEaMBgGA1UE ChMRSW4uVGUuUy5BLiBTLnAuQS4xOzA5BgNVBAMTMkluLlRlLlMuQS4gLSBUaW1lIFN0YW1waW5n IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTAyMDUwMjEwMTQyM1oXDTEyMDQyOTA5MTQyM1ow ZjELMAkGA1UEBhMCSVQxGjAYBgNVBAoTEUluLlRlLlMuQS4gUy5wLkEuMTswOQYDVQQDEzJJbi5U ZS5TLkEuIC0gVGltZSBTdGFtcGluZyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANsybfPqI9rm7EDqu/DpUxQN+aYR5HIr3ppdkc++J2GXMtqD oDFZf4byTy/qrwYWev5sXHtxNOCsb2UDrMjST+cn7wO3qgvUzDUYNrjD6kZcSSQOYCFRWUBUBKKR PIxnBw7lWJk8mVC3uNAPyhB385giL7bH+iWDPiq88QwrcAr0ml6MBoy3p8QLfGQwyEZFmp7KyGoR PrYsooIDIlIHcV8YNjwA032nqNWTsn+9DXNnkkpHTgs1FJ5D7dunmesjgTECutiIPPLme2wl0ABZ mvIhLyPywiuIAeo040n5IgXmTG6BGu9hNMa8sESu1yzdTS+LJpvAy5H/eGEhxdDzHfsCAwEAAaOC AVswggFXMA8GA1UdEwEB/wQFMAMBAf8wPgYDVR0gBDcwNTAzBgYrTBUBAgEwKTAnBggrBgEFBQcC ARYbaHR0cDovL2UtdHJ1c3Rjb20uaW50ZXNhLml0MD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHBzOi8v ZS10cnVzdGNvbS5pbnRlc2EuaXQvQ1JML0lOVEVTQV9UUy5jcmwwHQYDVR0OBBYEFOd3UVh5WkZ/ 2ytcibIyHPCqQ55SMIGTBgNVHSMEgYswgYiAFOd3UVh5WkZ/2ytcibIyHPCqQ55SoWqkaDBmMQsw CQYDVQQGEwJJVDEaMBgGA1UEChMRSW4uVGUuUy5BLiBTLnAuQS4xOzA5BgNVBAMTMkluLlRlLlMu QS4gLSBUaW1lIFN0YW1waW5nIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggQ80RFwMA4GA1UdDwEB /wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAUrXtQFwkTjl+ZYQRi1zkY4LXU4bfwiqRgtcXe9YR DFAIix5JYIMAS+EXBhfxUFDXXZMOtWtRNOyyiSsfFd/PuoRHmpeMKUCraM9ZnP4e41DoYMuWLELe hLKtvYvVALl216Azw1b0jiIcQ8HcNMfVypmZcRtKdQCOe+BNbkN4YFmitEtJ45UoHWesyGr2paM3 KGMwoxqsR5uvjtmZHBF4mi6MBzhBKvUsf3wdDsJVL2ITdfpXMBIG3EC8uUDQ91cke1Iz2j64WsN4 8b+SjdAxNgOck17ejPlJQoKzgCDnEVOpC2oMg/Y2VrgGCusSXiFh4DoHwxidFApP3MugWKcBpg== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: In.Te.S.A. - Time Stamping Certification Authority Issuer O: In.Te.S.A. S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 220 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: In.Te.S.A. - Time Stamping Certification Authority Subject O: In.Te.S.A. S.p.A. Subject C: IT Valid from: Thu May 02 12:14:23 CEST 2002 Valid to: Sun Apr 29 11:14:23 CEST 2012 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.21.1.2.1 CPS pointer: http://e-trustcom.intesa.it CRL Distribution Points https://e-trustcom.intesa.it/CRL/INTESA_TS.crl Subject Key Identifier E7:77:51:58:79:5A:46:7F:DB:2B:5C:89:B2:32:1C:F0:AA:43:9E:52 Authority Key Identifier E7:77:51:58:79:5A:46:7F:DB:2B:5C:89:B2:32:1C:F0:AA:43:9E:52 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 43:91:00:D7:1C:9F:07:55:65:86:25:32:5D:80:24:70:6D:05:0B:D8:9B:F8:3B:CA:C4:4F:EF:41:73:3 D:4E:B9 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2002-05-02T12:14:23Z 13.4 - Service : CN=IN.TE.S.A. Time Stamping Certification Authority,O=IN.TE.S.A. S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 221 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=IN.TE.S.A. Time Stamping Certification Authority,O=IN.TE.S.A. S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1269954579 X509 Certificate -----BEGIN CERTIFICATE----MIIEsjCCA5qgAwIBAgIES7H4EzANBgkqhkiG9w0BAQUFADBkMQswCQYDVQQGEwJJVDEaMBgGA1UE CgwRSU4uVEUuUy5BLiBTLnAuQS4xOTA3BgNVBAMMMElOLlRFLlMuQS4gVGltZSBTdGFtcGluZyBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMDAzMzAxMjM5NDFaFw0yNTAzMzAxMzA5NDFaMGQx CzAJBgNVBAYTAklUMRowGAYDVQQKDBFJTi5URS5TLkEuIFMucC5BLjE5MDcGA1UEAwwwSU4uVEUu Uy5BLiBUaW1lIFN0YW1waW5nIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA3kh0JIqsm8v5Bux7wyTMF1cHV+iBhao1NQ5UCAJV+VSp7SpA/Jrn ey3UnmYnm9nI9bM1u3TXVjhhSWcSev25Zj2OKmy+pShCWPMzNHu+gpzJr5Ki2oWrC5oFZ2MvIjfp XzlpcEn4Kon4YJU/JS56r6tf/TCXCK3+IB0K71TqGtPaL5NEfGbCMKBRbWlQRYhWEJoaPE1VytnN NvDaBawmQ7UlXLGWq63D851NpYbQ+X3bjb1XGIduhGYbR/jpmmnzIuODH5GJfFGwxQlQU9Wwu5Cs gHlGeoD+pG/cPYyTvgCVmSMcS5CRX2BvQTXZ7JJbqktnJc1xQFuY7z7LrAbD3QIDAQABo4IBajCC AWYwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAQYwPgYDVR0gBDcwNTAzBgYrTBUB BAEwKTAnBggrBgEFBQcCARYbaHR0cDovL2UtdHJ1c3Rjb20uaW50ZXNhLml0MIG/BgNVHR8Egbcw gbQwNaAzoDGGL2h0dHA6Ly9lLXRydXN0Y29tLmludGVzYS5pdC9DUkwvSU5URVNBX1RTQ0EuY3Js MHugeaB3pHUwczELMAkGA1UEBhMCSVQxGjAYBgNVBAoMEUlOLlRFLlMuQS4gUy5wLkEuMTkwNwYD VQQDDDBJTi5URS5TLkEuIFRpbWUgU3RhbXBpbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxDTAL BgNVBAMMBENSTDEwHwYDVR0jBBgwFoAUQi7Jyw33tdjQlEMTGPyP7jinq10wHQYDVR0OBBYEFEIu ycsN97XY0JRDExj8j+44p6tdMA0GCSqGSIb3DQEBBQUAA4IBAQASJ0V6fFhCK2H68DYQ3cOMBz7x zfVRkI9hiQ+NCuoF/YVekPaerNkx2VLCjzKl7PQvZNVJn7x1vfCg/rimAg6ULrKHAxbqP2HW58bV yrk3deyjn45Ua6v+JsRE6umNxtOd1n6tlA4amu+dR3JqDhjcKIMA1z5mj2pjIDGPyAek2HJ2tvLQ juyrkKCpBmbqW82eAtq41dJhE4fLbhn7aUVPwSpal2+LNo8v3uEnERG52UZTUQL/9sIPxTZYWfkR z5RepIDu3/UWOd2CdTuR2Dmu1DZSKDIYJ4lOhKX3CcVlEdm/eCX84VQ1iTZQc7XDKpCoDIlWZkvW xSLLRcQ4XfUW -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: IN.TE.S.A. Time Stamping Certification Authority Issuer O: IN.TE.S.A. S.p.A. Issuer C: IT Subject CN: IN.TE.S.A. Time Stamping Certification Authority Subject O: IN.TE.S.A. S.p.A. Subject C: IT Valid from: Tue Mar 30 14:39:41 CEST 2010 Valid to: Sun Mar 30 15:09:41 CEST 2025 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:DE:48:74:24:8A:AC:9B:CB:F9:06:EC:7B:C3:24:CC:17:57:07:57:E8:81:85:AA:35:35:0E:54:08:02:55:F9:54:A9:ED:2 A:40:FC:9A:E7:7B:2D:D4:9E:66:27:9B:D9:C8:F5:B3:35:BB:74:D7:56:38:61:49:67:12:7A:FD:B9:66:3D:8E:2A:6C:BE:A5:28:42:58:F3:33:34:7B:BE:82:9C:C9:AF:92:A2:DA:85:AB:0B:9A:05:67:63:2F:22:37:E9:5F:39:69:70 :49:F8:2A:89:F8:60:95:3F:25:2E:7A:AF:AB:5F:FD:30:97:08:AD:FE:20:1D:0A:EF:54:EA:1A:D3:DA:2F:93:44:7C:66:C2:30:A0:51:6D:69:50:45:88:56:10:9A:1A:3C:4D:55:CA:D9:CD:36:F0:DA:05:AC:26:43:B5:25:5C:B1:9 6:AB:AD:C3:F3:9D:4D:A5:86:D0:F9:7D:DB:8D:BD:57:18:87:6E:84:66:1B:47:F8:E9:9A:69:F3:22:E3:83:1F:91:89:7C:51:B0:C5:09:50:53:D5:B0:BB:90:AC:80:79:46:7A:80:FE:A4:6F:DC:3D:8C:93:BE:00:95:99:23:1C:4B:9 0:91:5F:60:6F:41:35:D9:EC:92:5B:AA:4B:67:25:CD:71:40:5B:98:EF:3E:CB:AC:06:C3:DD:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.21.1.4.1 CPS pointer: http://e-trustcom.intesa.it CRL Distribution Points http://e-trustcom.intesa.it/CRL/INTESA_TSCA.crl C=IT,O=IN.TE.S.A. S.p.A.,CN=IN.TE.S.A. Time Stamping Certification Authority,CN=CRL1 Authority Key Identifier 42:2E:C9:CB:0D:F7:B5:D8:D0:94:43:13:18:FC:8F:EE:38:A7:AB:5D Subject Key Identifier 42:2E:C9:CB:0D:F7:B5:D8:D0:94:43:13:18:FC:8F:EE:38:A7:AB:5D ITALIA (ITALY) - Trusted List ID: ID100001 Page 222 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 5B:66:CE:FF:89:7B:50:53:D9:46:27:1B:EF:11:CF:59:0C:B2:D9:9D:F6:9A:48:7B:22:66:B5:40:9E: 46:B5:5A Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2010-03-30T14:39:41Z 13.5 - Service : CN=IN.TE.S.A. CA - Certification Authority,O=IN.TE.S.A. S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=IN.TE.S.A. CA - Certification Authority,O=IN.TE.S.A. S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 2845441390084589575 X509 Certificate -----BEGIN CERTIFICATE----MIIEITCCAwmgAwIBAgIIJ30J3lUviAcwDQYJKoZIhvcNAQELBQAwWzEwMC4GA1UEAwwnSU4uVEUu Uy5BLiBDQSAtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRowGAYDVQQKDBFJTi5URS5TLkEuIFMu cC5BLjELMAkGA1UEBhMCSVQwHhcNMTUwMTA5MTI0ODMyWhcNMzAwMTA5MTI0ODMyWjBbMTAwLgYD VQQDDCdJTi5URS5TLkEuIENBIC0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGjAYBgNVBAoMEUlO LlRFLlMuQS4gUy5wLkEuMQswCQYDVQQGEwJJVDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANj25NsNdkQDr0Led6xar+ERAZKztp1p6gVs9mkylA5Wlr/Bf9TTzcJyfAr/Q0VDyHcYcbHX yrkBa6fze7OV3O5CNbuGLNXcwZokOgv7MzY8ljT1Imj2b/ZqqiMS+lwubXl0RNdvdrtcewU7bNkh e2yDIL0iwcX4+CGXf5wklZ6iAxrGXADQl+OIKjdcObe5yzOIaT6suD1ZZDuWYI/YUuiwF4wRwl8Y sZ4MbG9jrcLdGOFMm1s5Tru+bN/lPKKzZgRr2MzN7EoOeDMOzGPPZK/QeP88IA7iYK8rcwMnDBgh MhN9WnR+R2MXvIcIC/3GKEYQevwCsVSJr3VHKvbB93ECAwEAAaOB6DCB5TAdBgNVHQ4EFgQUsOAm tis0HHR4ccoFkJbB0CwFjEQwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBSw4Ca2KzQc dHhxygWQlsHQLAWMRDA+BgNVHSAENzA1MDMGBitMFQEFATApMCcGCCsGAQUFBwIBFhtodHRwOi8v ZS10cnVzdGNvbS5pbnRlc2EuaXQwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2UtdHJ1c3Rjb20u aW50ZXNhLml0L0NSTC9JTlRFU0FfZUNBLmNybDAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEL BQADggEBAAsOLNchiiFjOGa7fF5S+rVj51niSJbAzh0zhM/op70oNlVBrr8uJ7LmH2YTzeikDEYF LuPMU44iqJRSv6hZo1bJuYdo56GBEloN/jlt/9IrJ6wp/G3WeJzv753FbqP1ccx78rpcmzwje2DI MYkVDGABNdLLMyjDh2ytiD4CXEN/eHcDq4Ud6RahVNG3jK2QVEjYH6jt4LDjDvzxf1zKVKxOicVe u183S80B7uIXQB6XxOPT7vnIfcch9OkVTC63OyfILJwC68W1mg6QApAlJ/2Mye89zlkZ3mom5abL gEAKJnRL+fSjCVlyr70F/yrPWD2FYXtcZnKV2fYpQaBhSV0= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer C: IT Issuer O: IN.TE.S.A. S.p.A. Issuer CN: IN.TE.S.A. CA - Certification Authority ITALIA (ITALY) - Trusted List ID: ID100001 Page 223 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Subject O: IN.TE.S.A. S.p.A. Subject CN: IN.TE.S.A. CA - Certification Authority Valid from: Fri Jan 09 13:48:32 CET 2015 Valid to: Wed Jan 09 13:48:32 CET 2030 Public Key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ubject Key Identifier B0:E0:26:B6:2B:34:1C:74:78:71:CA:05:90:96:C1:D0:2C:05:8C:44 Basic Constraints IsCA: true - Path length: 0 Authority Key Identifier B0:E0:26:B6:2B:34:1C:74:78:71:CA:05:90:96:C1:D0:2C:05:8C:44 Certificate Policies Policy OID: 1.3.76.21.1.5.1 CPS pointer: http://e-trustcom.intesa.it CRL Distribution Points http://e-trustcom.intesa.it/CRL/INTESA_eCA.crl Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 16:82:0B:B0:B3:5C:45:25:AC:B9:52:4C:DC:BC:E1:91:8A:25:CD:65:10:2B:C0:2A:4F:15:A4:EC:D 6:77:80:9A Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2015-01-09T12:48:00Z 13.5.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2015-01-09T12:48:00Z Page 224 ETSI 2014 - TSL HR - PDF/A-1b generator 14 - TSP: Intesa Sanpaolo Bank S.p.A. TSP Name Name [ en ] Intesa Sanpaolo Bank S.p.A. Name [ it ] Banca Intesa Sanpaolo S.p.A. Name [ en ] Intesa Sanpaolo S.p.A. Name [ it ] Intesa Sanpaolo S.p.A. Name [ en ] VATIT-10810700152 Name [ it ] VATIT-10810700152 Street Address [ it ] piazza san carlo 156 Locality [ it ] torino Postal Code [ it ] 10126 Country Name [ it ] IT Street Address [ en ] piazza san carlo 156 Locality [ en ] torino Postal Code [ en ] 10126 Country Name [ en ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://ca.intesasanpaolo.com URI mailto:[email protected] TSP Information URI URI [ en ] https://ca.intesasanpaolo.com/scriptIden0/identrus/portal.jsp URI [ it ] http://ca.intesasanpaolo.com ITALIA (ITALY) - Trusted List ID: ID100001 Page 225 ETSI 2014 - TSL HR - PDF/A-1b generator 14.1 - Service : CN=Intesa Sanpaolo S.p.A. Firma Digitale 01,O=Intesa Sanpaolo S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Intesa Sanpaolo S.p.A. Firma Digitale 01,O=Intesa Sanpaolo S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEyTCCA7GgAwIBAgIBATANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQGEwJJVDEfMB0GA1UECgwW SW50ZXNhIFNhbnBhb2xvIFMucC5BLjExMC8GA1UEAwwoSW50ZXNhIFNhbnBhb2xvIFMucC5BLiBG aXJtYSBEaWdpdGFsZSAwMTAeFw0xMDAzMDMxNDE1MTlaFw0yMjAzMDMxNTE1MTlaMGExCzAJBgNV BAYTAklUMR8wHQYDVQQKDBZJbnRlc2EgU2FucGFvbG8gUy5wLkEuMTEwLwYDVQQDDChJbnRlc2Eg U2FucGFvbG8gUy5wLkEuIEZpcm1hIERpZ2l0YWxlIDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA40KDZLz0cjlkYZFIkliW5eyEu1xtMVLSBYeZBBSLCgX+dSWyR87KwdLGKpRsOymb n6KIteHYnn8FWhz3Y1YffzNbc1YvnCB02izMr2rmpHBnSWweV8QLjswihzGIAbvADibECHU0478h ya1GuxrXhk6BVtIijPHKNaP6GDzbj3lsVQ0jIG/AI3J+UQUnCArernEXu27KhoDuiZY6JuW0QBS/ 5CtT/wJonum95LeV92biPrx/u2V7yneiE+JOYV03CUx6ry16nda0pxd7Ywrka+dPKDpkEy7+DKDy 1+uuKZxqk7P9A5LH+arj8j9kKe/h2975OupLnvitxhM440rHeQIDAQABo4IBijCCAYYwDwYDVR0T AQH/BAUwAwEB/zCB5gYDVR0fBIHeMIHbMIHYoIHVoIHShjtodHRwOi8vY3JsMi5jYS5pbnRlc2Fz YW5wYW9sby5jb20vRmlybWFEaWdpdGFsZTAxL0NBQ1JMLmNybIaBkmxkYXA6Ly9sZGFwMi5jYS5p bnRlc2FzYW5wYW9sby5jb20vY24lM0RJbnRlc2ElMjBTYW5QYW9sbyUyMFNwQSUyMEZpcm1hJTIw RGlnaXRhbGUlMjAwMSxvJTNESW50ZXNhJTIwU2FuUGFvbG8lMjBTcEEsYyUzRElUP2F1dGhvcml0 eVJldm9jYXRpb25MaXN0MFsGA1UdIARUMFIwUAYEVR0gADBIMEYGCCsGAQUFBwIBFjpodHRwczov L2NhLmludGVzYXNhbnBhb2xvLmNvbS9wb3J0YWxJZGVuMC9pZGVudGl0eS9kb2MvbW8vMA4GA1Ud DwEB/wQEAwIBBjAdBgNVHQ4EFgQUbmF9XImqZ1QEQ6zUV95M9rjGXlwwDQYJKoZIhvcNAQEFBQAD ggEBAL30xKNK8ebwWZTuxq+cnfJLsgeFHq1QMq9/Oc41WQ31U3ynVn2ZR7HRRkrKFH9AtX5v61lj eYAsnbFDrqBqO/b/UXfm9Un0lDOLJ/t4bJqNa8wloU3rVU+kSA9qP6qKgsoeJzyIjHPH88qhAhFz cXGS5JfwA64uVNzrMvKRX+mIlqF1WGabUhguPra8c/2CwVkuWMgMXAr0XF7cvZtjyxGEuOpOOB7i E5bSpRgyGxEOjXHhHPHSzvFXu+zXAzFSeES8doVZWJySOcqWKJaFkGzte7sTj4ePKHel27dHhInL SEHrkbOv554E1haK0ioolczu/sVLXzXoar0FOk9ZxoM= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Intesa Sanpaolo S.p.A. Firma Digitale 01 Issuer O: Intesa Sanpaolo S.p.A. Issuer C: IT Subject CN: Intesa Sanpaolo S.p.A. Firma Digitale 01 Subject O: Intesa Sanpaolo S.p.A. Subject C: IT Valid from: Wed Mar 03 15:15:19 CET 2010 Valid to: Thu Mar 03 16:15:19 CET 2022 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List ID: ID100001 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:E3:42:83:64:BC:F4:72:39:64:61:91:48:92:58:96:E5:EC:84:BB:5C:6D:31:52:D2:05:87:99:04:14:8B:0A:05:FE:75:25:B 2:47:CE:CA:C1:D2:C6:2A:94:6C:3B:29:9B:9F:A2:88:B5:E1:D8:9E:7F:05:5A:1C:F7:63:56:1F:7F:33:5B:73:56:2F:9C:20:74:DA:2C:CC:AF:6A:E6:A4:70:67:49:6C:1E:57:C4:0B:8E:CC:22:87:31:88:01:BB:C0:0E:26:C4:08:75 :34:E3:BF:21:C9:AD:46:BB:1A:D7:86:4E:81:56:D2:22:8C:F1:CA:35:A3:FA:18:3C:DB:8F:79:6C:55:0D:23:20:6F:C0:23:72:7E:51:05:27:08:0A:DE:AE:71:17:BB:6E:CA:86:80:EE:89:96:3A:26:E5:B4:40:14:BF:E4:2B:53:FF: 02:68:9E:E9:BD:E4:B7:95:F7:66:E2:3E:BC:7F:BB:65:7B:CA:77:A2:13:E2:4E:61:5D:37:09:4C:7A:AF:2D:7A:9D:D6:B4:A7:17:7B:63:0A:E4:6B:E7:4F:28:3A:64:13:2E:FE:0C:A0:F2:D7:EB:AE:29:9C:6A:93:B3:FD:03:92:C 7:F9:AA:E3:F2:3F:64:29:EF:E1:DB:DE:F9:3A:EA:4B:9E:F8:AD:C6:13:38:E3:4A:C7:79:02:03:01:00:01 IsCA: true Page 226 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points http://crl2.ca.intesasanpaolo.com/FirmaDigitale01/CACRL.crl ldap://ldap2.ca.intesasanpaolo.com/cn%3DIntesa%20SanPaolo%20SpA%20Firma%20Digitale%200 1,o%3DIntesa%20SanPaolo%20SpA,c%3DIT?authorityRevocationList Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: https://ca.intesasanpaolo.com/portalIden0/identity/doc/mo/ Subject Key Identifier 6E:61:7D:5C:89:AA:67:54:04:43:AC:D4:57:DE:4C:F6:B8:C6:5E:5C Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 61:A4:1F:B0:30:C3:14:07:5C:43:EC:A3:BD:DF:1E:6E:BD:7F:AA:5E:D5:F4:B9:5F:AA:A7:5B:C7: 3D:C9:B4:F5 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2010-03-03T15:15:19Z 14.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 14.2 - Service : CN=Intesa Sanpaolo S.p.A. Firma Digitale 02,O=Intesa Sanpaolo S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Intesa Sanpaolo S.p.A. Firma Digitale 02,O=Intesa Sanpaolo S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 227 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIEyTCCA7GgAwIBAgIBATANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQGEwJJVDEfMB0GA1UECgwW SW50ZXNhIFNhbnBhb2xvIFMucC5BLjExMC8GA1UEAwwoSW50ZXNhIFNhbnBhb2xvIFMucC5BLiBG aXJtYSBEaWdpdGFsZSAwMjAeFw0xMDAzMDMxNDI1MzZaFw0yMjAzMDMxNTI1MzZaMGExCzAJBgNV BAYTAklUMR8wHQYDVQQKDBZJbnRlc2EgU2FucGFvbG8gUy5wLkEuMTEwLwYDVQQDDChJbnRlc2Eg U2FucGFvbG8gUy5wLkEuIEZpcm1hIERpZ2l0YWxlIDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA0oSH8RjICdG1wXYq8r78ToCVWZ77XTytaZer6W0e+QBM9IvmDQc4KYkfzSpTXGWg N8Hb5vCmh2M2TZonmfitbaihwIRE4Peyjf7N2RIonoFG77aMLIrwUojCM+vjtDooEEC8HD1p5PnS jMfjtWwVwGxiqlXNGrgVH1dNobkNPBRqzih4XCXoqPylpgnMbjoYtpjV0+lQ2Y3JpMH2HsHeDdZ6 446oVWpPO2ZvPQOF1g2WAh9zRMa0bPnU+sTnK5W/50ar7qlH0lA5NQmhgZdMLPhkrY462vCr1atF 1YJXOd6QTkogFesAHYHMR/sq8tTUnfVRR1myr6mNwLfBs1xtmQIDAQABo4IBijCCAYYwDwYDVR0T AQH/BAUwAwEB/zCB5gYDVR0fBIHeMIHbMIHYoIHVoIHShjtodHRwOi8vY3JsMi5jYS5pbnRlc2Fz YW5wYW9sby5jb20vRmlybWFEaWdpdGFsZTAyL0NBQ1JMLmNybIaBkmxkYXA6Ly9sZGFwMi5jYS5p bnRlc2FzYW5wYW9sby5jb20vY24lM0RJbnRlc2ElMjBTYW5QYW9sbyUyMFNwQSUyMEZpcm1hJTIw RGlnaXRhbGUlMjAwMixvJTNESW50ZXNhJTIwU2FuUGFvbG8lMjBTcEEsYyUzRElUP2F1dGhvcml0 eVJldm9jYXRpb25MaXN0MFsGA1UdIARUMFIwUAYEVR0gADBIMEYGCCsGAQUFBwIBFjpodHRwczov L2NhLmludGVzYXNhbnBhb2xvLmNvbS9wb3J0YWxJZGVuMC9pZGVudGl0eS9kb2MvbW8vMA4GA1Ud DwEB/wQEAwIBBjAdBgNVHQ4EFgQUVbZWG913cHt4Ws6C+NATH//ZWZ0wDQYJKoZIhvcNAQEFBQAD ggEBAAqSFGPfceXhyLKOaVis3H8rb9ZEr4lGIsHbgcfFYX5VdAiwjHs7iHkKJQho2msPZ4ltOBTw dmXzpujwlzQI5qkss3pVrLHu/+3jWHFEVe5CNLf8a2MobCdrUH1vaivY6sc+LbNnHynxX9Dygwsd jXBo0cD9Prq4KCHDemcvKMriiDnjozki6mKa2Lmg0msvylTpWXPutleoyHYssgSHXfbsCNIQifyO WuVkeCGNnPgcVb9N/cCvjsZoo6m04r+eQDqfLeFt7PmWF5p0j2ElyDRb7YeiTmpH2k0QOaQ+t5YE Ytp7u/+a91gcE8nroBsK+qpT3hO3cOqSYDpx6cXU6Qs= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Intesa Sanpaolo S.p.A. Firma Digitale 02 Issuer O: Intesa Sanpaolo S.p.A. Issuer C: IT Subject CN: Intesa Sanpaolo S.p.A. Firma Digitale 02 Subject O: Intesa Sanpaolo S.p.A. Subject C: IT Valid from: Wed Mar 03 15:25:36 CET 2010 Valid to: Thu Mar 03 16:25:36 CET 2022 Public Key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asic Constraints IsCA: true CRL Distribution Points http://crl2.ca.intesasanpaolo.com/FirmaDigitale02/CACRL.crl ldap://ldap2.ca.intesasanpaolo.com/cn%3DIntesa%20SanPaolo%20SpA%20Firma%20Digitale%200 2,o%3DIntesa%20SanPaolo%20SpA,c%3DIT?authorityRevocationList Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: https://ca.intesasanpaolo.com/portalIden0/identity/doc/mo/ Subject Key Identifier 55:B6:56:1B:DD:77:70:7B:78:5A:CE:82:F8:D0:13:1F:FF:D9:59:9D Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D9:2E:06:65:E1:8D:3E:4A:50:39:FD:AE:D6:67:DA:0D:5B:47:29:AD:C2:26:B1:22:2A:57:1D:89:9 E:BF:85:3B Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] ITALIA (ITALY) - Trusted List ID: ID100001 An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. Page 228 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Status Starting Time Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. 2010-03-03T15:25:36Z 14.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 14.3 - Service : CN=Intesa Sanpaolo Production Identrust Certification Authority,OU=Intesa Sanpaolo Identrust Infrastructure,O=Intesa Sanpaolo S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Intesa Sanpaolo Production Identrust Certification Authority,OU=Intesa Sanpaolo Identrust Infrastructure,O=Intesa Sanpaolo S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 65625 X509 Certificate -----BEGIN CERTIFICATE----MIIFojCCBIqgAwIBAgIDAQBZMA0GCSqGSIb3DQEBBQUAMIGoMQswCQYDVQQGEwJJVDEfMB0GA1UE CgwWSW50ZXNhIFNhbnBhb2xvIFMucC5BLjExMC8GA1UECwwoSW50ZXNhIFNhbnBhb2xvIElkZW50 cnVzdCBJbmZyYXN0cnVjdHVyZTFFMEMGA1UEAww8SW50ZXNhIFNhbnBhb2xvIFByb2R1Y3Rpb24g SWRlbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MDkxNDE0MzM1N1oXDTE1MDMz MDIwMzYxOFowgagxCzAJBgNVBAYTAklUMR8wHQYDVQQKDBZJbnRlc2EgU2FucGFvbG8gUy5wLkEu MTEwLwYDVQQLDChJbnRlc2EgU2FucGFvbG8gSWRlbnRydXN0IEluZnJhc3RydWN0dXJlMUUwQwYD VQQDDDxJbnRlc2EgU2FucGFvbG8gUHJvZHVjdGlvbiBJZGVudHJ1c3QgQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ5jdwqFGN4aYrBsdl4y+ 1M+gJ3bOvZ5n11gQSqkdL3/f9WDWKisWmxglETxhPcU5hFZttIIp0ZVQcbP3TUfkcq+h/fgrQ/5F Ct1Zi9xwx4Io45B1AFiEEksu0gU5dpI0GaAJvqjefWt6Uwr57wkmoDX68VqsQown4/5O6Mqv1xvz n/1gftIWvP15C55uqgzmnq4waN+SLWkkcOUpXgd6J1atjaJlbrcBAb0JDSLkSihOqy3zTC5d17iw j6pMDtyoyWO9qSTgBkNGXQgLrYcdS9jlxPXV9y+WP/wq6556KXTxEtCGJWgiy2fEsSv5b+keB3mo v0v3PFzXfqUA8aPdAgMBAAGjggHRMIIBzTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB BjBQBgNVHSAESTBHMEUGCysGAQQBgZxUAQEBMDYwNAYIKwYBBQUHAgEWKGh0dHBzOi8vY2EuaW50 ZXNhc2FucGFvbG8uY29tL0luZm8vYjEvbW8wHQYDVR0OBBYEFCU/KudlkQX53FsFWRYI4sBzsbJO MIIBNwYDVR0fBIIBLjCCASowgeqggeeggeSGgeFsZGFwOi8vbGRhcC5jYS5pbnRlc2FzYW5wYW9s by5jb20vY24lM2RJbnRlc2ElMjBTYW5wYW9sbyUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1c3QlMjBD ZXJ0aWZpY2F0aW9uJTIwQXV0aG9yaXR5LG91JTNkSW50ZXNhJTIwU2FucGFvbG8lMjBJZGVudHJ1 c3QlMjBJbmZyYXN0cnVjdHVyZSxvJTNkSW50ZXNhJTIwU2FucGFvbG8lMjBTLnAuQS4sYyUzZElU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3QwO6A5oDeGNWh0dHA6Ly9jcmwuY2EuaW50ZXNhc2Fu cGFvbG8uY29tL1JlcG9zaXRvcnkvYjEvZ2V0Q1JMMA0GCSqGSIb3DQEBBQUAA4IBAQCcZGLRTi7s /0E+NznZ/II1ElWSovaahoH6KFeR6cO/dnzqAzc/5uLHcJ/3zSgRFyc82zeidwwfIaOUWWt56pCQ PosrhsVr3SrTrbPWIutzgoaYFt9gdBYOHd18u6//cpDClpYUh1bZkLPlPMO6ZUEI6IrH7dlhdEaO DyaEYBT/ke/xAtpMdZVV1QDtz2h461VLoOj32bDe62oc3V4zuYPmBm3XhyPn2LsrmN1Jrtd89XSI hz8AdPASjdtLAeObzc5cd6wJhynDaUXtZ081NDrNwYG9oQSx5wZDSnGSiyzAj9XLtl/3/qhnF27W DhNdngZo6eV7e7ghziin9LqJmDlM -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Intesa Sanpaolo Production Identrust Certification Authority Issuer OU: Intesa Sanpaolo Identrust Infrastructure Issuer O: Intesa Sanpaolo S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 229 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer C: IT Subject CN: Intesa Sanpaolo Production Identrust Certification Authority Subject OU: Intesa Sanpaolo Identrust Infrastructure Subject O: Intesa Sanpaolo S.p.A. Subject C: IT Valid from: Fri Sep 14 16:33:57 CEST 2007 Valid to: Mon Mar 30 22:36:18 CEST 2015 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20052.1.1.1 CPS pointer: https://ca.intesasanpaolo.com/Info/b1/mo Subject Key Identifier 25:3F:2A:E7:65:91:05:F9:DC:5B:05:59:16:08:E2:C0:73:B1:B2:4E CRL Distribution Points ldap://ldap.ca.intesasanpaolo.com/cn%3dIntesa%20Sanpaolo%20Production%20Identrust%20Certif ication%20Authority,ou%3dIntesa%20Sanpaolo%20Identrust%20Infrastructure,o%3dIntesa%20San paolo%20S.p.A.,c%3dIT?certificateRevocationList http://crl.ca.intesasanpaolo.com/Repository/b1/getCRL Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B5:9D:E5:BA:69:36:F6:37:B3:8E:C8:96:5D:A4:A7:47:66:2D:08:C6:5A:CD:F5:15:06:CB:2F:AC:9 A:7E:B8:57 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2007-09-14T16:33:57Z 14.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 230 ETSI 2014 - TSL HR - PDF/A-1b generator 14.4 - Service : CN=Intesa Sanpaolo S.p.A. IdenTrust Certification Authority,OU=Intesa Sanpaolo S.p.A. IdenTrust Infrastructure,O=Intesa Sanpaolo S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Intesa Sanpaolo S.p.A. IdenTrust Certification Authority,OU=Intesa Sanpaolo S.p.A. IdenTrust Infrastructure,O=Intesa Sanpaolo S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 375039618606894643113559013022896812752241053124 X509 Certificate -----BEGIN CERTIFICATE----MIIFlDCCBHygAwIBAgIUQbFbroRyrKnY4i2iZRav3r8WTcQwDQYJKoZIhvcNAQELBQAwgasxCzAJ BgNVBAYTAklUMR8wHQYDVQQKDBZJbnRlc2EgU2FucGFvbG8gUy5wLkEuMTgwNgYDVQQLDC9JbnRl c2EgU2FucGFvbG8gUy5wLkEuIElkZW5UcnVzdCBJbmZyYXN0cnVjdHVyZTFBMD8GA1UEAww4SW50 ZXNhIFNhbnBhb2xvIFMucC5BLiBJZGVuVHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MTEwNDA4MTAxODI5WhcNMTgwNDA4MTAxODI5WjCBqzELMAkGA1UEBhMCSVQxHzAdBgNVBAoMFklu dGVzYSBTYW5wYW9sbyBTLnAuQS4xODA2BgNVBAsML0ludGVzYSBTYW5wYW9sbyBTLnAuQS4gSWRl blRydXN0IEluZnJhc3RydWN0dXJlMUEwPwYDVQQDDDhJbnRlc2EgU2FucGFvbG8gUy5wLkEuIElk ZW5UcnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMZ3Wqu5juy4Ongqd5HyM6ac4rwdfjyWkRxryOH1A8reIiXEpPUvlg/xLiuLq7YTsslL CS3RhWQbUlvqyIjIByYz4M+uexXB9jNKzRWC+tLRlLU99wKZRXh1ZjXCkxTshp/sjf/h5KNdGiJ+ +TbNWBG9PlokAqsY9S7wkgH1m+/vAAsPpDWtzh2uMxVcWF/dOHvg2hSWRReeKoBCuTTB7Q+KdZ2X JsROAgN4i60yyZEI83xuKdmj/BsrLHQdM2xZTSxqW/zkGQ3k4SMvf6zDH0NBp2OWFJoF0K6ntAO2 2OXZUHy9ulmDP7g6Ty6l1wdghAOqkzFAEKWwwNs0+CwEDIECAwEAAaOCAawwggGoMBIGA1UdEwEB /wQIMAYBAf8CAQAwWwYDVR0gBFQwUjBQBgRVHSAAMEgwRgYIKwYBBQUHAgEWOmh0dHBzOi8vY2Eu aW50ZXNhc2FucGFvbG8uY29tL3BvcnRhbElkZW4wL2lkZW50aXR5L2RvYy9tby8wggEEBgNVHR8E gfwwgfkwSqBIoEaGRGh0dHA6Ly9jcmwuaWkuaW50ZXNhc2FucGFvbG8uY29tL0ludGVzYVNhbnBh b2xvSWRlblRydXN0Q0EvQ0FDUkwuY3JsMIGqoIGnoIGkhoGhbGRhcDovL2xkYXAuaWkuaW50ZXNh c2FucGFvbG8uY29tL2NuJTNkSW50ZXNhJTIwU2FucGFvbG8lMjBTcEElMjBJZGVuVHJ1c3QlMjBD ZXJ0aWZpY2F0aW9uJTIwQXV0aG9yaXR5LG8lM2RJbnRlc2ElMjBTYW5wYW9sbyUyMFNwQSxjJTNk SVQ/YXV0aG9yaXR5UmV2b2NhdGlvbkxpc3QwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTgqY6I xvbTpWt7+5Q1UouLlN0djjANBgkqhkiG9w0BAQsFAAOCAQEAo4wpf1Vv17Zi65/muIxPLBeED9Tt b4vGZlBNtwJn5gcaJtWItwwCpLK5Ik48x7dkCmdL/3ZbnvBQmCRVrzPnANIEEcEyDHnKhHVV+jE4 Wpk73L5VOz0UX4VlmbgO09UJG/UZpBSgzGV1kqG33U/n+oqofYlVsQFEXfmMw+/Icu3yXUbCKGHX bNOWcv8WbcYRFXWxwx5vj/92EJTskQBEwo2MmqIi/Y8lpjZXBheMl0cRx9fTJJEkQTSloRyC3Ek2 QBHVuAqclL4TkYYRHFSmOU0awMCuRbfUDi7/YWbQ3NH1ncwN2Yv8vbyBDFDT7+3T4EPpcIT0BV7h Ljbb5Nf5Qw== -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Intesa Sanpaolo S.p.A. IdenTrust Certification Authority Issuer OU: Intesa Sanpaolo S.p.A. IdenTrust Infrastructure Issuer O: Intesa Sanpaolo S.p.A. Issuer C: IT Subject CN: Intesa Sanpaolo S.p.A. IdenTrust Certification Authority Subject OU: Intesa Sanpaolo S.p.A. IdenTrust Infrastructure Subject O: Intesa Sanpaolo S.p.A. Subject C: IT Valid from: Fri Apr 08 12:18:29 CEST 2011 ITALIA (ITALY) - Trusted List ID: ID100001 Page 231 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Sun Apr 08 12:18:29 CEST 2018 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: https://ca.intesasanpaolo.com/portalIden0/identity/doc/mo/ CRL Distribution Points http://crl.ii.intesasanpaolo.com/IntesaSanpaoloIdenTrustCA/CACRL.crl ldap://ldap.ii.intesasanpaolo.com/cn%3dIntesa%20Sanpaolo%20SpA%20IdenTrust%20Certification %20Authority,o%3dIntesa%20Sanpaolo%20SpA,c%3dIT?authorityRevocationList Subject Key Identifier E0:A9:8E:88:C6:F6:D3:A5:6B:7B:FB:94:35:52:8B:8B:94:DD:1D:8E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 36:36:C3:AB:68:9C:03:B6:AE:4D:C7:97:9A:DD:10:2A:17:26:6E:9F:E4:D8:A3:DE:80:B8:BB:24:0 9:33:C5:A9 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2011-04-08T12:18:29Z 14.4.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2011-04-08T12:18:30Z Page 232 ETSI 2014 - TSL HR - PDF/A-1b generator 15 - TSP: Postecom S.p.A. TSP Name Name [ en ] Postecom S.p.A. Name [ it ] Postecom S.p.A. Name [ en ] Postecom Name [ it ] Postecom Name [ en ] VATIT-01114601006 Name [ it ] VATIT-01114601006 Street Address [ en ] viale europa 175 Locality [ en ] roma Postal Code [ en ] 00144 Country Name [ en ] IT Street Address [ it ] viale europa 175 Locality [ it ] roma Postal Code [ it ] 00144 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://postecert.poste.it/aboutpostecom.shtml URI mailto:[email protected] TSP Information URI URI [ en ] http://postecert.poste.it/aboutpostecom.shtml URI [ it ] http://postecert.poste.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 233 ETSI 2014 - TSL HR - PDF/A-1b generator 15.1 - Service : CN=Postecert per Camera dei Deputati,OU=CA e Sicurezza,O=Postecom S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Postecert per Camera dei Deputati,OU=CA e Sicurezza,O=Postecom S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEoTCCA4mgAwIBAgIBATANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQGEwJJVDEYMBYGA1UEChMP UG9zdGVjb20gUy5wLkEuMRcwFQYDVQQLEw5DQSBlIFNpY3VyZXp6YTEqMCgGA1UEAxMhUG9zdGVj ZXJ0IHBlciBDYW1lcmEgZGVpIERlcHV0YXRpMB4XDTA0MDMxMDExMjMwOFoXDTE0MDMxMDExMjA1 M1owbDELMAkGA1UEBhMCSVQxGDAWBgNVBAoTD1Bvc3RlY29tIFMucC5BLjEXMBUGA1UECxMOQ0Eg ZSBTaWN1cmV6emExKjAoBgNVBAMTIVBvc3RlY2VydCBwZXIgQ2FtZXJhIGRlaSBEZXB1dGF0aTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANOrCOC1tiGMBw/gi13L5zDAIBJWqyAnTo/E PiCf+D1GmartTJXHeDs+ofeGNDSCafwTRDzgXfUuDOsFzg0wUnE+jYkDA3mAEF0CCpBz18k9+aWd SptcQyF/JbDEFcdpEpQbxa9mWssp+0a1toDuDa8COhhRpfsednPblOsreKr3c8IXT8ic2LILv7Gq Vt7/xr0EWWDwZt50UjIZepaAscs6tnTint3zwjV+oOFyt479Fm+Hv41uGLSS6sDKqlt+dA+6nJ78 321i2K4hLMYwb8H3jJ7GqK0AhkoGyzAIZIkB+wWSwXA+Km3kKT9aJ5rCxd/PgH5v/P6UKejxqsrg THUCAwEAAaOCAUwwggFIMBIGA1UdEwEB/wQIMAYBAf8CAQAwOwYDVR0gBDQwMjAwBgcrTAsBAgEB MCUwIwYIKwYBBQUHAgEWF2h0dHA6Ly93d3cucG9zdGVjZXJ0Lml0MIG0BgNVHR8Egawwgakwgaag gaOggaCGgZ1sZGFwOi8vY2FtZXJhLnBvc3RlY2VydC5pdC9jbiUzZFBvc3RlY2VydCUyMHBlciUy MENhbWVyYSUyMGRlaSUyMERlcHV0YXRpLG91JTNkQ0ElMjBlJTIwU2ljdXJlenphLG8lM2RQb3N0 ZWNvbSUyMFMucC5BLixjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlMA8GA1Ud JAEB/wQFMAOAAQAwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTmVvI7SxrYQE+ZRNFnpruSo/hI uzANBgkqhkiG9w0BAQUFAAOCAQEApB8uBTCTyF10MDoRWiVkvclHW1r9QLN8IktshGPnTu/Ih72X PCSsCb3kS8EQnMUChFHtv3onl5/asteMjFI0QYtw9CKEwOnAzh4Yr813qY54EX4briNrBuYd4yiA vO2oVSEWhQy0dRsHM1wTnNSaKWlztVQumarukiODgcXXTsMXj3hTScXtSk7pYpAKOUmqjovY13eY jdiCx7pXqbcSqgB/bZwwxvECPuDj7ezVwW4QwizSrSrdRM8AN/JPpKF/9C2RM8cew2f6vY7H4h0T xCkqmEgh8qsLFHAfJ338UVKSnKomJpmbINSalKEJ5E3gbfgH0IAzmrsbQFFRnv5eBQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Postecert per Camera dei Deputati Issuer OU: CA e Sicurezza Issuer O: Postecom S.p.A. Issuer C: IT Subject CN: Postecert per Camera dei Deputati Subject OU: CA e Sicurezza Subject O: Postecom S.p.A. Subject C: IT Valid from: Wed Mar 10 12:23:08 CET 2004 Valid to: Mon Mar 10 12:20:53 CET 2014 ITALIA (ITALY) - Trusted List ID: ID100001 Page 234 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:D3:AB:08:E0:B5:B6:21:8C:07:0F:E0:8B:5D:CB:E7:30:C0:20:12:56:AB:20:27:4E:8F:C4:3E:20:9F:F8:3D:46:99:AA: ED:4C:95:C7:78:3B:3E:A1:F7:86:34:34:82:69:FC:13:44:3C:E0:5D:F5:2E:0C:EB:05:CE:0D:30:52:71:3E:8D:89:03:03:79:80:10:5D:02:0A:90:73:D7:C9:3D:F9:A5:9D:4A:9B:5C:43:21:7F:25:B0:C4:15:C7:69:12:94:1B:C5:AF: 66:5A:CB:29:FB:46:B5:B6:80:EE:0D:AF:02:3A:18:51:A5:FB:1E:76:73:DB:94:EB:2B:78:AA:F7:73:C2:17:4F:C8:9C:D8:B2:0B:BF:B1:AA:56:DE:FF:C6:BD:04:59:60:F0:66:DE:74:52:32:19:7A:96:80:B1:CB:3A:B6:74:E2:9 E:DD:F3:C2:35:7E:A0:E1:72:B7:8E:FD:16:6F:87:BF:8D:6E:18:B4:92:EA:C0:CA:AA:5B:7E:74:0F:BA:9C:9E:FC:DF:6D:62:D8:AE:21:2C:C6:30:6F:C1:F7:8C:9E:C6:A8:AD:00:86:4A:06:CB:30:08:64:89:01:FB:05:92:C1:70 :3E:2A:6D:E4:29:3F:5A:27:9A:C2:C5:DF:CF:80:7E:6F:FC:FE:94:29:E8:F1:AA:CA:E0:4C:75:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.11.1.2.1.1 CPS pointer: http://www.postecert.it CRL Distribution Points ldap://camera.postecert.it/cn%3dPostecert%20per%20Camera%20dei%20Deputati,ou%3dCA%20e %20Sicurezza,o%3dPostecom%20S.p.A.,c%3dIT?certificateRevocationList?base Subject Key Identifier E6:56:F2:3B:4B:1A:D8:40:4F:99:44:D1:67:A6:BB:92:A3:F8:48:BB Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 25:5B:15:AC:FE:0E:E9:6E:E4:52:35:3C:2C:92:C5:BF:E1:3F:B6:99:78:3E:35:0E:B6:CB:77:31:A3: 60:7E:29 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2004-03-10T12:23:08Z 15.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 15.2 - Service : CN=Postecom CA1,OU=CA e Sicurezza,O=Postecom s.p.a.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Postecom CA1,OU=CA e Sicurezza,O=Postecom s.p.a.,C=IT Service Name Name Service digital identities Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 235 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1222445030 -----BEGIN CERTIFICATE----MIIEBTCCAu2gAwIBAgIESN0H5jANBgkqhkiG9w0BAQUFADBXMQswCQYDVQQGEwJJVDEYMBYGA1UE ChMPUG9zdGVjb20gcy5wLmEuMRcwFQYDVQQLEw5DQSBlIFNpY3VyZXp6YTEVMBMGA1UEAxMMUG9z dGVjb20gQ0ExMB4XDTAwMTAwMzEzMDAyOFoXDTIwMDkyODEyMDAyOFowVzELMAkGA1UEBhMCSVQx GDAWBgNVBAoTD1Bvc3RlY29tIHMucC5hLjEXMBUGA1UECxMOQ0EgZSBTaWN1cmV6emExFTATBgNV BAMTDFBvc3RlY29tIENBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOVjO/c6v6jR H9pB2sJtvkWwr+5cRy9lk09ZNHih6wRgTdv4yxAy2LpAkH30N2oo6eZsZv7G0ibxDOLa4Uwh2vwm rxvr2imKq5eWEatDwmQAunI9hxbFdu9MjsjXg6ecvWgV7LcD+kjaapUavpiE46/gZ2wslfewEmj2 rsKO1uZ6thj7BJ8Q1ttSEJuHdiTVx84VRYjnYgNKxCw3XA/WUCqIEQFDuuX1EWr/WrG2Y+jpwd7L PNRaBMCVaUWb6uOUAVBP4n5vxK2qHr126iXOLAeL2Mt9XWOuSXzN1G4dTVq4JfcHZIFWjHCu2tnG Y/UY7j+JjAdMv5NdNTlgLPcqk4kCAwEAAaOB2DCB1TASBgNVHRMBAf8ECDAGAQH/AgEAMAwGA1Ud JAQFMAOAAQAwPQYDVR0gBDYwNDAyBgcrTAsBAgEBMCcwJQYIKwYBBQUHAgEWGWh0dHA6Ly9wb3N0 ZWNlcnQucG9zdGUuaXQwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL3Bvc3RlY2VydC5wb3N0ZS5p dC9wb3N0ZWNvbWNhMS9jcmwwEQYDVR0OBAoECEku+kddYQjMMBMGA1UdIwQMMAqACEku+kddYQjM MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAMpaTfXf9mOxEoS/dDYSc1PL/1dF6 /p9BjNPSsQcQKu5wz9OdBExKnZEmp3ffDCEM7EDOptvwG9oZJvaf4E5/Jt/rvyzqsKMMvKeotmHf b3HKYd4KCe0vkJKGta5ZlGbofPFNyNdu4jzKz++jTrJz10lIggNchONG4EbqKCnAkYTx64LczhlP +BmWksP/RukOZJnUtXqV+DEthqIcbzyR9qiR4OxwwiovuAEKfULhfKLZ5JwU0UafVjmL8AAQjREF v4KOrCuuoaIPufeCF4nE3EPXRIBvjf9MtqJ9SPpmRzFSzELMvsbONfiS3cjIUnKKf/DwkAPVA8EE tB5lELQcYw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Postecom CA1 Issuer OU: CA e Sicurezza Issuer O: Postecom s.p.a. Issuer C: IT Subject CN: Postecom CA1 Subject OU: CA e Sicurezza Subject O: Postecom s.p.a. Subject C: IT Valid from: Tue Oct 03 15:00:28 CEST 2000 Valid to: Mon Sep 28 14:00:28 CEST 2020 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.11.1.2.1.1 CPS pointer: http://postecert.poste.it CRL Distribution Points http://postecert.poste.it/postecomca1/crl Subject Key Identifier 49:2E:FA:47:5D:61:08:CC Authority Key Identifier 49:2E:FA:47:5D:61:08:CC Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 236 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: F8:06:5A:DD:2E:61:8A:E5:F5:3D:D5:97:5D:99:16:01:75:D4:3F:73:2E:37:D9:5F:A0:3E:9B:14:2E: BD:C9:02 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2000-10-03T15:00:28Z 15.2.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 15.3 - Service : CN=Postecom CA2,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Postecom CA2,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEKzCCAxOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBgMQswCQYDVQQGEwJJVDEYMBYGA1UECgwP UG9zdGVjb20gUy5wLkEuMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEVMBMGA1UE AwwMUG9zdGVjb20gQ0EyMB4XDTA2MDUxMDEwNDUwNFoXDTE2MDUxMDA5NDUwNFowYDELMAkGA1UE BhMCSVQxGDAWBgNVBAoMD1Bvc3RlY29tIFMucC5BLjEgMB4GA1UECwwXQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkxFTATBgNVBAMMDFBvc3RlY29tIENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAK6SGMWPumSNIMy7K5bXXUevnFCnnfXmUM8mOcVkvu6Zee0etJw6yaIjOhI0bHra3z4P iZKiRprWYY7vOmIx3EpI1x71zDv3Widks/VCbiIWlc16lHQ1DP03vAgRfujAWFqqzVC5T5zZJ4K8 prTFjxCIXgnE3jXMrHNa8fcb1NKLhrEYGW7ob3VqtytwKn4Phvbj9ZYXA5OBpDfsEPKr2pFxaBHS F5UOiWP7PZ2NXK0/pCi4YnQfK62aK4AkFpsEQ0HJB7OznJqyCDPuqaZvSo1qa9HwOL5w+98TfcGP TVZhWnEes0AhElzA/SwnhKkSlvE2a7Lxet9zWYYarUA0FpkCAwEAAaOB7zCB7DAPBgNVHRMECDAG AQH/AgEAMA8GA1UdJAEB/wQFMAOAAQAwOAYDVR0gBDEwLzAtBgRVHSAAMCUwIwYIKwYBBQUHAgEW F2h0dHA6Ly93d3cucG9zdGVjZXJ0Lml0MD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9wb3N0ZWNl cnQucG9zdGUuaXQvcG9zdGVjb21jYTIvY3JsLmNybDAOBgNVHQ8BAf8EBAMCAQYwHwYDVR0jBBgw FoAUuHw9QjplpAEc7IOu+AubbjIM/34wHQYDVR0OBBYEFLh8PUI6ZaQBHOyDrvgLm24yDP9+MA0G CSqGSIb3DQEBBQUAA4IBAQCpkf91y75K2ZzPrQTJ6rJDdFgceUQbK/NN/kxvsscpqKZCmOnEnaYt fOb2op6JSHuL4HBIx0RK7Kt/axUBf+IGrQ9RZVbMONdaF4Gg82mNhObE9nkqfxcROr8JvG2mv9qE kAtLeKr50hGGGBXd33ywdqwZtqzbu0LDeF3WIDE0HTP1LYrWRQIgQjb8gG7ZQnrIvrAbaPe/+Dgm BcYoCpPlS49Ld5g66SzxGCK13O6MwbaOYhl0HRsxLGo8MXbEZ4NqZBtbxzwgUk/joN4a4xZrJSaN 9iJ5fkIsTV1Cc9BdIwDnYFf4nc28v2PR+IIDZICNC7rqNfaNyV5IW5FSxsMY -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Postecom CA2 Issuer OU: Certification Authority ITALIA (ITALY) - Trusted List ID: ID100001 Page 237 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Postecom S.p.A. Issuer C: IT Subject CN: Postecom CA2 Subject OU: Certification Authority Subject O: Postecom S.p.A. Subject C: IT Valid from: Wed May 10 12:45:04 CEST 2006 Valid to: Tue May 10 11:45:04 CEST 2016 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AE:92:18:C5:8F:BA:64:8D:20:CC:BB:2B:96:D7:5D:47:AF:9C:50:A7:9D:F5:E6:50:CF:26:39:C5:64:BE:EE:99:79:ED :1E:B4:9C:3A:C9:A2:23:3A:12:34:6C:7A:DA:DF:3E:0F:89:92:A2:46:9A:D6:61:8E:EF:3A:62:31:DC:4A:48:D7:1E:F5:CC:3B:F7:5A:27:64:B3:F5:42:6E:22:16:95:CD:7A:94:74:35:0C:FD:37:BC:08:11:7E:E8:C0:58:5A:AA:C D:50:B9:4F:9C:D9:27:82:BC:A6:B4:C5:8F:10:88:5E:09:C4:DE:35:CC:AC:73:5A:F1:F7:1B:D4:D2:8B:86:B1:18:19:6E:E8:6F:75:6A:B7:2B:70:2A:7E:0F:86:F6:E3:F5:96:17:03:93:81:A4:37:EC:10:F2:AB:DA:91:71:68:11:D2 :17:95:0E:89:63:FB:3D:9D:8D:5C:AD:3F:A4:28:B8:62:74:1F:2B:AD:9A:2B:80:24:16:9B:04:43:41:C9:07:B3:B3:9C:9A:B2:08:33:EE:A9:A6:6F:4A:8D:6A:6B:D1:F0:38:BE:70:FB:DF:13:7D:C1:8F:4D:56:61:5A:71:1E:B3:40 :21:12:5C:C0:FD:2C:27:84:A9:12:96:F1:36:6B:B2:F1:7A:DF:73:59:86:1A:AD:40:34:16:99:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.postecert.it CRL Distribution Points http://postecert.poste.it/postecomca2/crl.crl Authority Key Identifier B8:7C:3D:42:3A:65:A4:01:1C:EC:83:AE:F8:0B:9B:6E:32:0C:FF:7E Subject Key Identifier B8:7C:3D:42:3A:65:A4:01:1C:EC:83:AE:F8:0B:9B:6E:32:0C:FF:7E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 61:57:9A:F4:E6:44:7A:D6:7E:E8:19:90:48:37:9B:FF:5C:84:58:02:57:38:3E:0F:A0:AF:E8:74:BD:D 2:3C:BD Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2006-05-10T12:45:04Z 15.3.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2009-12-03T00:00:00Z Page 238 ETSI 2014 - TSL HR - PDF/A-1b generator 15.4 - Service : CN=Postecert per Regione Emilia-Romagna,OU=CA e Sicurezza,O=Postecom s.p.a.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Postecert per Regione Emilia-Romagna,OU=CA e Sicurezza,O=Postecom s.p.a.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1067530977 X509 Certificate -----BEGIN CERTIFICATE----MIIE0jCCA7qgAwIBAgIEP6E64TANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEYMBYGA1UE ChMPUG9zdGVjb20gcy5wLmEuMRcwFQYDVQQLEw5DQSBlIFNpY3VyZXp6YTEtMCsGA1UEAxMkUG9z dGVjZXJ0IHBlciBSZWdpb25lIEVtaWxpYS1Sb21hZ25hMB4XDTAzMTAzMDE2MjMyNFoXDTEzMTAy NzE2MjMyNFowbzELMAkGA1UEBhMCSVQxGDAWBgNVBAoTD1Bvc3RlY29tIHMucC5hLjEXMBUGA1UE CxMOQ0EgZSBTaWN1cmV6emExLTArBgNVBAMTJFBvc3RlY2VydCBwZXIgUmVnaW9uZSBFbWlsaWEt Um9tYWduYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZuqw6u6nV4uFeebjaY+ygH 9DVdSc7f3ncmJahCngnqevQsEtE48KwF7Pqnj0DV+/FXpaRUxdaDFqgI9uucjekTP/jct4Fu97Ad NDaejBUqA05AvqqYCH8E6i9dtpaTQN+//gA4tSRsYp5SJuPkOOGsvotpdU/zPihN7xSrPYTxQ8Br doE7dB1T1JT+BhV0YA76JLtkpmWhrhqdhVxB5iL/WIYriUyH8UtW8R9ptqupu39IQHiSlk2JoBdd F8+XOWypsXhBwjDH4amdeBCwVX4i5F0iYkhjRZ8McP0uBGMbfBOTO7pFPTfjOQZ+NxRFVM3wgfHE rQJNAz35FwgRLt8CAwEAAaOCAXQwggFwMBIGA1UdEwEB/wQIMAYBAf8CAQAwDAYDVR0kBAUwA4AB ADA7BgNVHSAENDAyMDAGBytMCwECAQEwJTAjBggrBgEFBQcCARYXaHR0cDovL3d3dy5wb3N0ZWNl cnQuaXQwgb4GA1UdHwSBtjCBszCBsKCBraCBqoaBp2xkYXA6Ly9jZXJ0aWZpY2F0aS5wb3N0ZWNl cnQuaXQ6Mzg5L0NOPVBvc3RlY2VydCUyMHBlciUyMFJlZ2lvbmUlMjBFbWlsaWEtUm9tYWduYSxP VSUzZENBJTIwZSUyMFNpY3VyZXp6YSxPJTNkUG9zdGVjb20lMjBzLnAuYS4sQyUzZElUP0NlcnRp ZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MB0GA1UdDgQWBBRqKxXX12D4jR9dGKRgMwfiY3uk 4TAfBgNVHSMEGDAWgBRqKxXX12D4jR9dGKRgMwfiY3uk4TAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZI hvcNAQEFBQADggEBAFISBi6KZTWtHrqadgIbKhcT9Eq02Cc65464d4SkF3kt3bWsudO01CF9R5gK 2DJKqPXW7EPZJxLUgdS9/QNxeh6NTj7q0Rx7uNznUWQnvFw+T1Z5wzBtpEQ3yk6P/PHmPSLLYEgg Z0Z6PjE3uxW8YJrnmIsmaCVn1XPt/hMSw+QApsuBe2GdaIfGaWlkfcOvngCznei5dL33aRrnDJhf X8U6COdzpFsN43m1cPnPwmJfIixjVTTDovzIDMfK4MYxJshaMHzFGx/pnDdS9V2Zf7jYxZJHLCZT OoeEvRwRSiPxANFkvbBm5QYgb3fB9bKwEK9b8j9fQb60ajgKj2KdhWI= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Postecert per Regione Emilia-Romagna Issuer OU: CA e Sicurezza Issuer O: Postecom s.p.a. Issuer C: IT Subject CN: Postecert per Regione Emilia-Romagna Subject OU: CA e Sicurezza Subject O: Postecom s.p.a. Subject C: IT Valid from: Thu Oct 30 17:23:24 CET 2003 Valid to: Sun Oct 27 17:23:24 CET 2013 ITALIA (ITALY) - Trusted List ID: ID100001 Page 239 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.11.1.2.1.1 CPS pointer: http://www.postecert.it CRL Distribution Points ldap://certificati.postecert.it:389/CN=Postecert%20per%20Regione%20EmiliaRomagna,OU%3dCA%20e%20Sicurezza,O%3dPostecom%20s.p.a.,C%3dIT?CertificateRevocation List;binary Subject Key Identifier 6A:2B:15:D7:D7:60:F8:8D:1F:5D:18:A4:60:33:07:E2:63:7B:A4:E1 Authority Key Identifier 6A:2B:15:D7:D7:60:F8:8D:1F:5D:18:A4:60:33:07:E2:63:7B:A4:E1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 69:FA:3B:21:15:71:42:72:35:FE:64:E5:42:86:A8:B8:78:CC:74:AD:76:5D:75:C0:58:69:E5:94:54:70 :1E:E9 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2003-10-30T17:23:24Z 15.4.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 15.5 - Service : CN=Postecom Timestamper CA2,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Postecom Timestamper CA2,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 240 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIETjCCAzagAwIBAgIBATANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQGEwJJVDEYMBYGA1UECgwP UG9zdGVjb20gUy5wLkEuMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEhMB8GA1UE AwwYUG9zdGVjb20gVGltZXN0YW1wZXIgQ0EyMB4XDTA4MDkxNTE0MjE0OFoXDTI4MDkxNTEyMjE0 OFowbDELMAkGA1UEBhMCSVQxGDAWBgNVBAoMD1Bvc3RlY29tIFMucC5BLjEgMB4GA1UECwwXQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkxITAfBgNVBAMMGFBvc3RlY29tIFRpbWVzdGFtcGVyIENBMjCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKu1mFZ00+4xsTp4s5D5t27Ebmseqb7ek+/y fD6FhCn/G2BsgwsmKThct4I4h8L7f0CCuyj6NJSLNr0dszPKoD+S3InySm6VzX3lgmi9w0Jt4lE3 vvLYX+9G0kurokeQT/dxW+GcOsDOw7E2vtLMWGlp4xg0CjxgC7PuwADrneygGFX32T7V3t+Y4cbA Bn8vs1OqACJ5Rvjv4c+Qv3vJ0sF8HjSg7zdCnoLoKGgoYlLUfNWPZl/hHAoTyuOkv/TqC8VW8iiE swHRMmqQyU+5b2m9KLleUs+arfaH2lWJrW7xYyle8mVERgV9ok0c/XVCXDPq5YBDgcQgkgrW8fY5 6MECAwEAAaOB+jCB9zAPBgNVHRMECDAGAQH/AgEAMA8GA1UdJAEB/wQFMAOAAQAwOAYDVR0gBDEw LzAtBgRVHSAAMCUwIwYIKwYBBQUHAgEWF2h0dHA6Ly93d3cucG9zdGVjZXJ0Lml0MEkGA1UdHwRC MEAwPqA8oDqGOGh0dHA6Ly9wb3N0ZWNlcnQucG9zdGUuaXQvcG9zdGVjb210aW1lc3RhbXBlcmNh Mi9jcmwuY3JsMA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQCf2uaX8RKMYStSFgqgRd3wfnf QTAdBgNVHQ4EFgQUAn9rml/ESjGErUhYKoEXd8H530EwDQYJKoZIhvcNAQEFBQADggEBAGQO/9yR tEPLy0+tQjTOUSEGqOCj6XfI/bgX9CB729SLHfvhoxAja8nIMY+/SHKSIamy6PKwaUujGzrQJ5PZ Xb8WDF8h3WcAx1Bh1E7vOzHaKpYOm/xLE/EVP1Y1PkcW6lPWVlG1Grzf9YxNRzfKR+qS4+2pBv7L XVJOJfyMbxVRL7lmH/20IdelXRPxKhq8vNletNpQdEMqgzc53GodlP5vxbAOoa4JiFaXf82gxi1M mxdOCKGKjdwy20MGXVbXouwS1cj4N3FHmycpZDAPViVX9aLl+SCs3lEK9lnJiWi1a8SnOI5VcqEe A+tdrEDURp1J+PeD8ngWyViTWLq2oVM= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Postecom Timestamper CA2 Issuer OU: Certification Authority Issuer O: Postecom S.p.A. Issuer C: IT Subject CN: Postecom Timestamper CA2 Subject OU: Certification Authority Subject O: Postecom S.p.A. Subject C: IT Valid from: Mon Sep 15 16:21:48 CEST 2008 Valid to: Fri Sep 15 14:21:48 CEST 2028 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://www.postecert.it CRL Distribution Points http://postecert.poste.it/postecomtimestamperca2/crl.crl Authority Key Identifier 02:7F:6B:9A:5F:C4:4A:31:84:AD:48:58:2A:81:17:77:C1:F9:DF:41 Subject Key Identifier 02:7F:6B:9A:5F:C4:4A:31:84:AD:48:58:2A:81:17:77:C1:F9:DF:41 ITALIA (ITALY) - Trusted List ID: ID100001 Page 241 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1F:83:AB:35:CE:15:E4:71:60:42:70:45:65:EC:EC:C7:AB:FC:00:45:B0:AD:A3:E1:AB:26:32:2A:01 :26:F5:8F Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2008-09-15T16:21:48Z 15.6 - Service : CN=Postecom TimeStamper CA,OU=CA e Sicurezza,O=Postecom s.p.a.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Postecom TimeStamper CA,OU=CA e Sicurezza,O=Postecom s.p.a.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 971096676 X509 Certificate -----BEGIN CERTIFICATE----MIIEJTCCAw2gAwIBAgIEOeHCZDANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQGEwJJVDEYMBYGA1UE ChMPUG9zdGVjb20gcy5wLmEuMRcwFQYDVQQLEw5DQSBlIFNpY3VyZXp6YTEgMB4GA1UEAxMXUG9z dGVjb20gVGltZVN0YW1wZXIgQ0EwHhcNMDAxMDA5MTMwNjA1WhcNMTAxMDA3MTIwNjA1WjBiMQsw CQYDVQQGEwJJVDEYMBYGA1UEChMPUG9zdGVjb20gcy5wLmEuMRcwFQYDVQQLEw5DQSBlIFNpY3Vy ZXp6YTEgMB4GA1UEAxMXUG9zdGVjb20gVGltZVN0YW1wZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDad4PKZeuqQ9WjbChcXFhlfKdRQB1zyUFIc0038WTDptVEjMa5lokafnhC iaeJEvIqa8n+wHyWjbBwZwxz58DaMCSGhVl8ZCSJjn5hzq6DqTXZY8mwUEFVi4eIFD/hdTAcGyyC tIVEh3+n5eruwf4ZjImW3ToSZ7MfcvTqnp2ZmDfCy3JRHu6R8XT/XvE93PimkQZa4Z8DF7dzEWX0 +jKxrYar2WbvGD/pLKc3xxJ92pyhaKvuAp6Zj+a8YgCKZ7OAZvrjlOrDyL68q6RaQfB/lmaqo2Ws DIyMxtl2By1Uevpri1eHddYNILDcgakxLufQ7bZMUbrE5+30BbG6KLD3AgMBAAGjgeIwgd8wEgYD VR0TAQH/BAgwBgEB/wIBADAMBgNVHSQEBTADgAEAMD0GA1UdIAQ2MDQwMgYHK0wLAQIBATAnMCUG CCsGAQUFBwIBFhlodHRwOi8vcG9zdGVjZXJ0LnBvc3RlLml0MEQGA1UdHwQ9MDswOaA3oDWGM2h0 dHA6Ly9wb3N0ZWNlcnQucG9zdGUuaXQvcG9zdGVjb210aW1lc3RhbXBlcmNhL2NybDARBgNVHQ4E CgQIS+n0Xahj0mswEwYDVR0jBAwwCoAIS+n0Xahj0mswDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3 DQEBBQUAA4IBAQC7xejnJ2RE3nzkKQrhfkAWEWhyrZkIywvX/4QUPnulXPqbwsuMvGNQT8+nJeO5 H5/m4y2s9AsHah9YEiruLy78tHFcxgTC9ZRk9WLhTBeDskovkmYmv0bORwaW0Esf38ziY2N4vTtf axZ4lbpfSyDrJAYyJVHuQAOD/UTaOffXUVAqLGzMCvo6zBHCq8RuSeyS3zbACBYPtB78D4mFNPqH iyF9wxpdOnQCw3sVrtqSh7QJlNK1Ar9UEcg5Mipl1a7/DnfsiL2IKEWnowpXsq2KBb3lHisc7ERJ BNpoCToJ/It0ldcK97OKyPFe/zuoLWkqWJfIXSzkts4luqpn/04J -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Postecom TimeStamper CA Issuer OU: CA e Sicurezza ITALIA (ITALY) - Trusted List ID: ID100001 Page 242 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Postecom s.p.a. Issuer C: IT Subject CN: Postecom TimeStamper CA Subject OU: CA e Sicurezza Subject O: Postecom s.p.a. Subject C: IT Valid from: Mon Oct 09 15:06:05 CEST 2000 Valid to: Thu Oct 07 14:06:05 CEST 2010 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:DA:77:83:CA:65:EB:AA:43:D5:A3:6C:28:5C:5C:58:65:7C:A7:51:40:1D:73:C9:41:48:73:4D:37:F1:64:C3:A6:D5:44: 8C:C6:B9:96:89:1A:7E:78:42:89:A7:89:12:F2:2A:6B:C9:FE:C0:7C:96:8D:B0:70:67:0C:73:E7:C0:DA:30:24:86:85:59:7C:64:24:89:8E:7E:61:CE:AE:83:A9:35:D9:63:C9:B0:50:41:55:8B:87:88:14:3F:E1:75:30:1C:1B:2C:82:B 4:85:44:87:7F:A7:E5:EA:EE:C1:FE:19:8C:89:96:DD:3A:12:67:B3:1F:72:F4:EA:9E:9D:99:98:37:C2:CB:72:51:1E:EE:91:F1:74:FF:5E:F1:3D:DC:F8:A6:91:06:5A:E1:9F:03:17:B7:73:11:65:F4:FA:32:B1:AD:86:AB:D9:66:EF :18:3F:E9:2C:A7:37:C7:12:7D:DA:9C:A1:68:AB:EE:02:9E:99:8F:E6:BC:62:00:8A:67:B3:80:66:FA:E3:94:EA:C3:C8:BE:BC:AB:A4:5A:41:F0:7F:96:66:AA:A3:65:AC:0C:8C:8C:C6:D9:76:07:2D:54:7A:FA:6B:8B:57:87:75: D6:0D:20:B0:DC:81:A9:31:2E:E7:D0:ED:B6:4C:51:BA:C4:E7:ED:F4:05:B1:BA:28:B0:F7:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.11.1.2.1.1 CPS pointer: http://postecert.poste.it CRL Distribution Points http://postecert.poste.it/postecomtimestamperca/crl Subject Key Identifier 4B:E9:F4:5D:A8:63:D2:6B Authority Key Identifier 4B:E9:F4:5D:A8:63:D2:6B Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 84:EF:4B:41:84:31:B6:C6:B6:7E:53:C0:20:CD:E5:AE:F6:2C:12:17:10:31:23:B3:A8:51:FA:0D:E9: 9C:C0:5F Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2000-10-09T15:06:05Z 15.7 - Service : CN=Postecert per Regione Emilia-Romagna CA2,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/CA/QC Page 243 ETSI 2014 - TSL HR - PDF/A-1b generator Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Postecert per Regione Emilia-Romagna CA2,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 X509 Certificate -----BEGIN CERTIFICATE----MIIEbDCCA1SgAwIBAgIBATANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJJVDEYMBYGA1UECgwP UG9zdGVjb20gUy5wLkEuMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTExMC8GA1UE AwwoUG9zdGVjZXJ0IHBlciBSZWdpb25lIEVtaWxpYS1Sb21hZ25hIENBMjAeFw0xMjAzMDkxNTUw MTRaFw0zMjAzMDkxNTUwMTRaMHwxCzAJBgNVBAYTAklUMRgwFgYDVQQKDA9Qb3N0ZWNvbSBTLnAu QS4xIDAeBgNVBAsMF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MTEwLwYDVQQDDChQb3N0ZWNlcnQg cGVyIFJlZ2lvbmUgRW1pbGlhLVJvbWFnbmEgQ0EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvGgYSKanS9Hajt4QikZ12aJX2frFxyPfXGLid33UxNHLCN7l1sjWnDsTeMAp5gy1BmS6 btxIoVGy7LUjLF3tYPJWC8LZtOIxj08HkWL6M2DxfaJB5bZ38uKFUQjYkLbSFzrTRwLPoHYho1q3 Svr4eGrtgiFOCukRZ2gVkbIBzVDAYZMJEPEi3igVTTYHqsj6ZulRE4/iHk1umgqm5GfVNCox8ot9 HihVhp9H2dXxptgV04zDpCmuPbnqbqx77RHNTx8AEahR4pJAUBnhKQj8+VCUnWMKo6zzi5u0/mx2 xEoQlYJmIcBSB6Wihy8K5dtcgXNTv/p+dCOOpja8W0NljwIDAQABo4H4MIH1MBIGA1UdEwEB/wQI MAYBAf8CAQAwOgYDVR0gBDMwMTAvBgRVHSAAMCcwJQYIKwYBBQUHAgEWGWh0dHA6Ly9wb3N0ZWNl cnQucG9zdGUuaXQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL3Bvc3RlY2VydC5wb3N0ZS5pdC9w b3N0ZWNlcnRyZXJjYTIvY3JsLmNybDAPBgNVHSQBAf8EBTADgAEAMA4GA1UdDwEB/wQEAwIBBjAf BgNVHSMEGDAWgBTFhGolxit4Xo5jNfQEM730sLCpizAdBgNVHQ4EFgQUxYRqJcYreF6OYzX0BDO9 9LCwqYswDQYJKoZIhvcNAQELBQADggEBAKT0Ucd+uIxamb346E36Q/l4h2GqCogsS+GhpZUN7zHc qhIxY4NQKTOvKJfT1usNfxIhyKW6yQqk6MjzUIPpmfrQwEjcpw6Y1vUnE1wsVqdo2G4kou1m++0l swVXcvoetPbJPtSPGIiSUP8jBu1Rz1F8iZF+6n5nn6s2aYvjZG9enBNf+04U5OdY+3T9LXdMMfvN EsKnOYjM3V6gyBlMjDDDLaCuSJ00AeT7tmlFAFWSUoIqSNKj7J1XLWqhQdrGdjN8O4usi1Jjjauk qz0IsB6lThul+Sm1CsRQVmxGiJQh/W7VKG4YhY/jG4TPCiGq5HIt4s9SDv6eJBdJfcNXI90= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Postecert per Regione Emilia-Romagna CA2 Issuer OU: Certification Authority Issuer O: Postecom S.p.A. Issuer C: IT Subject CN: Postecert per Regione Emilia-Romagna CA2 Subject OU: Certification Authority Subject O: Postecom S.p.A. Subject C: IT Valid from: Fri Mar 09 16:50:14 CET 2012 Valid to: Tue Mar 09 16:50:14 CET 2032 Public Key: Basic Constraints ITALIA (ITALY) - Trusted List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sCA: true - Path length: 0 Page 244 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://postecert.poste.it CRL Distribution Points http://postecert.poste.it/postecertrerca2/crl.crl Authority Key Identifier C5:84:6A:25:C6:2B:78:5E:8E:63:35:F4:04:33:BD:F4:B0:B0:A9:8B Subject Key Identifier C5:84:6A:25:C6:2B:78:5E:8E:63:35:F4:04:33:BD:F4:B0:B0:A9:8B Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1E:63:84:F3:23:6A:5A:1A:39:35:02:29:93:4A:3D:A6:61:E4:4D:58:34:29:68:70:8E:A6:E8:30:1B:C C:16:B7 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2012-03-09T16:50:14Z 15.7.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2012-03-09T16:50:14Z 15.8 - Service : CN=Postecom CA3,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Postecom CA3,OU=Certification Authority,O=Postecom S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1 ITALIA (ITALY) - Trusted List ID: ID100001 Page 245 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIEMDCCAxigAwIBAgIBATANBgkqhkiG9w0BAQsFADBgMQswCQYDVQQGEwJJVDEYMBYGA1UECgwP UG9zdGVjb20gUy5wLkEuMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEVMBMGA1UE AwwMUG9zdGVjb20gQ0EzMB4XDTEyMDIwMTE0MDg1OVoXDTMyMDIwMTE0MDg1OVowYDELMAkGA1UE BhMCSVQxGDAWBgNVBAoMD1Bvc3RlY29tIFMucC5BLjEgMB4GA1UECwwXQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkxFTATBgNVBAMMDFBvc3RlY29tIENBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALp5ySfNtHLRuLqzZji+JTLj0/w1foyhaZTttENgB7vVveKlav5m1g6oZYFgEzQYOH2y XVErTyzHUkcF/yrVjkedqZjhepPrkIVp0hrNepMUaDW+fEP4xyJnJ4+wTZOsb0+9DLJudF+U06/N B7zEkdetw4SAR4aI946SffPKRWVVPRmaXPvbwucA0phhcownKRiT6ZrkleV/t03q3VhhF8UKdURL U1Lmjetg56BBgLSvkaVG85DXlwpOIwVk6oBF5QAz1Qf4J9X6v6TdEyfEBuprmg5k0GtDW8JMUP8P t3ABsK9sRq1wWuAAKQEC4VChg+FJaygbkLhdBlzM6MRfFvUCAwEAAaOB9DCB8TASBgNVHRMBAf8E CDAGAQH/AgEAMDoGA1UdIAQzMDEwLwYEVR0gADAnMCUGCCsGAQUFBwIBFhlodHRwOi8vcG9zdGVj ZXJ0LnBvc3RlLml0MD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9wb3N0ZWNlcnQucG9zdGUuaXQv cG9zdGVjb21jYTMvY3JsLmNybDAPBgNVHSQBAf8EBTADgAEAMA4GA1UdDwEB/wQEAwIBBjAfBgNV HSMEGDAWgBSnNFz9hQcmFNpdIBcxihPM1Us35jAdBgNVHQ4EFgQUpzRc/YUHJhTaXSAXMYoTzNVL N+YwDQYJKoZIhvcNAQELBQADggEBAD+ddGQ0gRXF/3eQ7TRDysjYn3/auypDStfbKbHCMhL8WeWQ Jsau0jA0PgZEHFzTqw3iVX8vwVsaajFfHoXfyUItUwdzMx5m93hEErk5wqQhujlHGHwwOyIYJ+1r SlC4d4O74n6T8OwlUq0hBr0wZeqpUhweLu45gHzva2gZZYUqQ/qOpKhky7PT7XoHJvwx9nKZHvKH 8sQO5kVYu7CxadKNb8SjyGn9xRGD5WAlTyUbuod/BeGYbelKSxeJB7A4OK+HZ4kdv9z5YJdZ2AF9 Pya09W8YyyAA9dR3Vks4baJj/PzoQHr1ijHV+R0bTF68ifU5n9ObArJhzxg/wEDfBmU= -----END CERTIFICATE----- Signature algorithm: SHA256withRSA Issuer CN: Postecom CA3 Issuer OU: Certification Authority Issuer O: Postecom S.p.A. Issuer C: IT Subject CN: Postecom CA3 Subject OU: Certification Authority Subject O: Postecom S.p.A. Subject C: IT Valid from: Wed Feb 01 15:08:59 CET 2012 Valid to: Sun Feb 01 15:08:59 CET 2032 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 2.5.29.32.0 CPS pointer: http://postecert.poste.it CRL Distribution Points http://postecert.poste.it/postecomca3/crl.crl Authority Key Identifier A7:34:5C:FD:85:07:26:14:DA:5D:20:17:31:8A:13:CC:D5:4B:37:E6 Subject Key Identifier A7:34:5C:FD:85:07:26:14:DA:5D:20:17:31:8A:13:CC:D5:4B:37:E6 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 36:21:03:D1:FD:8E:E6:8D:41:2B:A5:2A:15:D2:41:90:BC:D7:88:BA:0B:EC:1D:2D:41:38:ED:F7:E 4:30:A7:EC ITALIA (ITALY) - Trusted List ID: ID100001 Page 246 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Service status description [en] An accreditation assessment has been performed by the Accreditation Body on behalf of the Member State identified in the "Scheme territory" and the service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is found to be in compliance with the provisions laid down in Directive 1999/93/EC. [it] Una valutazione di accreditamento è stata effettuata dall'organismo di accreditamento per conto dello Stato membro identificato nel "Scheme territory" e il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" si trova ad essere in rispetto delle disposizioni previste dalla direttiva 1999/93/CE. Status Starting Time 2012-02-01T15:08:59Z 15.8.1 - Extension (not critical): expiredCertsRevocationInfo dateTime ITALIA (ITALY) - Trusted List ID: ID100001 2012-02-01T15:08:59Z Page 247 ETSI 2014 - TSL HR - PDF/A-1b generator 16 - TSP: Sogei S.p.A. TSP Name Name [ en ] Sogei S.p.A. Name [ it ] Sogei S.p.A. Name [ en ] Sogei SpA Name [ it ] Sogei SpA Name [ en ] VATIT-01043931003 NTRIT-02327910580 Name [ it ] VATIT-01043931003 NTRIT-02327910580 Street Address [ en ] via mario carucci 99 Locality [ en ] roma Postal Code [ en ] 00143 Country Name [ en ] IT Street Address [ it ] via mario carucci 99 Locality [ it ] roma Postal Code [ it ] 00143 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://ca.sogei.it/index_en.htm URI mailto:[email protected] TSP Information URI URI [ en ] http://ca.sogei.it/index_en.htm URI [ it ] http://ca.sogei.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 248 ETSI 2014 - TSL HR - PDF/A-1b generator 16.1 - Service (supervisionceased): OU=CA FIRMA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] OU=CA FIRMA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1070364282 X509 Certificate -----BEGIN CERTIFICATE----MIIExTCCA62gAwIBAgIEP8x2ejANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMREwDwYDVQQL DAhDQSBGSVJNQTAeFw0wNDEyMjMxMDAyMzVaFw0xNDEyMjMxMDMyMzVaMFgxCzAJBgNVBAYTAklU MRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNlcnZpemkgZGkgQ2VydGlmaWNhemlvbmUx ETAPBgNVBAsMCENBIEZJUk1BMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gWKMYJ yNRXaMG2l/xuwJ+zc6NXwTM0na/fcNhldk/IVvTHmfFnpRZJ1cdof6OTd1Fxpdhe8gT6V2A7DAjn WI9JsOojibZbKh2gEOJMfYcjU7y+akk7Bc5knB5ZiXuGBQpSgzf4xDxQjVHyYK3brc8KeiXbRLU0 aQJ2LsNIjnhM4zovi0IwwnfSyYmqyi6vxMoCSebsMKVxxj4OmP4/wtEOhcQ2A4AwCIgK5oCfWTVA tPrOTWghoOHo5UjRWZ0Yn7zD5eit76LPvHfzUdeajjycPU0eSH2nOnZAzwdjV5iKXaSelD3conBt p4ZTl6FkNqXFnu1aCsUZZmFEGkbP0QIDAQABo4IBlTCCAZEwEgYDVR0TAQH/BAgwBgEB/wIBATAO BgNVHQ8BAf8EBAMCAQYwVQYDVR0gBE4wTDBKBgUrTB0BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8v d3d3LmNhLnNvZ2VpLml0L01hbnVhbGkvTWFudWFsZU9wZXJhdGl2by5wZGYwgfQGA1UdHwSB7DCB 6TBvoG2ga6RpMGcxCzAJBgNVBAYTAklUMRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNl cnZpemkgZGkgQ2VydGlmaWNhemlvbmUxETAPBgNVBAsMCENBIEZJUk1BMQ0wCwYDVQQDDARDUkwx MHagdKByhnBsZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMEZJUk1BLG91PVNlcnZpemklMjBk aSUyMENlcnRpZmljYXppb25lLG89U29nZWklMjBTcEEsYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRp b25MaXN0MB0GA1UdDgQWBBRdsS0D33e1cGc6zzhlWHPbqEvI0DANBgkqhkiG9w0BAQUFAAOCAQEA kKQzWL0sg8+lRUHdLUV0h6/5I2BMv8iaSiAXbgj4UHRbdligdR+mvfrbdxr/Tg+XIx5rk0Bj5Fn3 YNnA4o5HhFRoxmB7+5lwI1DKn0zGIkExcczPPQ4wi67S6kTIoqF11gKdl/YBu7NgvdIsj4jcqbR3 gVsXMcfG4c9yuK4a4eYat71Q4CnHVE9xvHU0JISIGTzsRntcPiH+seQQ2NstJ45glebvIe5h+mhM LscMspikliqyouQiFLWp3ZCNaPqdqESC60P/K2ZfegCqAw7va0Smjmh+6WjUDbDwgU0VjPnK1DZi gJQL2Y2V2VbPP9a7wOefJKe33YZZ9AXcmVBy6A== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA FIRMA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA FIRMA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 11:02:35 CET 2004 Valid to: Tue Dec 23 11:32:35 CET 2014 ITALIA (ITALY) - Trusted List ID: ID100001 Page 249 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:AF:C8:16:28:C6:09:C8:D4:57:68:C1:B6:97:FC:6E:C0:9F:B3:73:A3:57:C1:33:34:9D:AF:DF:70:D8:65:76:4F:C8:56:F 4:C7:99:F1:67:A5:16:49:D5:C7:68:7F:A3:93:77:51:71:A5:D8:5E:F2:04:FA:57:60:3B:0C:08:E7:58:8F:49:B0:EA:23:89:B6:5B:2A:1D:A0:10:E2:4C:7D:87:23:53:BC:BE:6A:49:3B:05:CE:64:9C:1E:59:89:7B:86:05:0A:52:83:3 7:F8:C4:3C:50:8D:51:F2:60:AD:DB:AD:CF:0A:7A:25:DB:44:B5:34:69:02:76:2E:C3:48:8E:78:4C:E3:3A:2F:8B:42:30:C2:77:D2:C9:89:AA:CA:2E:AF:C4:CA:02:49:E6:EC:30:A5:71:C6:3E:0E:98:FE:3F:C2:D1:0E:85:C4:36: 03:80:30:08:88:0A:E6:80:9F:59:35:40:B4:FA:CE:4D:68:21:A0:E1:E8:E5:48:D1:59:9D:18:9F:BC:C3:E5:E8:AD:EF:A2:CF:BC:77:F3:51:D7:9A:8E:3C:9C:3D:4D:1E:48:7D:A7:3A:76:40:CF:07:63:57:98:8A:5D:A4:9E:94:3D: DC:A2:70:6D:A7:86:53:97:A1:64:36:A5:C5:9E:ED:5A:0A:C5:19:66:61:44:1A:46:CF:D1:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.29.1.1 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativo.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA FIRMA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20FIRMA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT? certificateRevocationList Subject Key Identifier 5D:B1:2D:03:DF:77:B5:70:67:3A:CF:38:65:58:73:DB:A8:4B:C8:D0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2F:B7:E9:1E:91:60:48:38:FB:91:B6:1D:47:5F:4C:E3:1A:FF:80:6D:72:8B:8F:70:F8:71:57:5B:0E:B D:B0:2F Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased Service status description [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2013-02-20T00:00:03Z 16.1.1 - Extension (not critical): expiredCertsRevocationInfo dateTime 2009-12-03T00:00:00Z 16.1.2 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] OU=CA FIRMA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service digital identities X509SubjectName Subject OU: CA FIRMA Subject OU: Servizi di Certificazione ITALIA (ITALY) - Trusted List ID: ID100001 Page 250 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Sogei SpA Subject C: IT Certificate fields details Version: 3 Serial Number: 1070364282 X509 Certificate -----BEGIN CERTIFICATE----MIIExTCCA62gAwIBAgIEP8x2ejANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMREwDwYDVQQL DAhDQSBGSVJNQTAeFw0wNDEyMjMxMDAyMzVaFw0xNDEyMjMxMDMyMzVaMFgxCzAJBgNVBAYTAklU MRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNlcnZpemkgZGkgQ2VydGlmaWNhemlvbmUx ETAPBgNVBAsMCENBIEZJUk1BMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gWKMYJ yNRXaMG2l/xuwJ+zc6NXwTM0na/fcNhldk/IVvTHmfFnpRZJ1cdof6OTd1Fxpdhe8gT6V2A7DAjn WI9JsOojibZbKh2gEOJMfYcjU7y+akk7Bc5knB5ZiXuGBQpSgzf4xDxQjVHyYK3brc8KeiXbRLU0 aQJ2LsNIjnhM4zovi0IwwnfSyYmqyi6vxMoCSebsMKVxxj4OmP4/wtEOhcQ2A4AwCIgK5oCfWTVA tPrOTWghoOHo5UjRWZ0Yn7zD5eit76LPvHfzUdeajjycPU0eSH2nOnZAzwdjV5iKXaSelD3conBt p4ZTl6FkNqXFnu1aCsUZZmFEGkbP0QIDAQABo4IBlTCCAZEwEgYDVR0TAQH/BAgwBgEB/wIBATAO BgNVHQ8BAf8EBAMCAQYwVQYDVR0gBE4wTDBKBgUrTB0BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8v d3d3LmNhLnNvZ2VpLml0L01hbnVhbGkvTWFudWFsZU9wZXJhdGl2by5wZGYwgfQGA1UdHwSB7DCB 6TBvoG2ga6RpMGcxCzAJBgNVBAYTAklUMRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNl cnZpemkgZGkgQ2VydGlmaWNhemlvbmUxETAPBgNVBAsMCENBIEZJUk1BMQ0wCwYDVQQDDARDUkwx MHagdKByhnBsZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMEZJUk1BLG91PVNlcnZpemklMjBk aSUyMENlcnRpZmljYXppb25lLG89U29nZWklMjBTcEEsYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRp b25MaXN0MB0GA1UdDgQWBBRdsS0D33e1cGc6zzhlWHPbqEvI0DANBgkqhkiG9w0BAQUFAAOCAQEA kKQzWL0sg8+lRUHdLUV0h6/5I2BMv8iaSiAXbgj4UHRbdligdR+mvfrbdxr/Tg+XIx5rk0Bj5Fn3 YNnA4o5HhFRoxmB7+5lwI1DKn0zGIkExcczPPQ4wi67S6kTIoqF11gKdl/YBu7NgvdIsj4jcqbR3 gVsXMcfG4c9yuK4a4eYat71Q4CnHVE9xvHU0JISIGTzsRntcPiH+seQQ2NstJ45glebvIe5h+mhM LscMspikliqyouQiFLWp3ZCNaPqdqESC60P/K2ZfegCqAw7va0Smjmh+6WjUDbDwgU0VjPnK1DZi gJQL2Y2V2VbPP9a7wOefJKe33YZZ9AXcmVBy6A== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA FIRMA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA FIRMA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 11:02:35 CET 2004 Valid to: Tue Dec 23 11:32:35 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.29.1.1 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativo.pdf ITALIA (ITALY) - Trusted List ID: ID100001 Page 251 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA FIRMA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20FIRMA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT? certificateRevocationList Subject Key Identifier 5D:B1:2D:03:DF:77:B5:70:67:3A:CF:38:65:58:73:DB:A8:4B:C8:D0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2F:B7:E9:1E:91:60:48:38:FB:91:B6:1D:47:5F:4C:E3:1A:FF:80:6D:72:8B:8F:70:F8:71:57:5B:0E:B D:B0:2F Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2013-02-20T00:00:02Z 16.1.3 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] OU=CA FIRMA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service digital identities X509SubjectName Subject OU: CA FIRMA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Certificate fields details Version: 3 Serial Number: 1070364282 ITALIA (ITALY) - Trusted List ID: ID100001 Page 252 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIExTCCA62gAwIBAgIEP8x2ejANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMREwDwYDVQQL DAhDQSBGSVJNQTAeFw0wNDEyMjMxMDAyMzVaFw0xNDEyMjMxMDMyMzVaMFgxCzAJBgNVBAYTAklU MRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNlcnZpemkgZGkgQ2VydGlmaWNhemlvbmUx ETAPBgNVBAsMCENBIEZJUk1BMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gWKMYJ yNRXaMG2l/xuwJ+zc6NXwTM0na/fcNhldk/IVvTHmfFnpRZJ1cdof6OTd1Fxpdhe8gT6V2A7DAjn WI9JsOojibZbKh2gEOJMfYcjU7y+akk7Bc5knB5ZiXuGBQpSgzf4xDxQjVHyYK3brc8KeiXbRLU0 aQJ2LsNIjnhM4zovi0IwwnfSyYmqyi6vxMoCSebsMKVxxj4OmP4/wtEOhcQ2A4AwCIgK5oCfWTVA tPrOTWghoOHo5UjRWZ0Yn7zD5eit76LPvHfzUdeajjycPU0eSH2nOnZAzwdjV5iKXaSelD3conBt p4ZTl6FkNqXFnu1aCsUZZmFEGkbP0QIDAQABo4IBlTCCAZEwEgYDVR0TAQH/BAgwBgEB/wIBATAO BgNVHQ8BAf8EBAMCAQYwVQYDVR0gBE4wTDBKBgUrTB0BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8v d3d3LmNhLnNvZ2VpLml0L01hbnVhbGkvTWFudWFsZU9wZXJhdGl2by5wZGYwgfQGA1UdHwSB7DCB 6TBvoG2ga6RpMGcxCzAJBgNVBAYTAklUMRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNl cnZpemkgZGkgQ2VydGlmaWNhemlvbmUxETAPBgNVBAsMCENBIEZJUk1BMQ0wCwYDVQQDDARDUkwx MHagdKByhnBsZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMEZJUk1BLG91PVNlcnZpemklMjBk aSUyMENlcnRpZmljYXppb25lLG89U29nZWklMjBTcEEsYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRp b25MaXN0MB0GA1UdDgQWBBRdsS0D33e1cGc6zzhlWHPbqEvI0DANBgkqhkiG9w0BAQUFAAOCAQEA kKQzWL0sg8+lRUHdLUV0h6/5I2BMv8iaSiAXbgj4UHRbdligdR+mvfrbdxr/Tg+XIx5rk0Bj5Fn3 YNnA4o5HhFRoxmB7+5lwI1DKn0zGIkExcczPPQ4wi67S6kTIoqF11gKdl/YBu7NgvdIsj4jcqbR3 gVsXMcfG4c9yuK4a4eYat71Q4CnHVE9xvHU0JISIGTzsRntcPiH+seQQ2NstJ45glebvIe5h+mhM LscMspikliqyouQiFLWp3ZCNaPqdqESC60P/K2ZfegCqAw7va0Smjmh+6WjUDbDwgU0VjPnK1DZi gJQL2Y2V2VbPP9a7wOefJKe33YZZ9AXcmVBy6A== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA FIRMA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA FIRMA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 11:02:35 CET 2004 Valid to: Tue Dec 23 11:32:35 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.29.1.1 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativo.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA FIRMA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20FIRMA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT? certificateRevocationList Subject Key Identifier 5D:B1:2D:03:DF:77:B5:70:67:3A:CF:38:65:58:73:DB:A8:4B:C8:D0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2F:B7:E9:1E:91:60:48:38:FB:91:B6:1D:47:5F:4C:E3:1A:FF:80:6D:72:8B:8F:70:F8:71:57:5B:0E:B D:B0:2F ITALIA (ITALY) - Trusted List ID: ID100001 Page 253 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-02-20T00:00:01Z 16.1.4 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] OU=CA FIRMA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service digital identities X509SubjectName Subject OU: CA FIRMA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Certificate fields details Version: 3 Serial Number: 1070364282 X509 Certificate -----BEGIN CERTIFICATE----MIIExTCCA62gAwIBAgIEP8x2ejANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMREwDwYDVQQL DAhDQSBGSVJNQTAeFw0wNDEyMjMxMDAyMzVaFw0xNDEyMjMxMDMyMzVaMFgxCzAJBgNVBAYTAklU MRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNlcnZpemkgZGkgQ2VydGlmaWNhemlvbmUx ETAPBgNVBAsMCENBIEZJUk1BMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gWKMYJ yNRXaMG2l/xuwJ+zc6NXwTM0na/fcNhldk/IVvTHmfFnpRZJ1cdof6OTd1Fxpdhe8gT6V2A7DAjn WI9JsOojibZbKh2gEOJMfYcjU7y+akk7Bc5knB5ZiXuGBQpSgzf4xDxQjVHyYK3brc8KeiXbRLU0 aQJ2LsNIjnhM4zovi0IwwnfSyYmqyi6vxMoCSebsMKVxxj4OmP4/wtEOhcQ2A4AwCIgK5oCfWTVA tPrOTWghoOHo5UjRWZ0Yn7zD5eit76LPvHfzUdeajjycPU0eSH2nOnZAzwdjV5iKXaSelD3conBt p4ZTl6FkNqXFnu1aCsUZZmFEGkbP0QIDAQABo4IBlTCCAZEwEgYDVR0TAQH/BAgwBgEB/wIBATAO BgNVHQ8BAf8EBAMCAQYwVQYDVR0gBE4wTDBKBgUrTB0BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8v d3d3LmNhLnNvZ2VpLml0L01hbnVhbGkvTWFudWFsZU9wZXJhdGl2by5wZGYwgfQGA1UdHwSB7DCB 6TBvoG2ga6RpMGcxCzAJBgNVBAYTAklUMRIwEAYDVQQKDAlTb2dlaSBTcEExIjAgBgNVBAsMGVNl cnZpemkgZGkgQ2VydGlmaWNhemlvbmUxETAPBgNVBAsMCENBIEZJUk1BMQ0wCwYDVQQDDARDUkwx MHagdKByhnBsZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMEZJUk1BLG91PVNlcnZpemklMjBk aSUyMENlcnRpZmljYXppb25lLG89U29nZWklMjBTcEEsYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRp b25MaXN0MB0GA1UdDgQWBBRdsS0D33e1cGc6zzhlWHPbqEvI0DANBgkqhkiG9w0BAQUFAAOCAQEA kKQzWL0sg8+lRUHdLUV0h6/5I2BMv8iaSiAXbgj4UHRbdligdR+mvfrbdxr/Tg+XIx5rk0Bj5Fn3 YNnA4o5HhFRoxmB7+5lwI1DKn0zGIkExcczPPQ4wi67S6kTIoqF11gKdl/YBu7NgvdIsj4jcqbR3 gVsXMcfG4c9yuK4a4eYat71Q4CnHVE9xvHU0JISIGTzsRntcPiH+seQQ2NstJ45glebvIe5h+mhM LscMspikliqyouQiFLWp3ZCNaPqdqESC60P/K2ZfegCqAw7va0Smjmh+6WjUDbDwgU0VjPnK1DZi gJQL2Y2V2VbPP9a7wOefJKe33YZZ9AXcmVBy6A== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA FIRMA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA FIRMA ITALIA (ITALY) - Trusted List ID: ID100001 Page 254 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 11:02:35 CET 2004 Valid to: Tue Dec 23 11:32:35 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.29.1.1 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativo.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA FIRMA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20FIRMA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT? certificateRevocationList Subject Key Identifier 5D:B1:2D:03:DF:77:B5:70:67:3A:CF:38:65:58:73:DB:A8:4B:C8:D0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 2F:B7:E9:1E:91:60:48:38:FB:91:B6:1D:47:5F:4C:E3:1A:FF:80:6D:72:8B:8F:70:F8:71:57:5B:0E:B D:B0:2F Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-12-23T11:02:35Z 16.2 - Service (supervisionceased): OU=CA TSA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] OU=CA TSA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service Name Name Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 255 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 1070286571 X509 Certificate -----BEGIN CERTIFICATE----MIIEwDCCA6igAwIBAgIEP8tG6zANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8wDQYDVQQL DAZDQSBUU0EwHhcNMDQxMjIzMTEzNzMxWhcNMTQxMjIzMTIwNzMxWjBWMQswCQYDVQQGEwJJVDES MBAGA1UECgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8w DQYDVQQLDAZDQSBUU0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07Ty2DKXJ6oJh 7imcMV+0YhTEzY0FwGZFOTU/2E2DFG903Dq8hqyRiDnuMT+58ut/ykt8Tljks6NO2CBgP2CXnFLw vD5jpst0C3wuhm3qJvbP5agwgpQsa+zjo6KHbXsDnb3VUYwmIhyClu8Kt4QXin3nN/mcY8SKRAJZ ey73tHNdFBbMhYTBYNsshqRovgH8zMoU7tNWsAAS+IG4vMCEDsbnEkaAj7m/BKfEE2bu8aL4uAB6 pc10bVTtrYbratqGQH4YqQfUIjifvxCpNxndv6r23FTEz0FKuNS6HPrVSUS48hk3dhF7CGx8fizg yppH01rRz/z2kDclfAFPF1U/AgMBAAGjggGUMIIBkDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1Ud DwEB/wQEAwIBBjBYBgNVHSAEUTBPME0GBStMHQECMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly93d3cu Y2Euc29nZWkuaXQvTWFudWFsaS9NYW51YWxlT3BlcmF0aXZvVFNBLnBkZjCB8AYDVR0fBIHoMIHl MG2ga6BppGcwZTELMAkGA1UEBhMCSVQxEjAQBgNVBAoMCVNvZ2VpIFNwQTEiMCAGA1UECwwZU2Vy dml6aSBkaSBDZXJ0aWZpY2F6aW9uZTEPMA0GA1UECwwGQ0EgVFNBMQ0wCwYDVQQDDARDUkwxMHSg cqBwhm5sZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMFRTQSxvdT1TZXJ2aXppJTIwZGklMjBD ZXJ0aWZpY2F6aW9uZSxvPVNvZ2VpJTIwU3BBLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlz dDAdBgNVHQ4EFgQU0HBTCp3G/JwO90bNn5VpPKOpjeswDQYJKoZIhvcNAQEFBQADggEBAJptBcyc qIAduSso5IhS3NaYWQ6bbNMhWTy1Z5VFnrX/X9aW/jUWL2tR2bhkF6WRCXpfhoCcet6LCdEoz6fZ e08LePViASf02QoiRpk5aJyLuwbPeVT1H4Dqa6OOeIOcI1vH+l1I/7249bH5C6ocaM3wEu5duIW4 VhwKMEaeYu8hpArj/2zd121Vk+ix9xFm8WGI9wWVRtJRar3GAtCQmGAZWiiP2jCM7/q0LKSVZoKM be54tIVXGEYgXA8yvGuAF5l7cOUpulKNu71AykpAIel91Ss+x3xccMCBnlmc5Uog25akeKTgMqr1 5VWYWQYQyvwlTBznW2iYetc/exPpkgU= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA TSA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 12:37:31 CET 2004 Valid to: Tue Dec 23 13:07:31 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.29.1.2 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativoTSA.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA TSA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20TSA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT?cer tificateRevocationList Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 D0:70:53:0A:9D:C6:FC:9C:0E:F7:46:CD:9F:95:69:3C:A3:A9:8D:EB Page 256 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: AE:F3:96:22:45:0B:DB:7D:6D:DA:66:BF:71:CF:30:49:2B:C7:13:D8:25:3A:93:E7:10:07:F5:A4:1C :E9:5E:6D Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2013-02-20T00:00:03Z 16.2.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] OU=CA TSA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service digital identities X509SubjectName Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Certificate fields details Version: 3 Serial Number: 1070286571 X509 Certificate -----BEGIN CERTIFICATE----MIIEwDCCA6igAwIBAgIEP8tG6zANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8wDQYDVQQL DAZDQSBUU0EwHhcNMDQxMjIzMTEzNzMxWhcNMTQxMjIzMTIwNzMxWjBWMQswCQYDVQQGEwJJVDES MBAGA1UECgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8w DQYDVQQLDAZDQSBUU0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07Ty2DKXJ6oJh 7imcMV+0YhTEzY0FwGZFOTU/2E2DFG903Dq8hqyRiDnuMT+58ut/ykt8Tljks6NO2CBgP2CXnFLw vD5jpst0C3wuhm3qJvbP5agwgpQsa+zjo6KHbXsDnb3VUYwmIhyClu8Kt4QXin3nN/mcY8SKRAJZ ey73tHNdFBbMhYTBYNsshqRovgH8zMoU7tNWsAAS+IG4vMCEDsbnEkaAj7m/BKfEE2bu8aL4uAB6 pc10bVTtrYbratqGQH4YqQfUIjifvxCpNxndv6r23FTEz0FKuNS6HPrVSUS48hk3dhF7CGx8fizg yppH01rRz/z2kDclfAFPF1U/AgMBAAGjggGUMIIBkDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1Ud DwEB/wQEAwIBBjBYBgNVHSAEUTBPME0GBStMHQECMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly93d3cu Y2Euc29nZWkuaXQvTWFudWFsaS9NYW51YWxlT3BlcmF0aXZvVFNBLnBkZjCB8AYDVR0fBIHoMIHl MG2ga6BppGcwZTELMAkGA1UEBhMCSVQxEjAQBgNVBAoMCVNvZ2VpIFNwQTEiMCAGA1UECwwZU2Vy dml6aSBkaSBDZXJ0aWZpY2F6aW9uZTEPMA0GA1UECwwGQ0EgVFNBMQ0wCwYDVQQDDARDUkwxMHSg cqBwhm5sZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMFRTQSxvdT1TZXJ2aXppJTIwZGklMjBD ZXJ0aWZpY2F6aW9uZSxvPVNvZ2VpJTIwU3BBLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlz dDAdBgNVHQ4EFgQU0HBTCp3G/JwO90bNn5VpPKOpjeswDQYJKoZIhvcNAQEFBQADggEBAJptBcyc qIAduSso5IhS3NaYWQ6bbNMhWTy1Z5VFnrX/X9aW/jUWL2tR2bhkF6WRCXpfhoCcet6LCdEoz6fZ e08LePViASf02QoiRpk5aJyLuwbPeVT1H4Dqa6OOeIOcI1vH+l1I/7249bH5C6ocaM3wEu5duIW4 VhwKMEaeYu8hpArj/2zd121Vk+ix9xFm8WGI9wWVRtJRar3GAtCQmGAZWiiP2jCM7/q0LKSVZoKM be54tIVXGEYgXA8yvGuAF5l7cOUpulKNu71AykpAIel91Ss+x3xccMCBnlmc5Uog25akeKTgMqr1 5VWYWQYQyvwlTBznW2iYetc/exPpkgU= -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 257 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer OU: CA TSA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 12:37:31 CET 2004 Valid to: Tue Dec 23 13:07:31 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.29.1.2 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativoTSA.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA TSA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20TSA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT?cer tificateRevocationList Subject Key Identifier D0:70:53:0A:9D:C6:FC:9C:0E:F7:46:CD:9F:95:69:3C:A3:A9:8D:EB Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: AE:F3:96:22:45:0B:DB:7D:6D:DA:66:BF:71:CF:30:49:2B:C7:13:D8:25:3A:93:E7:10:07:F5:A4:1C :E9:5E:6D Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2013-02-20T00:00:02Z 16.2.2 - History instance n.2 - Status: accreditationceased ITALIA (ITALY) - Trusted List ID: ID100001 Page 258 ETSI 2014 - TSL HR - PDF/A-1b generator Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] OU=CA TSA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service digital identities X509SubjectName Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Certificate fields details Version: 3 Serial Number: 1070286571 X509 Certificate -----BEGIN CERTIFICATE----MIIEwDCCA6igAwIBAgIEP8tG6zANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8wDQYDVQQL DAZDQSBUU0EwHhcNMDQxMjIzMTEzNzMxWhcNMTQxMjIzMTIwNzMxWjBWMQswCQYDVQQGEwJJVDES MBAGA1UECgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8w DQYDVQQLDAZDQSBUU0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07Ty2DKXJ6oJh 7imcMV+0YhTEzY0FwGZFOTU/2E2DFG903Dq8hqyRiDnuMT+58ut/ykt8Tljks6NO2CBgP2CXnFLw vD5jpst0C3wuhm3qJvbP5agwgpQsa+zjo6KHbXsDnb3VUYwmIhyClu8Kt4QXin3nN/mcY8SKRAJZ ey73tHNdFBbMhYTBYNsshqRovgH8zMoU7tNWsAAS+IG4vMCEDsbnEkaAj7m/BKfEE2bu8aL4uAB6 pc10bVTtrYbratqGQH4YqQfUIjifvxCpNxndv6r23FTEz0FKuNS6HPrVSUS48hk3dhF7CGx8fizg yppH01rRz/z2kDclfAFPF1U/AgMBAAGjggGUMIIBkDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1Ud DwEB/wQEAwIBBjBYBgNVHSAEUTBPME0GBStMHQECMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly93d3cu Y2Euc29nZWkuaXQvTWFudWFsaS9NYW51YWxlT3BlcmF0aXZvVFNBLnBkZjCB8AYDVR0fBIHoMIHl MG2ga6BppGcwZTELMAkGA1UEBhMCSVQxEjAQBgNVBAoMCVNvZ2VpIFNwQTEiMCAGA1UECwwZU2Vy dml6aSBkaSBDZXJ0aWZpY2F6aW9uZTEPMA0GA1UECwwGQ0EgVFNBMQ0wCwYDVQQDDARDUkwxMHSg cqBwhm5sZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMFRTQSxvdT1TZXJ2aXppJTIwZGklMjBD ZXJ0aWZpY2F6aW9uZSxvPVNvZ2VpJTIwU3BBLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlz dDAdBgNVHQ4EFgQU0HBTCp3G/JwO90bNn5VpPKOpjeswDQYJKoZIhvcNAQEFBQADggEBAJptBcyc qIAduSso5IhS3NaYWQ6bbNMhWTy1Z5VFnrX/X9aW/jUWL2tR2bhkF6WRCXpfhoCcet6LCdEoz6fZ e08LePViASf02QoiRpk5aJyLuwbPeVT1H4Dqa6OOeIOcI1vH+l1I/7249bH5C6ocaM3wEu5duIW4 VhwKMEaeYu8hpArj/2zd121Vk+ix9xFm8WGI9wWVRtJRar3GAtCQmGAZWiiP2jCM7/q0LKSVZoKM be54tIVXGEYgXA8yvGuAF5l7cOUpulKNu71AykpAIel91Ss+x3xccMCBnlmc5Uog25akeKTgMqr1 5VWYWQYQyvwlTBznW2iYetc/exPpkgU= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA TSA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 259 ETSI 2014 - TSL HR - PDF/A-1b generator Valid from: Thu Dec 23 12:37:31 CET 2004 Valid to: Tue Dec 23 13:07:31 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.29.1.2 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativoTSA.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA TSA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20TSA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT?cer tificateRevocationList Subject Key Identifier D0:70:53:0A:9D:C6:FC:9C:0E:F7:46:CD:9F:95:69:3C:A3:A9:8D:EB Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: AE:F3:96:22:45:0B:DB:7D:6D:DA:66:BF:71:CF:30:49:2B:C7:13:D8:25:3A:93:E7:10:07:F5:A4:1C :E9:5E:6D Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2013-02-20T00:00:01Z 16.2.3 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] OU=CA TSA,OU=Servizi di Certificazione,O=Sogei SpA,C=IT Service digital identities X509SubjectName Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Certificate fields details ITALIA (ITALY) - Trusted List ID: ID100001 Page 260 ETSI 2014 - TSL HR - PDF/A-1b generator Version: 3 Serial Number: 1070286571 X509 Certificate -----BEGIN CERTIFICATE----MIIEwDCCA6igAwIBAgIEP8tG6zANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJJVDESMBAGA1UE CgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8wDQYDVQQL DAZDQSBUU0EwHhcNMDQxMjIzMTEzNzMxWhcNMTQxMjIzMTIwNzMxWjBWMQswCQYDVQQGEwJJVDES MBAGA1UECgwJU29nZWkgU3BBMSIwIAYDVQQLDBlTZXJ2aXppIGRpIENlcnRpZmljYXppb25lMQ8w DQYDVQQLDAZDQSBUU0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07Ty2DKXJ6oJh 7imcMV+0YhTEzY0FwGZFOTU/2E2DFG903Dq8hqyRiDnuMT+58ut/ykt8Tljks6NO2CBgP2CXnFLw vD5jpst0C3wuhm3qJvbP5agwgpQsa+zjo6KHbXsDnb3VUYwmIhyClu8Kt4QXin3nN/mcY8SKRAJZ ey73tHNdFBbMhYTBYNsshqRovgH8zMoU7tNWsAAS+IG4vMCEDsbnEkaAj7m/BKfEE2bu8aL4uAB6 pc10bVTtrYbratqGQH4YqQfUIjifvxCpNxndv6r23FTEz0FKuNS6HPrVSUS48hk3dhF7CGx8fizg yppH01rRz/z2kDclfAFPF1U/AgMBAAGjggGUMIIBkDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1Ud DwEB/wQEAwIBBjBYBgNVHSAEUTBPME0GBStMHQECMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly93d3cu Y2Euc29nZWkuaXQvTWFudWFsaS9NYW51YWxlT3BlcmF0aXZvVFNBLnBkZjCB8AYDVR0fBIHoMIHl MG2ga6BppGcwZTELMAkGA1UEBhMCSVQxEjAQBgNVBAoMCVNvZ2VpIFNwQTEiMCAGA1UECwwZU2Vy dml6aSBkaSBDZXJ0aWZpY2F6aW9uZTEPMA0GA1UECwwGQ0EgVFNBMQ0wCwYDVQQDDARDUkwxMHSg cqBwhm5sZGFwOi8vY2Fkcy5zb2dlaS5pdC9vdT1DQSUyMFRTQSxvdT1TZXJ2aXppJTIwZGklMjBD ZXJ0aWZpY2F6aW9uZSxvPVNvZ2VpJTIwU3BBLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlz dDAdBgNVHQ4EFgQU0HBTCp3G/JwO90bNn5VpPKOpjeswDQYJKoZIhvcNAQEFBQADggEBAJptBcyc qIAduSso5IhS3NaYWQ6bbNMhWTy1Z5VFnrX/X9aW/jUWL2tR2bhkF6WRCXpfhoCcet6LCdEoz6fZ e08LePViASf02QoiRpk5aJyLuwbPeVT1H4Dqa6OOeIOcI1vH+l1I/7249bH5C6ocaM3wEu5duIW4 VhwKMEaeYu8hpArj/2zd121Vk+ix9xFm8WGI9wWVRtJRar3GAtCQmGAZWiiP2jCM7/q0LKSVZoKM be54tIVXGEYgXA8yvGuAF5l7cOUpulKNu71AykpAIel91Ss+x3xccMCBnlmc5Uog25akeKTgMqr1 5VWYWQYQyvwlTBznW2iYetc/exPpkgU= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: CA TSA Issuer OU: Servizi di Certificazione Issuer O: Sogei SpA Issuer C: IT Subject OU: CA TSA Subject OU: Servizi di Certificazione Subject O: Sogei SpA Subject C: IT Valid from: Thu Dec 23 12:37:31 CET 2004 Valid to: Tue Dec 23 13:07:31 CET 2014 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.29.1.2 CPS pointer: http://www.ca.sogei.it/Manuali/ManualeOperativoTSA.pdf CRL Distribution Points C=IT,O=Sogei SpA,OU=Servizi di Certificazione,OU=CA TSA,CN=CRL1 ldap://cads.sogei.it/ou=CA%20TSA,ou=Servizi%20di%20Certificazione,o=Sogei%20SpA,c=IT?cer tificateRevocationList Subject Key Identifier D0:70:53:0A:9D:C6:FC:9C:0E:F7:46:CD:9F:95:69:3C:A3:A9:8D:EB Key Usage: keyCertSign - cRLSign ITALIA (ITALY) - Trusted List ID: ID100001 Page 261 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint algorithm: SHA-256 Thumbprint: AE:F3:96:22:45:0B:DB:7D:6D:DA:66:BF:71:CF:30:49:2B:C7:13:D8:25:3A:93:E7:10:07:F5:A4:1C :E9:5E:6D Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-12-23T12:37:31Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 262 ETSI 2014 - TSL HR - PDF/A-1b generator 17 - TSP: Banca di Roma S.p.A. TSP Name Name [ en ] Banca di Roma S.p.A. Name [ it ] Banca di Roma S.p.A. Name [ en ] Banca di Roma Name [ it ] Banca di Roma Name [ en ] VATIT-00348170101 Name [ it ] VATIT-00348170101 Street Address [ en ] viale umberto tupini 180 Locality [ en ] roma Postal Code [ en ] 00100 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI http://www.digitpa.gov.it/ceased-qcsp URI mailto:[email protected] TSP Information URI URI [ en ] http://www.digitpa.gov.it/ceased-qcsp 17.1 - Service (supervisionceased): CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 263 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 300111 X509 Certificate -----BEGIN CERTIFICATE----MIIFIzCCBAugAwIBAgIDBJRPMA0GCSqGSIb3DQEBBQUAMIGYMQswCQYDVQQGEwJJVDEdMBsGA1UE CgwUQmFuY2EgZGkgUm9tYSBTLnAuQS4xKjAoBgNVBAsMIWJhbmNhcm9tYSBJZGVudHJ1cyBJbmZy YXN0cnVjdHVyZTE+MDwGA1UEAww1YmFuY2Fyb21hIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlm aWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDk1NzIzWhcNMTMxMjExMjIxODQ3WjCBmDELMAkG A1UEBhMCSVQxHTAbBgNVBAoMFEJhbmNhIGRpIFJvbWEgUy5wLkEuMSowKAYDVQQLDCFiYW5jYXJv bWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8BgNVBAMMNWJhbmNhcm9tYSBQcm9kdWN0aW9u IElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzWAXqwqm+ubrKHt5EwDF7xTTEAR4d5eXSQHIVZjKIazSBzyicWSiontXJuXeEVbf 5Qpzag5Cdm4zHllGIr2EqZ8ZEMoaV84avkoa2xtXHKWtcxGrb3qyuFVEILS4p+W82pt65n7WGgfN WE4puZUSdeJr6s41jueT/iczGPZ0TYUzmHJorPoKVRb9IWkd2q/lQlDZ4Pv1iO+CLPApjLNohDTr vu2vxqZ5U4Cu8VJvFetIiP+oM5dW+4QlWQPPqjX30aOlxCP/Rwyae6VCrh+AE9uj5k45g9coeHOK JxgEhSRxJiyMo/fBi93QhNvv4zaS7fkoB+dD4GLM17ECycj3KQIDAQABo4IBcjCCAW4wDwYDVR0T AQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysGAQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNVHQ8BAf8EBAMCAQYwgeYGA1UdHwSB3jCB2zCB2KCB 1aCB0oaBz2xkYXA6Ly9sZGFwLmNhc2VydjAxLmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUy MFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2Ri YW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9t YSUyMFMucC5BLixjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUEeeA /QVo7+koLrONx/iAPjkz67owDQYJKoZIhvcNAQEFBQADggEBAFsYrO8vcVL/3Uh6S6aIb7vNpXcJ QWG+f8IBaM/IWwpN0vs/SYBx1hbfU6PPNP2FaxnKEl/WhIS4BJc/0xn83/SoED4NyOJb9Ft7G15F mzHPvcnywE/6EvQo0p1XYV0Afy2CBn/fkFncOO1jiYOCKN+ip5IQ6IvT7otSKLxRAkQj/Zrya/RR 71/eYo/wwWl9+h3tHc+ST00F5JT8GUi0onYw5AY+iud6TKtM+03XqaHigs8AIOVaN86xk6jaS0Pb 27cK7upmutcriuiSQQ55v3EN1eD1aLcfFmst1lCZphSkl30FkDxzk4fGlPZ++TizHHV1FB+Hvqwz ZaaNXtuXqLA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Issuer C: IT Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Valid from: Tue Feb 13 10:57:23 CET 2007 Valid to: Wed Dec 11 23:18:47 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps ITALIA (ITALY) - Trusted List ID: ID100001 Page 264 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .,c%3dIT?certificateRevocationList Subject Key Identifier 11:E7:80:FD:05:68:EF:E9:28:2E:B3:8D:C7:F8:80:3E:39:33:EB:BA Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1F:DB:E8:A3:1A:5B:73:4C:FD:19:37:57:08:96:9C:95:13:C6:77:1D:17:F8:B4:29:49:74:E8:DA:3E: 8F:0C:FD Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2008-02-12T23:02:02Z 17.1.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 300111 ITALIA (ITALY) - Trusted List ID: ID100001 Page 265 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFIzCCBAugAwIBAgIDBJRPMA0GCSqGSIb3DQEBBQUAMIGYMQswCQYDVQQGEwJJVDEdMBsGA1UE CgwUQmFuY2EgZGkgUm9tYSBTLnAuQS4xKjAoBgNVBAsMIWJhbmNhcm9tYSBJZGVudHJ1cyBJbmZy YXN0cnVjdHVyZTE+MDwGA1UEAww1YmFuY2Fyb21hIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlm aWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDk1NzIzWhcNMTMxMjExMjIxODQ3WjCBmDELMAkG A1UEBhMCSVQxHTAbBgNVBAoMFEJhbmNhIGRpIFJvbWEgUy5wLkEuMSowKAYDVQQLDCFiYW5jYXJv bWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8BgNVBAMMNWJhbmNhcm9tYSBQcm9kdWN0aW9u IElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzWAXqwqm+ubrKHt5EwDF7xTTEAR4d5eXSQHIVZjKIazSBzyicWSiontXJuXeEVbf 5Qpzag5Cdm4zHllGIr2EqZ8ZEMoaV84avkoa2xtXHKWtcxGrb3qyuFVEILS4p+W82pt65n7WGgfN WE4puZUSdeJr6s41jueT/iczGPZ0TYUzmHJorPoKVRb9IWkd2q/lQlDZ4Pv1iO+CLPApjLNohDTr vu2vxqZ5U4Cu8VJvFetIiP+oM5dW+4QlWQPPqjX30aOlxCP/Rwyae6VCrh+AE9uj5k45g9coeHOK JxgEhSRxJiyMo/fBi93QhNvv4zaS7fkoB+dD4GLM17ECycj3KQIDAQABo4IBcjCCAW4wDwYDVR0T AQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysGAQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNVHQ8BAf8EBAMCAQYwgeYGA1UdHwSB3jCB2zCB2KCB 1aCB0oaBz2xkYXA6Ly9sZGFwLmNhc2VydjAxLmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUy MFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2Ri YW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9t YSUyMFMucC5BLixjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUEeeA /QVo7+koLrONx/iAPjkz67owDQYJKoZIhvcNAQEFBQADggEBAFsYrO8vcVL/3Uh6S6aIb7vNpXcJ QWG+f8IBaM/IWwpN0vs/SYBx1hbfU6PPNP2FaxnKEl/WhIS4BJc/0xn83/SoED4NyOJb9Ft7G15F mzHPvcnywE/6EvQo0p1XYV0Afy2CBn/fkFncOO1jiYOCKN+ip5IQ6IvT7otSKLxRAkQj/Zrya/RR 71/eYo/wwWl9+h3tHc+ST00F5JT8GUi0onYw5AY+iud6TKtM+03XqaHigs8AIOVaN86xk6jaS0Pb 27cK7upmutcriuiSQQ55v3EN1eD1aLcfFmst1lCZphSkl30FkDxzk4fGlPZ++TizHHV1FB+Hvqwz ZaaNXtuXqLA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Issuer C: IT Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Valid from: Tue Feb 13 10:57:23 CET 2007 Valid to: Wed Dec 11 23:18:47 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .,c%3dIT?certificateRevocationList Subject Key Identifier 11:E7:80:FD:05:68:EF:E9:28:2E:B3:8D:C7:F8:80:3E:39:33:EB:BA Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1F:DB:E8:A3:1A:5B:73:4C:FD:19:37:57:08:96:9C:95:13:C6:77:1D:17:F8:B4:29:49:74:E8:DA:3E: 8F:0C:FD ITALIA (ITALY) - Trusted List ID: ID100001 Page 266 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2008-02-12T23:01:02Z 17.1.2 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 300111 X509 Certificate -----BEGIN CERTIFICATE----MIIFIzCCBAugAwIBAgIDBJRPMA0GCSqGSIb3DQEBBQUAMIGYMQswCQYDVQQGEwJJVDEdMBsGA1UE CgwUQmFuY2EgZGkgUm9tYSBTLnAuQS4xKjAoBgNVBAsMIWJhbmNhcm9tYSBJZGVudHJ1cyBJbmZy YXN0cnVjdHVyZTE+MDwGA1UEAww1YmFuY2Fyb21hIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlm aWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDk1NzIzWhcNMTMxMjExMjIxODQ3WjCBmDELMAkG A1UEBhMCSVQxHTAbBgNVBAoMFEJhbmNhIGRpIFJvbWEgUy5wLkEuMSowKAYDVQQLDCFiYW5jYXJv bWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8BgNVBAMMNWJhbmNhcm9tYSBQcm9kdWN0aW9u IElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzWAXqwqm+ubrKHt5EwDF7xTTEAR4d5eXSQHIVZjKIazSBzyicWSiontXJuXeEVbf 5Qpzag5Cdm4zHllGIr2EqZ8ZEMoaV84avkoa2xtXHKWtcxGrb3qyuFVEILS4p+W82pt65n7WGgfN WE4puZUSdeJr6s41jueT/iczGPZ0TYUzmHJorPoKVRb9IWkd2q/lQlDZ4Pv1iO+CLPApjLNohDTr vu2vxqZ5U4Cu8VJvFetIiP+oM5dW+4QlWQPPqjX30aOlxCP/Rwyae6VCrh+AE9uj5k45g9coeHOK JxgEhSRxJiyMo/fBi93QhNvv4zaS7fkoB+dD4GLM17ECycj3KQIDAQABo4IBcjCCAW4wDwYDVR0T AQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysGAQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNVHQ8BAf8EBAMCAQYwgeYGA1UdHwSB3jCB2zCB2KCB 1aCB0oaBz2xkYXA6Ly9sZGFwLmNhc2VydjAxLmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUy MFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2Ri YW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9t YSUyMFMucC5BLixjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUEeeA /QVo7+koLrONx/iAPjkz67owDQYJKoZIhvcNAQEFBQADggEBAFsYrO8vcVL/3Uh6S6aIb7vNpXcJ QWG+f8IBaM/IWwpN0vs/SYBx1hbfU6PPNP2FaxnKEl/WhIS4BJc/0xn83/SoED4NyOJb9Ft7G15F mzHPvcnywE/6EvQo0p1XYV0Afy2CBn/fkFncOO1jiYOCKN+ip5IQ6IvT7otSKLxRAkQj/Zrya/RR 71/eYo/wwWl9+h3tHc+ST00F5JT8GUi0onYw5AY+iud6TKtM+03XqaHigs8AIOVaN86xk6jaS0Pb 27cK7upmutcriuiSQQ55v3EN1eD1aLcfFmst1lCZphSkl30FkDxzk4fGlPZ++TizHHV1FB+Hvqwz ZaaNXtuXqLA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 267 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Valid from: Tue Feb 13 10:57:23 CET 2007 Valid to: Wed Dec 11 23:18:47 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .,c%3dIT?certificateRevocationList Subject Key Identifier 11:E7:80:FD:05:68:EF:E9:28:2E:B3:8D:C7:F8:80:3E:39:33:EB:BA Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1F:DB:E8:A3:1A:5B:73:4C:FD:19:37:57:08:96:9C:95:13:C6:77:1D:17:F8:B4:29:49:74:E8:DA:3E: 8F:0C:FD Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2008-02-12T23:00:00Z 17.1.3 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: ITALIA (ITALY) - Trusted List ID: ID100001 bancaroma Production Identrus Certification Authority Page 268 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 300111 X509 Certificate -----BEGIN CERTIFICATE----MIIFIzCCBAugAwIBAgIDBJRPMA0GCSqGSIb3DQEBBQUAMIGYMQswCQYDVQQGEwJJVDEdMBsGA1UE CgwUQmFuY2EgZGkgUm9tYSBTLnAuQS4xKjAoBgNVBAsMIWJhbmNhcm9tYSBJZGVudHJ1cyBJbmZy YXN0cnVjdHVyZTE+MDwGA1UEAww1YmFuY2Fyb21hIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlm aWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjEzMDk1NzIzWhcNMTMxMjExMjIxODQ3WjCBmDELMAkG A1UEBhMCSVQxHTAbBgNVBAoMFEJhbmNhIGRpIFJvbWEgUy5wLkEuMSowKAYDVQQLDCFiYW5jYXJv bWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8BgNVBAMMNWJhbmNhcm9tYSBQcm9kdWN0aW9u IElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzWAXqwqm+ubrKHt5EwDF7xTTEAR4d5eXSQHIVZjKIazSBzyicWSiontXJuXeEVbf 5Qpzag5Cdm4zHllGIr2EqZ8ZEMoaV84avkoa2xtXHKWtcxGrb3qyuFVEILS4p+W82pt65n7WGgfN WE4puZUSdeJr6s41jueT/iczGPZ0TYUzmHJorPoKVRb9IWkd2q/lQlDZ4Pv1iO+CLPApjLNohDTr vu2vxqZ5U4Cu8VJvFetIiP+oM5dW+4QlWQPPqjX30aOlxCP/Rwyae6VCrh+AE9uj5k45g9coeHOK JxgEhSRxJiyMo/fBi93QhNvv4zaS7fkoB+dD4GLM17ECycj3KQIDAQABo4IBcjCCAW4wDwYDVR0T AQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysGAQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNVHQ8BAf8EBAMCAQYwgeYGA1UdHwSB3jCB2zCB2KCB 1aCB0oaBz2xkYXA6Ly9sZGFwLmNhc2VydjAxLmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUy MFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2Ri YW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9t YSUyMFMucC5BLixjJTNkSVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQUEeeA /QVo7+koLrONx/iAPjkz67owDQYJKoZIhvcNAQEFBQADggEBAFsYrO8vcVL/3Uh6S6aIb7vNpXcJ QWG+f8IBaM/IWwpN0vs/SYBx1hbfU6PPNP2FaxnKEl/WhIS4BJc/0xn83/SoED4NyOJb9Ft7G15F mzHPvcnywE/6EvQo0p1XYV0Afy2CBn/fkFncOO1jiYOCKN+ip5IQ6IvT7otSKLxRAkQj/Zrya/RR 71/eYo/wwWl9+h3tHc+ST00F5JT8GUi0onYw5AY+iud6TKtM+03XqaHigs8AIOVaN86xk6jaS0Pb 27cK7upmutcriuiSQQ55v3EN1eD1aLcfFmst1lCZphSkl30FkDxzk4fGlPZ++TizHHV1FB+Hvqwz ZaaNXtuXqLA= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Issuer C: IT Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Subject C: IT Valid from: Tue Feb 13 10:57:23 CET 2007 Valid to: Wed Dec 11 23:18:47 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps ITALIA (ITALY) - Trusted List ID: ID100001 Page 269 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .,c%3dIT?certificateRevocationList Subject Key Identifier 11:E7:80:FD:05:68:EF:E9:28:2E:B3:8D:C7:F8:80:3E:39:33:EB:BA Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1F:DB:E8:A3:1A:5B:73:4C:FD:19:37:57:08:96:9C:95:13:C6:77:1D:17:F8:B4:29:49:74:E8:DA:3E: 8F:0C:FD Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2007-02-13T10:57:23Z 17.2 - Service (supervisionceased): CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A. Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 199 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAMcwDQYJKoZIhvcNAQEFBQAwgYsxHTAbBgNVBAoTFEJhbmNhIGRpIFJv bWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8 BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA0MTExMDEwNTg0MFoXDTExMDUwNTExNTgyNVowgYsxHTAbBgNVBAoTFEJhbmNhIGRp IFJvbWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUx PjA8BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LG4utk7/Y/ObWl+dbC/FlUB HL56+EbHCxzUn9XgPeWOwOr4m9HPDMvYbnnzuZsSCfQqZ4URYIaW2bqjOFo+6P1kdUbavb7mGx/p LENjEKeigITIpE0ip6nllVwlb5/U6qZv0F5CdmaemPZfiYaYha8wweVurFA/k/ZGyDCEbbR4jLsU RSAFlSmyObJ9theazvinCwiV/2cKsixcPy59R6Rci+VCkfQIFl6/lMWypOA1HCWUfrCQu09GzSNE gOpXR5co3uTGOMaFqlOP75IbyfrSUgE8vk+KlfbIXO+kXo1CV7uC9ohrBiRqIUQZf4EA7WjGdUIb dmG351Q9GTrNFwIDAQABo4IBazCCAWcwDwYDVR0TAQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysG AQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNV HQ8BAf8EBAMCAQYwgd8GA1UdHwSB1zCB1DCB0aCBzqCBy4aByGxkYXA6Ly9sZGFwLmNhc2VydjAx LmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENl cnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2RiYW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJh c3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9tYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBSbCFvWYDYQRy0hpTR4iD+hE39PijANBgkqhkiG9w0BAQUFAAOC AQEAFsbUR4NXG4SW6TQO50oQ1JP0rIRe+KI1ZGPjKz3/Rcwxsqg87hRjw5XeK+NDS1gcN15eDT+F z82FMaAaIf/rWCZz43lw3/Jww9hlA9FCoSFXkIRWSuG/Gu+DUmefmXc7T5Y+0VXUjZ/Q+QYyED1r U1bLOCy6X63+XoRkiqqK2padbPifgLCvsf0/No2T4KMfV3AQe2GpwNIWwBi+BMLeIK9YPtiTflTM ivw5NpWZqF5/QZX6pHVMOSCmxcXOV6bV6UlMzYjDvahBfGU1O/EcBQZul1YEuAkDa0cHSfXG3MGF vkdMFxBNY3szRX+4dyn7y9h2tmvs+oZ1ifh34v7NYg== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority ITALIA (ITALY) - Trusted List ID: ID100001 Page 270 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Valid from: Wed Nov 10 11:58:40 CET 2004 Valid to: Thu May 05 13:58:25 CEST 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .?certificateRevocationList Subject Key Identifier 9B:08:5B:D6:60:36:10:47:2D:21:A5:34:78:88:3F:A1:13:7F:4F:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:54:2A:5F:C5:1C:B2:DF:33:79:72:B3:A5:CB:51:40:52:37:F1:B5:35:8A:83:4B:9C:A9:C5:AE:D B:51:43:90 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2008-02-12T23:02:02Z 17.2.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] ITALIA (ITALY) - Trusted List ID: ID100001 CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A. Page 271 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities X509SubjectName Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Certificate fields details Version: 3 Serial Number: 199 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAMcwDQYJKoZIhvcNAQEFBQAwgYsxHTAbBgNVBAoTFEJhbmNhIGRpIFJv bWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8 BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA0MTExMDEwNTg0MFoXDTExMDUwNTExNTgyNVowgYsxHTAbBgNVBAoTFEJhbmNhIGRp IFJvbWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUx PjA8BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LG4utk7/Y/ObWl+dbC/FlUB HL56+EbHCxzUn9XgPeWOwOr4m9HPDMvYbnnzuZsSCfQqZ4URYIaW2bqjOFo+6P1kdUbavb7mGx/p LENjEKeigITIpE0ip6nllVwlb5/U6qZv0F5CdmaemPZfiYaYha8wweVurFA/k/ZGyDCEbbR4jLsU RSAFlSmyObJ9theazvinCwiV/2cKsixcPy59R6Rci+VCkfQIFl6/lMWypOA1HCWUfrCQu09GzSNE gOpXR5co3uTGOMaFqlOP75IbyfrSUgE8vk+KlfbIXO+kXo1CV7uC9ohrBiRqIUQZf4EA7WjGdUIb dmG351Q9GTrNFwIDAQABo4IBazCCAWcwDwYDVR0TAQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysG AQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNV HQ8BAf8EBAMCAQYwgd8GA1UdHwSB1zCB1DCB0aCBzqCBy4aByGxkYXA6Ly9sZGFwLmNhc2VydjAx LmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENl cnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2RiYW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJh c3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9tYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBSbCFvWYDYQRy0hpTR4iD+hE39PijANBgkqhkiG9w0BAQUFAAOC AQEAFsbUR4NXG4SW6TQO50oQ1JP0rIRe+KI1ZGPjKz3/Rcwxsqg87hRjw5XeK+NDS1gcN15eDT+F z82FMaAaIf/rWCZz43lw3/Jww9hlA9FCoSFXkIRWSuG/Gu+DUmefmXc7T5Y+0VXUjZ/Q+QYyED1r U1bLOCy6X63+XoRkiqqK2padbPifgLCvsf0/No2T4KMfV3AQe2GpwNIWwBi+BMLeIK9YPtiTflTM ivw5NpWZqF5/QZX6pHVMOSCmxcXOV6bV6UlMzYjDvahBfGU1O/EcBQZul1YEuAkDa0cHSfXG3MGF vkdMFxBNY3szRX+4dyn7y9h2tmvs+oZ1ifh34v7NYg== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Valid from: Wed Nov 10 11:58:40 CET 2004 Valid to: Thu May 05 13:58:25 CEST 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:DC:B1:B8:BA:D9:3B:FD:8F:CE:6D:69:7E:75:B0:BF:16:55:01:1C:BE:7A:F8:46:C7:0B:1C:D4:9F:D5:E0:3D:E5:8E:C 0:EA:F8:9B:D1:CF:0C:CB:D8:6E:79:F3:B9:9B:12:09:F4:2A:67:85:11:60:86:96:D9:BA:A3:38:5A:3E:E8:FD:64:75:46:DA:BD:BE:E6:1B:1F:E9:2C:43:63:10:A7:A2:80:84:C8:A4:4D:22:A7:A9:E5:95:5C:25:6F:9F:D4:EA:A6: 6F:D0:5E:42:76:66:9E:98:F6:5F:89:86:98:85:AF:30:C1:E5:6E:AC:50:3F:93:F6:46:C8:30:84:6D:B4:78:8C:BB:14:45:20:05:95:29:B2:39:B2:7D:B6:17:9A:CE:F8:A7:0B:08:95:FF:67:0A:B2:2C:5C:3F:2E:7D:47:A4:5C:8B:E5: 42:91:F4:08:16:5E:BF:94:C5:B2:A4:E0:35:1C:25:94:7E:B0:90:BB:4F:46:CD:23:44:80:EA:57:47:97:28:DE:E4:C6:38:C6:85:AA:53:8F:EF:92:1B:C9:FA:D2:52:01:3C:BE:4F:8A:95:F6:C8:5C:EF:A4:5E:8D:42:57:BB:82:F6:88 :6B:06:24:6A:21:44:19:7F:81:00:ED:68:C6:75:42:1B:76:61:B7:E7:54:3D:19:3A:CD:17:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps ITALIA (ITALY) - Trusted List ID: ID100001 Page 272 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .?certificateRevocationList Subject Key Identifier 9B:08:5B:D6:60:36:10:47:2D:21:A5:34:78:88:3F:A1:13:7F:4F:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:54:2A:5F:C5:1C:B2:DF:33:79:72:B3:A5:CB:51:40:52:37:F1:B5:35:8A:83:4B:9C:A9:C5:AE:D B:51:43:90 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2008-02-12T23:01:02Z 17.2.2 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A. Service digital identities X509SubjectName Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Certificate fields details Version: 3 Serial Number: 199 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAMcwDQYJKoZIhvcNAQEFBQAwgYsxHTAbBgNVBAoTFEJhbmNhIGRpIFJv bWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8 BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA0MTExMDEwNTg0MFoXDTExMDUwNTExNTgyNVowgYsxHTAbBgNVBAoTFEJhbmNhIGRp IFJvbWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUx PjA8BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LG4utk7/Y/ObWl+dbC/FlUB HL56+EbHCxzUn9XgPeWOwOr4m9HPDMvYbnnzuZsSCfQqZ4URYIaW2bqjOFo+6P1kdUbavb7mGx/p LENjEKeigITIpE0ip6nllVwlb5/U6qZv0F5CdmaemPZfiYaYha8wweVurFA/k/ZGyDCEbbR4jLsU RSAFlSmyObJ9theazvinCwiV/2cKsixcPy59R6Rci+VCkfQIFl6/lMWypOA1HCWUfrCQu09GzSNE gOpXR5co3uTGOMaFqlOP75IbyfrSUgE8vk+KlfbIXO+kXo1CV7uC9ohrBiRqIUQZf4EA7WjGdUIb dmG351Q9GTrNFwIDAQABo4IBazCCAWcwDwYDVR0TAQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysG AQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNV HQ8BAf8EBAMCAQYwgd8GA1UdHwSB1zCB1DCB0aCBzqCBy4aByGxkYXA6Ly9sZGFwLmNhc2VydjAx LmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENl cnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2RiYW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJh c3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9tYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBSbCFvWYDYQRy0hpTR4iD+hE39PijANBgkqhkiG9w0BAQUFAAOC AQEAFsbUR4NXG4SW6TQO50oQ1JP0rIRe+KI1ZGPjKz3/Rcwxsqg87hRjw5XeK+NDS1gcN15eDT+F z82FMaAaIf/rWCZz43lw3/Jww9hlA9FCoSFXkIRWSuG/Gu+DUmefmXc7T5Y+0VXUjZ/Q+QYyED1r U1bLOCy6X63+XoRkiqqK2padbPifgLCvsf0/No2T4KMfV3AQe2GpwNIWwBi+BMLeIK9YPtiTflTM ivw5NpWZqF5/QZX6pHVMOSCmxcXOV6bV6UlMzYjDvahBfGU1O/EcBQZul1YEuAkDa0cHSfXG3MGF vkdMFxBNY3szRX+4dyn7y9h2tmvs+oZ1ifh34v7NYg== -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 273 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Valid from: Wed Nov 10 11:58:40 CET 2004 Valid to: Thu May 05 13:58:25 CEST 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .?certificateRevocationList Subject Key Identifier 9B:08:5B:D6:60:36:10:47:2D:21:A5:34:78:88:3F:A1:13:7F:4F:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:54:2A:5F:C5:1C:B2:DF:33:79:72:B3:A5:CB:51:40:52:37:F1:B5:35:8A:83:4B:9C:A9:C5:AE:D B:51:43:90 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2008-02-09T23:00:00Z 17.2.3 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] ITALIA (ITALY) - Trusted List ID: ID100001 CN=bancaroma Production Identrus Certification Authority,OU=bancaroma Identrus Infrastructure,O=Banca di Roma S.p.A. Page 274 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities X509SubjectName Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Certificate fields details Version: 3 Serial Number: 199 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAMcwDQYJKoZIhvcNAQEFBQAwgYsxHTAbBgNVBAoTFEJhbmNhIGRpIFJv bWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxPjA8 BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA0MTExMDEwNTg0MFoXDTExMDUwNTExNTgyNVowgYsxHTAbBgNVBAoTFEJhbmNhIGRp IFJvbWEgUy5wLkEuMSowKAYDVQQLEyFiYW5jYXJvbWEgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUx PjA8BgNVBAMTNWJhbmNhcm9tYSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LG4utk7/Y/ObWl+dbC/FlUB HL56+EbHCxzUn9XgPeWOwOr4m9HPDMvYbnnzuZsSCfQqZ4URYIaW2bqjOFo+6P1kdUbavb7mGx/p LENjEKeigITIpE0ip6nllVwlb5/U6qZv0F5CdmaemPZfiYaYha8wweVurFA/k/ZGyDCEbbR4jLsU RSAFlSmyObJ9theazvinCwiV/2cKsixcPy59R6Rci+VCkfQIFl6/lMWypOA1HCWUfrCQu09GzSNE gOpXR5co3uTGOMaFqlOP75IbyfrSUgE8vk+KlfbIXO+kXo1CV7uC9ohrBiRqIUQZf4EA7WjGdUIb dmG351Q9GTrNFwIDAQABo4IBazCCAWcwDwYDVR0TAQH/BAUwAwEB/zBDBgNVHSAEPDA6MDgGCysG AQQBgZ93AQEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuYmFuY2Fyb21hLml0L2NwczAOBgNV HQ8BAf8EBAMCAQYwgd8GA1UdHwSB1zCB1DCB0aCBzqCBy4aByGxkYXA6Ly9sZGFwLmNhc2VydjAx LmJhbmNhcm9tYS5pdC9jbiUzZGJhbmNhcm9tYSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENl cnRpZmljYXRpb24lMjBBdXRob3JpdHksb3UlM2RiYW5jYXJvbWElMjBJZGVudHJ1cyUyMEluZnJh c3RydWN0dXJlLG8lM2RCYW5jYSUyMGRpJTIwUm9tYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBSbCFvWYDYQRy0hpTR4iD+hE39PijANBgkqhkiG9w0BAQUFAAOC AQEAFsbUR4NXG4SW6TQO50oQ1JP0rIRe+KI1ZGPjKz3/Rcwxsqg87hRjw5XeK+NDS1gcN15eDT+F z82FMaAaIf/rWCZz43lw3/Jww9hlA9FCoSFXkIRWSuG/Gu+DUmefmXc7T5Y+0VXUjZ/Q+QYyED1r U1bLOCy6X63+XoRkiqqK2padbPifgLCvsf0/No2T4KMfV3AQe2GpwNIWwBi+BMLeIK9YPtiTflTM ivw5NpWZqF5/QZX6pHVMOSCmxcXOV6bV6UlMzYjDvahBfGU1O/EcBQZul1YEuAkDa0cHSfXG3MGF vkdMFxBNY3szRX+4dyn7y9h2tmvs+oZ1ifh34v7NYg== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: bancaroma Production Identrus Certification Authority Issuer OU: bancaroma Identrus Infrastructure Issuer O: Banca di Roma S.p.A. Subject CN: bancaroma Production Identrus Certification Authority Subject OU: bancaroma Identrus Infrastructure Subject O: Banca di Roma S.p.A. Valid from: Wed Nov 10 11:58:40 CET 2004 Valid to: Thu May 05 13:58:25 CEST 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20471.1.1.1 CPS pointer: http://www.bancaroma.it/cps ITALIA (ITALY) - Trusted List ID: ID100001 Page 275 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.caserv01.bancaroma.it/cn%3dbancaroma%20Production%20Identrus%20Certification%2 0Authority,ou%3dbancaroma%20Identrus%20Infrastructure,o%3dBanca%20di%20Roma%20S.p.A .?certificateRevocationList Subject Key Identifier 9B:08:5B:D6:60:36:10:47:2D:21:A5:34:78:88:3F:A1:13:7F:4F:8A Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:54:2A:5F:C5:1C:B2:DF:33:79:72:B3:A5:CB:51:40:52:37:F1:B5:35:8A:83:4B:9C:A9:C5:AE:D B:51:43:90 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-11-10T11:58:40Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 276 ETSI 2014 - TSL HR - PDF/A-1b generator 18 - TSP: Enel.it S.p.A. TSP Name Name [ en ] Enel.it S.p.A. Name [ it ] Enel.it S.p.A. Name [ en ] Enel.it Name [ it ] Enel.it Name [ en ] VATIT-00934061003 Name [ it ] VATIT-00934061003 Street Address [ en ] via carlo veneziani 56 Locality [ en ] roma Postal Code [ en ] 00148 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI http://www.digitpa.gov.it/ceased-qcsp URI mailto:[email protected] TSP Information URI URI [ en ] http://www.digitpa.gov.it/ceased-qcsp 18.1 - Service (supervisionceased): OU=Certificazione Titolari,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 277 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] OU=Certificazione Titolari,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1006344018 X509 Certificate -----BEGIN CERTIFICATE----MIIGRTCCBS2gAwIBAgIEO/uXUjANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx IDAeBgNVBAsTF0NlcnRpZmljYXppb25lIFRpdG9sYXJpMB4XDTAxMTIwNDEyMTgyMVoXDTExMTIw NDEyNDgyMVowbzELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkVuZWwuaXQgUy5wLkEuMSUwIwYDVQQL ExxTZXJ2aXppIGRpIEZpcm1hIFF1YWxpZmljYXRhMSAwHgYDVQQLExdDZXJ0aWZpY2F6aW9uZSBU aXRvbGFyaTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtMjpInHbEVxdLdPNtQh5da M9X9c/+JlNHL8hjcpaDuqnHpADNxh2C6Vt4tca/y1sipiTP3sa4dRgslUm/pjs3G4V11mlCHsVEV tGKo6EGBH6j8VGf/CczyA0Eq/Zo3wR1GqpktqKtGCGHmsrgJFh3bAIOg2MpijnGmfP4d+Z0w2s3W y/nZvHfYelJpvCn4C0nhNVQIWJ2dNWU5iDyobkkGbiTV8zMWqnWWa6SXJgE4gAHF5SQk9vaFv5rC THO4sA+9es38vJoGuKHj9vcp5+oDRLVoBudIrMgpwBxHtM08rT8uOUVBQSdHN0wS0QWvECHXtEXB C9p5px4F7NGspEcCAwEAAaOCAucwggLjMBIGA1UdEwEB/wQIMAYBAQECAQEwSAYDVR0gBEEwPzA9 BgYrTBcBAQEwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5lbmVsaXQuaXQvZmlybWFxdWFsaWZp Y2F0YTAOBgNVHQ8BAf8EBAMCAQYwgaUGA1UdHwSBnTCBmjCBl6CBlKCBkYaBjmxkYXA6Ly9yZWdp c3Ryby5lbmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIw ZGklMjBGaXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NlcnRpZmlj YXRlUmV2b2NhdGlvbkxpc3Qwga4GA1UdEQSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5lbmVsaXQu aXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBGaXJtYSUy MFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWBHGZpcm1h ZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwga4GA1UdEgSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5l bmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBG aXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWB HGZpcm1hZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMjE4MjFa gQ8yMDA4MTIwMzIxNDgyMVowHQYDVR0OBBYEFDYhVRj4mJs4yAzcSg62x4HKDYvjMB0GCSqGSIb2 fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkqhkiG9w0BAQUFAAOCAQEAgTrZ488/rKBVGX0y1C50 ECmN1xHLt6UJlsttSp7wLGHQc2FDy2NjZ+uDjNiT1VtRRKvgabHloxouN/C8fm+jZXBs/RF9e27i OZ87+gi/nHOpfwhLfT3lCPuyZOSwQAdXDpPMpPs0SF9mI7CmaV6SHeGjd+ZW6HSYZPvJVyNI2YwZ qmqpb5zexf8d/I1hI487/ldLLFaVm97mAiZRuulWM0M/D8P9On7hq2F1Fuk2y6zBOmUUqNbEjiPj n0IWKRpB7eA97sUkh0DdR9zLdOCflOwT9q9bUYRlpd8BgrdCLIfFIFpEXv+lTRZpg4cLk1nR5iZD 0uerSwAf7LUc3/c+Hw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: Certificazione Titolari Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 13:18:21 CET 2001 Valid to: Sun Dec 04 13:48:21 CET 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:BB:4C:8E:92:27:1D:B1:15:C5:D2:DD:3C:DB:50:87:97:5A:33:D5:FD:73:FF:89:94:D1:CB:F2:18:DC:A5:A0:EE:AA:7 1:E9:00:33:71:87:60:BA:56:DE:2D:71:AF:F2:D6:C8:A9:89:33:F7:B1:AE:1D:46:0B:25:52:6F:E9:8E:CD:C6:E1:5D:75:9A:50:87:B1:51:15:B4:62:A8:E8:41:81:1F:A8:FC:54:67:FF:09:CC:F2:03:41:2A:FD:9A:37:C1:1D:46:AA :99:2D:A8:AB:46:08:61:E6:B2:B8:09:16:1D:DB:00:83:A0:D8:CA:62:8E:71:A6:7C:FE:1D:F9:9D:30:DA:CD:D6:CB:F9:D9:BC:77:D8:7A:52:69:BC:29:F8:0B:49:E1:35:54:08:58:9D:9D:35:65:39:88:3C:A8:6E:49:06:6E:24:D 5:F3:33:16:AA:75:96:6B:A4:97:26:01:38:80:01:C5:E5:24:24:F6:F6:85:BF:9A:C2:4C:73:B8:B0:0F:BD:7A:CD:FC:BC:9A:06:B8:A1:E3:F6:F7:29:E7:EA:03:44:B5:68:06:E7:48:AC:C8:29:C0:1C:47:B4:CD:3C:AD:3F:2E:39:4 5:41:41:27:47:37:4C:12:D1:05:AF:10:21:D7:B4:45:C1:0B:DA:79:A7:1E:05:EC:D1:AC:A4:47:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata ITALIA (ITALY) - Trusted List ID: ID100001 Page 278 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?certificateRevocationList Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate [email protected] Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate Subject Key Identifier 36:21:55:18:F8:98:9B:38:C8:0C:DC:4A:0E:B6:C7:81:CA:0D:8B:E3 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 00:5E:AF:93:62:F6:25:48:79:44:EF:4C:4A:04:A7:E0:22:9F:FD:0F:6C:FC:9C:8C:7E:5D:9A:E0:94: 12:BB:04 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2004-12-30T23:02:02Z 18.1.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] OU=Certificazione Titolari,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities X509SubjectName Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 279 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1006344018 -----BEGIN CERTIFICATE----MIIGRTCCBS2gAwIBAgIEO/uXUjANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx IDAeBgNVBAsTF0NlcnRpZmljYXppb25lIFRpdG9sYXJpMB4XDTAxMTIwNDEyMTgyMVoXDTExMTIw NDEyNDgyMVowbzELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkVuZWwuaXQgUy5wLkEuMSUwIwYDVQQL ExxTZXJ2aXppIGRpIEZpcm1hIFF1YWxpZmljYXRhMSAwHgYDVQQLExdDZXJ0aWZpY2F6aW9uZSBU aXRvbGFyaTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtMjpInHbEVxdLdPNtQh5da M9X9c/+JlNHL8hjcpaDuqnHpADNxh2C6Vt4tca/y1sipiTP3sa4dRgslUm/pjs3G4V11mlCHsVEV tGKo6EGBH6j8VGf/CczyA0Eq/Zo3wR1GqpktqKtGCGHmsrgJFh3bAIOg2MpijnGmfP4d+Z0w2s3W y/nZvHfYelJpvCn4C0nhNVQIWJ2dNWU5iDyobkkGbiTV8zMWqnWWa6SXJgE4gAHF5SQk9vaFv5rC THO4sA+9es38vJoGuKHj9vcp5+oDRLVoBudIrMgpwBxHtM08rT8uOUVBQSdHN0wS0QWvECHXtEXB C9p5px4F7NGspEcCAwEAAaOCAucwggLjMBIGA1UdEwEB/wQIMAYBAQECAQEwSAYDVR0gBEEwPzA9 BgYrTBcBAQEwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5lbmVsaXQuaXQvZmlybWFxdWFsaWZp Y2F0YTAOBgNVHQ8BAf8EBAMCAQYwgaUGA1UdHwSBnTCBmjCBl6CBlKCBkYaBjmxkYXA6Ly9yZWdp c3Ryby5lbmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIw ZGklMjBGaXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NlcnRpZmlj YXRlUmV2b2NhdGlvbkxpc3Qwga4GA1UdEQSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5lbmVsaXQu aXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBGaXJtYSUy MFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWBHGZpcm1h ZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwga4GA1UdEgSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5l bmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBG aXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWB HGZpcm1hZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMjE4MjFa gQ8yMDA4MTIwMzIxNDgyMVowHQYDVR0OBBYEFDYhVRj4mJs4yAzcSg62x4HKDYvjMB0GCSqGSIb2 fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkqhkiG9w0BAQUFAAOCAQEAgTrZ488/rKBVGX0y1C50 ECmN1xHLt6UJlsttSp7wLGHQc2FDy2NjZ+uDjNiT1VtRRKvgabHloxouN/C8fm+jZXBs/RF9e27i OZ87+gi/nHOpfwhLfT3lCPuyZOSwQAdXDpPMpPs0SF9mI7CmaV6SHeGjd+ZW6HSYZPvJVyNI2YwZ qmqpb5zexf8d/I1hI487/ldLLFaVm97mAiZRuulWM0M/D8P9On7hq2F1Fuk2y6zBOmUUqNbEjiPj n0IWKRpB7eA97sUkh0DdR9zLdOCflOwT9q9bUYRlpd8BgrdCLIfFIFpEXv+lTRZpg4cLk1nR5iZD 0uerSwAf7LUc3/c+Hw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: Certificazione Titolari Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 13:18:21 CET 2001 Valid to: Sun Dec 04 13:48:21 CET 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:BB:4C:8E:92:27:1D:B1:15:C5:D2:DD:3C:DB:50:87:97:5A:33:D5:FD:73:FF:89:94:D1:CB:F2:18:DC:A5:A0:EE:AA:7 1:E9:00:33:71:87:60:BA:56:DE:2D:71:AF:F2:D6:C8:A9:89:33:F7:B1:AE:1D:46:0B:25:52:6F:E9:8E:CD:C6:E1:5D:75:9A:50:87:B1:51:15:B4:62:A8:E8:41:81:1F:A8:FC:54:67:FF:09:CC:F2:03:41:2A:FD:9A:37:C1:1D:46:AA :99:2D:A8:AB:46:08:61:E6:B2:B8:09:16:1D:DB:00:83:A0:D8:CA:62:8E:71:A6:7C:FE:1D:F9:9D:30:DA:CD:D6:CB:F9:D9:BC:77:D8:7A:52:69:BC:29:F8:0B:49:E1:35:54:08:58:9D:9D:35:65:39:88:3C:A8:6E:49:06:6E:24:D 5:F3:33:16:AA:75:96:6B:A4:97:26:01:38:80:01:C5:E5:24:24:F6:F6:85:BF:9A:C2:4C:73:B8:B0:0F:BD:7A:CD:FC:BC:9A:06:B8:A1:E3:F6:F7:29:E7:EA:03:44:B5:68:06:E7:48:AC:C8:29:C0:1C:47:B4:CD:3C:AD:3F:2E:39:4 5:41:41:27:47:37:4C:12:D1:05:AF:10:21:D7:B4:45:C1:0B:DA:79:A7:1E:05:EC:D1:AC:A4:47:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?certificateRevocationList Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate [email protected] Issuer Alternative Name ITALIA (ITALY) - Trusted List ID: ID100001 ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate Page 280 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Key Identifier 36:21:55:18:F8:98:9B:38:C8:0C:DC:4A:0E:B6:C7:81:CA:0D:8B:E3 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 00:5E:AF:93:62:F6:25:48:79:44:EF:4C:4A:04:A7:E0:22:9F:FD:0F:6C:FC:9C:8C:7E:5D:9A:E0:94: 12:BB:04 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2004-12-30T23:01:02Z 18.1.2 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] OU=Certificazione Titolari,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities X509SubjectName Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1006344018 X509 Certificate -----BEGIN CERTIFICATE----MIIGRTCCBS2gAwIBAgIEO/uXUjANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx IDAeBgNVBAsTF0NlcnRpZmljYXppb25lIFRpdG9sYXJpMB4XDTAxMTIwNDEyMTgyMVoXDTExMTIw NDEyNDgyMVowbzELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkVuZWwuaXQgUy5wLkEuMSUwIwYDVQQL ExxTZXJ2aXppIGRpIEZpcm1hIFF1YWxpZmljYXRhMSAwHgYDVQQLExdDZXJ0aWZpY2F6aW9uZSBU aXRvbGFyaTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtMjpInHbEVxdLdPNtQh5da M9X9c/+JlNHL8hjcpaDuqnHpADNxh2C6Vt4tca/y1sipiTP3sa4dRgslUm/pjs3G4V11mlCHsVEV tGKo6EGBH6j8VGf/CczyA0Eq/Zo3wR1GqpktqKtGCGHmsrgJFh3bAIOg2MpijnGmfP4d+Z0w2s3W y/nZvHfYelJpvCn4C0nhNVQIWJ2dNWU5iDyobkkGbiTV8zMWqnWWa6SXJgE4gAHF5SQk9vaFv5rC THO4sA+9es38vJoGuKHj9vcp5+oDRLVoBudIrMgpwBxHtM08rT8uOUVBQSdHN0wS0QWvECHXtEXB C9p5px4F7NGspEcCAwEAAaOCAucwggLjMBIGA1UdEwEB/wQIMAYBAQECAQEwSAYDVR0gBEEwPzA9 BgYrTBcBAQEwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5lbmVsaXQuaXQvZmlybWFxdWFsaWZp Y2F0YTAOBgNVHQ8BAf8EBAMCAQYwgaUGA1UdHwSBnTCBmjCBl6CBlKCBkYaBjmxkYXA6Ly9yZWdp c3Ryby5lbmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIw ZGklMjBGaXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NlcnRpZmlj YXRlUmV2b2NhdGlvbkxpc3Qwga4GA1UdEQSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5lbmVsaXQu aXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBGaXJtYSUy MFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWBHGZpcm1h ZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwga4GA1UdEgSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5l bmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBG aXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWB HGZpcm1hZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMjE4MjFa gQ8yMDA4MTIwMzIxNDgyMVowHQYDVR0OBBYEFDYhVRj4mJs4yAzcSg62x4HKDYvjMB0GCSqGSIb2 fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkqhkiG9w0BAQUFAAOCAQEAgTrZ488/rKBVGX0y1C50 ECmN1xHLt6UJlsttSp7wLGHQc2FDy2NjZ+uDjNiT1VtRRKvgabHloxouN/C8fm+jZXBs/RF9e27i OZ87+gi/nHOpfwhLfT3lCPuyZOSwQAdXDpPMpPs0SF9mI7CmaV6SHeGjd+ZW6HSYZPvJVyNI2YwZ qmqpb5zexf8d/I1hI487/ldLLFaVm97mAiZRuulWM0M/D8P9On7hq2F1Fuk2y6zBOmUUqNbEjiPj n0IWKRpB7eA97sUkh0DdR9zLdOCflOwT9q9bUYRlpd8BgrdCLIfFIFpEXv+lTRZpg4cLk1nR5iZD 0uerSwAf7LUc3/c+Hw== -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 281 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer OU: Certificazione Titolari Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 13:18:21 CET 2001 Valid to: Sun Dec 04 13:48:21 CET 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:BB:4C:8E:92:27:1D:B1:15:C5:D2:DD:3C:DB:50:87:97:5A:33:D5:FD:73:FF:89:94:D1:CB:F2:18:DC:A5:A0:EE:AA:7 1:E9:00:33:71:87:60:BA:56:DE:2D:71:AF:F2:D6:C8:A9:89:33:F7:B1:AE:1D:46:0B:25:52:6F:E9:8E:CD:C6:E1:5D:75:9A:50:87:B1:51:15:B4:62:A8:E8:41:81:1F:A8:FC:54:67:FF:09:CC:F2:03:41:2A:FD:9A:37:C1:1D:46:AA :99:2D:A8:AB:46:08:61:E6:B2:B8:09:16:1D:DB:00:83:A0:D8:CA:62:8E:71:A6:7C:FE:1D:F9:9D:30:DA:CD:D6:CB:F9:D9:BC:77:D8:7A:52:69:BC:29:F8:0B:49:E1:35:54:08:58:9D:9D:35:65:39:88:3C:A8:6E:49:06:6E:24:D 5:F3:33:16:AA:75:96:6B:A4:97:26:01:38:80:01:C5:E5:24:24:F6:F6:85:BF:9A:C2:4C:73:B8:B0:0F:BD:7A:CD:FC:BC:9A:06:B8:A1:E3:F6:F7:29:E7:EA:03:44:B5:68:06:E7:48:AC:C8:29:C0:1C:47:B4:CD:3C:AD:3F:2E:39:4 5:41:41:27:47:37:4C:12:D1:05:AF:10:21:D7:B4:45:C1:0B:DA:79:A7:1E:05:EC:D1:AC:A4:47:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?certificateRevocationList Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate [email protected] Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate Subject Key Identifier 36:21:55:18:F8:98:9B:38:C8:0C:DC:4A:0E:B6:C7:81:CA:0D:8B:E3 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 00:5E:AF:93:62:F6:25:48:79:44:EF:4C:4A:04:A7:E0:22:9F:FD:0F:6C:FC:9C:8C:7E:5D:9A:E0:94: 12:BB:04 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2004-12-30T23:00:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 282 ETSI 2014 - TSL HR - PDF/A-1b generator 18.1.3 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] OU=Certificazione Titolari,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities X509SubjectName Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1006344018 X509 Certificate -----BEGIN CERTIFICATE----MIIGRTCCBS2gAwIBAgIEO/uXUjANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx IDAeBgNVBAsTF0NlcnRpZmljYXppb25lIFRpdG9sYXJpMB4XDTAxMTIwNDEyMTgyMVoXDTExMTIw NDEyNDgyMVowbzELMAkGA1UEBhMCSVQxFzAVBgNVBAoTDkVuZWwuaXQgUy5wLkEuMSUwIwYDVQQL ExxTZXJ2aXppIGRpIEZpcm1hIFF1YWxpZmljYXRhMSAwHgYDVQQLExdDZXJ0aWZpY2F6aW9uZSBU aXRvbGFyaTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtMjpInHbEVxdLdPNtQh5da M9X9c/+JlNHL8hjcpaDuqnHpADNxh2C6Vt4tca/y1sipiTP3sa4dRgslUm/pjs3G4V11mlCHsVEV tGKo6EGBH6j8VGf/CczyA0Eq/Zo3wR1GqpktqKtGCGHmsrgJFh3bAIOg2MpijnGmfP4d+Z0w2s3W y/nZvHfYelJpvCn4C0nhNVQIWJ2dNWU5iDyobkkGbiTV8zMWqnWWa6SXJgE4gAHF5SQk9vaFv5rC THO4sA+9es38vJoGuKHj9vcp5+oDRLVoBudIrMgpwBxHtM08rT8uOUVBQSdHN0wS0QWvECHXtEXB C9p5px4F7NGspEcCAwEAAaOCAucwggLjMBIGA1UdEwEB/wQIMAYBAQECAQEwSAYDVR0gBEEwPzA9 BgYrTBcBAQEwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5lbmVsaXQuaXQvZmlybWFxdWFsaWZp Y2F0YTAOBgNVHQ8BAf8EBAMCAQYwgaUGA1UdHwSBnTCBmjCBl6CBlKCBkYaBjmxkYXA6Ly9yZWdp c3Ryby5lbmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIw ZGklMjBGaXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NlcnRpZmlj YXRlUmV2b2NhdGlvbkxpc3Qwga4GA1UdEQSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5lbmVsaXQu aXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBGaXJtYSUy MFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWBHGZpcm1h ZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwga4GA1UdEgSBpjCBo4aBgmxkYXA6Ly9yZWdpc3Ryby5l bmVsaXQuaXQvb3U9Q2VydGlmaWNhemlvbmUlMjBUaXRvbGFyaSxvdT1TZXJ2aXppJTIwZGklMjBG aXJtYSUyMFF1YWxpZmljYXRhLG89RW5lbC5pdCUyMFMucC5BLixjPUlUP2NhQ2VydGlmaWNhdGWB HGZpcm1hZGlnaXRhbGUuZW5lbGl0QGVuZWwuaXQwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMjE4MjFa gQ8yMDA4MTIwMzIxNDgyMVowHQYDVR0OBBYEFDYhVRj4mJs4yAzcSg62x4HKDYvjMB0GCSqGSIb2 fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkqhkiG9w0BAQUFAAOCAQEAgTrZ488/rKBVGX0y1C50 ECmN1xHLt6UJlsttSp7wLGHQc2FDy2NjZ+uDjNiT1VtRRKvgabHloxouN/C8fm+jZXBs/RF9e27i OZ87+gi/nHOpfwhLfT3lCPuyZOSwQAdXDpPMpPs0SF9mI7CmaV6SHeGjd+ZW6HSYZPvJVyNI2YwZ qmqpb5zexf8d/I1hI487/ldLLFaVm97mAiZRuulWM0M/D8P9On7hq2F1Fuk2y6zBOmUUqNbEjiPj n0IWKRpB7eA97sUkh0DdR9zLdOCflOwT9q9bUYRlpd8BgrdCLIfFIFpEXv+lTRZpg4cLk1nR5iZD 0uerSwAf7LUc3/c+Hw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: Certificazione Titolari Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione Titolari Subject OU: Servizi di Firma Qualificata ITALIA (ITALY) - Trusted List ID: ID100001 Page 283 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 13:18:21 CET 2001 Valid to: Sun Dec 04 13:48:21 CET 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:BB:4C:8E:92:27:1D:B1:15:C5:D2:DD:3C:DB:50:87:97:5A:33:D5:FD:73:FF:89:94:D1:CB:F2:18:DC:A5:A0:EE:AA:7 1:E9:00:33:71:87:60:BA:56:DE:2D:71:AF:F2:D6:C8:A9:89:33:F7:B1:AE:1D:46:0B:25:52:6F:E9:8E:CD:C6:E1:5D:75:9A:50:87:B1:51:15:B4:62:A8:E8:41:81:1F:A8:FC:54:67:FF:09:CC:F2:03:41:2A:FD:9A:37:C1:1D:46:AA :99:2D:A8:AB:46:08:61:E6:B2:B8:09:16:1D:DB:00:83:A0:D8:CA:62:8E:71:A6:7C:FE:1D:F9:9D:30:DA:CD:D6:CB:F9:D9:BC:77:D8:7A:52:69:BC:29:F8:0B:49:E1:35:54:08:58:9D:9D:35:65:39:88:3C:A8:6E:49:06:6E:24:D 5:F3:33:16:AA:75:96:6B:A4:97:26:01:38:80:01:C5:E5:24:24:F6:F6:85:BF:9A:C2:4C:73:B8:B0:0F:BD:7A:CD:FC:BC:9A:06:B8:A1:E3:F6:F7:29:E7:EA:03:44:B5:68:06:E7:48:AC:C8:29:C0:1C:47:B4:CD:3C:AD:3F:2E:39:4 5:41:41:27:47:37:4C:12:D1:05:AF:10:21:D7:B4:45:C1:0B:DA:79:A7:1E:05:EC:D1:AC:A4:47:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?certificateRevocationList Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate [email protected] Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20Titolari,ou=Servizi%20di%20Firma%20Qualificata,o= Enel.it%20S.p.A.,c=IT?caCertificate Subject Key Identifier 36:21:55:18:F8:98:9B:38:C8:0C:DC:4A:0E:B6:C7:81:CA:0D:8B:E3 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 00:5E:AF:93:62:F6:25:48:79:44:EF:4C:4A:04:A7:E0:22:9F:FD:0F:6C:FC:9C:8C:7E:5D:9A:E0:94: 12:BB:04 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-12-31T13:18:21Z 18.2 - Service (supervisionceased): OU=Certificazione TSA,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 284 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] OU=Certificazione TSA,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 1006352448 X509 Certificate -----BEGIN CERTIFICATE----MIIGKjCCBRKgAwIBAgIEO/u4QDANBgkqhkiG9w0BAQUFADBqMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx GzAZBgNVBAsTEkNlcnRpZmljYXppb25lIFRTQTAeFw0wMTEyMDQxMDU0MzFaFw0xMTEyMDQxMTI0 MzFaMGoxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5FbmVsLml0IFMucC5BLjElMCMGA1UECxMcU2Vy dml6aSBkaSBGaXJtYSBRdWFsaWZpY2F0YTEbMBkGA1UECxMSQ2VydGlmaWNhemlvbmUgVFNBMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmbfseNmhAWp3hX7jpeUnDBHOGvcPwXATG2D xPxLw956hHd2TxeunOeocFFlC9C7kicX+Stks7H9tR6noDe58/5b6gsZiUgQbWU3uRQxgCXuSLjQ gLRiPPJUBJTh2BvljIF7mGDzzGYK+QbWbwXDEsBgHarH7NbW9EjhOFXU90gMALuxa9Di1cO+fSKH noeXNt/xIb6gtuXfdQfi/r2DcudA2iRA0u7DXaMutzBFzfh4vQsg3Wpr007CqlhBTO9xNspOIc5C odGdpUk9i0N9eZfPSC8Om0EAnKfXICJL0YpjY7qX+e+IkPHa2XAKX5SWeAHmWB6Wb3koeey4b8L2 KwIDAQABo4IC1jCCAtIwEgYDVR0TAQH/BAgwBgEBAQIBADBIBgNVHSAEQTA/MD0GBitMFwEBATAz MDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3LmVuZWxpdC5pdC9maXJtYXF1YWxpZmljYXRhMIGgBgNV HR8EgZgwgZUwgZKggY+ggYyGgYlsZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmlj YXppb25lJTIwVFNBLG91PVNlcnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVs Lml0JTIwUy5wLkEuLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCBqAYDVR0SBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDCBqAYDVR0RBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDAOBgNVHQ8BAf8EBAMC AQYwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMDU0MzFagQ8yMDA4MTIwMzIwMjQzMVowHQYDVR0OBBYE FEzqALrCl5BAOteSftgns+q3y2aGMB0GCSqGSIb2fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkq hkiG9w0BAQUFAAOCAQEAVwYivpLm4wEVx3SObRlbx9LEcFQsOsvN0HY1BS/sEvM4XjFTdaUclRtb M1GilmTMu2bA/0gbAXAOBk8byVG/2qZwEl51IrXI3JTpZ84w6kzfi2qo6jkJjWtCyZIBxuhtOj17 AhXaFvf9NVBEZccmJoGfTUPs0NsB2cHHh3kyhUuvf1S95iH0TLm22XB+ZiLH32ckOnlErVVL0eet BgAihnOsRz7xMX4hKYp4t7Ryuecr4A4vEGkMgCVbymwjvnXVwZpqe9G+0d/MX1jjWBo1ZpLJvKWk w854KYHzGz5lKg3jqr0dqaOmduxXUhRRyBP6FLFKdldE+UMnlvXEmeSshw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: Certificazione TSA Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 11:54:31 CET 2001 Valid to: Sun Dec 04 12:24:31 CET 2011 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata ITALIA (ITALY) - Trusted List ID: ID100001 Page 285 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?certificateRevocationList Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate [email protected] Subject Key Identifier 4C:EA:00:BA:C2:97:90:40:3A:D7:92:7E:D8:27:B3:EA:B7:CB:66:86 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6E:56:93:F5:54:1C:8A:CB:AF:9D:0E:75:26:40:F6:45:3D:0B:B0:75:4B:C7:83:C9:FE:48:D2:3F:F3: 20:88:E6 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2004-12-30T23:02:02Z 18.2.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] OU=Certificazione TSA,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities X509SubjectName Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 286 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1006352448 -----BEGIN CERTIFICATE----MIIGKjCCBRKgAwIBAgIEO/u4QDANBgkqhkiG9w0BAQUFADBqMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx GzAZBgNVBAsTEkNlcnRpZmljYXppb25lIFRTQTAeFw0wMTEyMDQxMDU0MzFaFw0xMTEyMDQxMTI0 MzFaMGoxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5FbmVsLml0IFMucC5BLjElMCMGA1UECxMcU2Vy dml6aSBkaSBGaXJtYSBRdWFsaWZpY2F0YTEbMBkGA1UECxMSQ2VydGlmaWNhemlvbmUgVFNBMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmbfseNmhAWp3hX7jpeUnDBHOGvcPwXATG2D xPxLw956hHd2TxeunOeocFFlC9C7kicX+Stks7H9tR6noDe58/5b6gsZiUgQbWU3uRQxgCXuSLjQ gLRiPPJUBJTh2BvljIF7mGDzzGYK+QbWbwXDEsBgHarH7NbW9EjhOFXU90gMALuxa9Di1cO+fSKH noeXNt/xIb6gtuXfdQfi/r2DcudA2iRA0u7DXaMutzBFzfh4vQsg3Wpr007CqlhBTO9xNspOIc5C odGdpUk9i0N9eZfPSC8Om0EAnKfXICJL0YpjY7qX+e+IkPHa2XAKX5SWeAHmWB6Wb3koeey4b8L2 KwIDAQABo4IC1jCCAtIwEgYDVR0TAQH/BAgwBgEBAQIBADBIBgNVHSAEQTA/MD0GBitMFwEBATAz MDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3LmVuZWxpdC5pdC9maXJtYXF1YWxpZmljYXRhMIGgBgNV HR8EgZgwgZUwgZKggY+ggYyGgYlsZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmlj YXppb25lJTIwVFNBLG91PVNlcnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVs Lml0JTIwUy5wLkEuLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCBqAYDVR0SBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDCBqAYDVR0RBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDAOBgNVHQ8BAf8EBAMC AQYwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMDU0MzFagQ8yMDA4MTIwMzIwMjQzMVowHQYDVR0OBBYE FEzqALrCl5BAOteSftgns+q3y2aGMB0GCSqGSIb2fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkq hkiG9w0BAQUFAAOCAQEAVwYivpLm4wEVx3SObRlbx9LEcFQsOsvN0HY1BS/sEvM4XjFTdaUclRtb M1GilmTMu2bA/0gbAXAOBk8byVG/2qZwEl51IrXI3JTpZ84w6kzfi2qo6jkJjWtCyZIBxuhtOj17 AhXaFvf9NVBEZccmJoGfTUPs0NsB2cHHh3kyhUuvf1S95iH0TLm22XB+ZiLH32ckOnlErVVL0eet BgAihnOsRz7xMX4hKYp4t7Ryuecr4A4vEGkMgCVbymwjvnXVwZpqe9G+0d/MX1jjWBo1ZpLJvKWk w854KYHzGz5lKg3jqr0dqaOmduxXUhRRyBP6FLFKdldE+UMnlvXEmeSshw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: Certificazione TSA Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 11:54:31 CET 2001 Valid to: Sun Dec 04 12:24:31 CET 2011 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?certificateRevocationList Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate [email protected] ITALIA (ITALY) - Trusted List ID: ID100001 Page 287 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Key Identifier 4C:EA:00:BA:C2:97:90:40:3A:D7:92:7E:D8:27:B3:EA:B7:CB:66:86 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6E:56:93:F5:54:1C:8A:CB:AF:9D:0E:75:26:40:F6:45:3D:0B:B0:75:4B:C7:83:C9:FE:48:D2:3F:F3: 20:88:E6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2004-12-30T23:01:02Z 18.2.2 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] OU=Certificazione TSA,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities X509SubjectName Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1006352448 X509 Certificate -----BEGIN CERTIFICATE----MIIGKjCCBRKgAwIBAgIEO/u4QDANBgkqhkiG9w0BAQUFADBqMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx GzAZBgNVBAsTEkNlcnRpZmljYXppb25lIFRTQTAeFw0wMTEyMDQxMDU0MzFaFw0xMTEyMDQxMTI0 MzFaMGoxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5FbmVsLml0IFMucC5BLjElMCMGA1UECxMcU2Vy dml6aSBkaSBGaXJtYSBRdWFsaWZpY2F0YTEbMBkGA1UECxMSQ2VydGlmaWNhemlvbmUgVFNBMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmbfseNmhAWp3hX7jpeUnDBHOGvcPwXATG2D xPxLw956hHd2TxeunOeocFFlC9C7kicX+Stks7H9tR6noDe58/5b6gsZiUgQbWU3uRQxgCXuSLjQ gLRiPPJUBJTh2BvljIF7mGDzzGYK+QbWbwXDEsBgHarH7NbW9EjhOFXU90gMALuxa9Di1cO+fSKH noeXNt/xIb6gtuXfdQfi/r2DcudA2iRA0u7DXaMutzBFzfh4vQsg3Wpr007CqlhBTO9xNspOIc5C odGdpUk9i0N9eZfPSC8Om0EAnKfXICJL0YpjY7qX+e+IkPHa2XAKX5SWeAHmWB6Wb3koeey4b8L2 KwIDAQABo4IC1jCCAtIwEgYDVR0TAQH/BAgwBgEBAQIBADBIBgNVHSAEQTA/MD0GBitMFwEBATAz MDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3LmVuZWxpdC5pdC9maXJtYXF1YWxpZmljYXRhMIGgBgNV HR8EgZgwgZUwgZKggY+ggYyGgYlsZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmlj YXppb25lJTIwVFNBLG91PVNlcnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVs Lml0JTIwUy5wLkEuLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCBqAYDVR0SBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDCBqAYDVR0RBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDAOBgNVHQ8BAf8EBAMC AQYwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMDU0MzFagQ8yMDA4MTIwMzIwMjQzMVowHQYDVR0OBBYE FEzqALrCl5BAOteSftgns+q3y2aGMB0GCSqGSIb2fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkq hkiG9w0BAQUFAAOCAQEAVwYivpLm4wEVx3SObRlbx9LEcFQsOsvN0HY1BS/sEvM4XjFTdaUclRtb M1GilmTMu2bA/0gbAXAOBk8byVG/2qZwEl51IrXI3JTpZ84w6kzfi2qo6jkJjWtCyZIBxuhtOj17 AhXaFvf9NVBEZccmJoGfTUPs0NsB2cHHh3kyhUuvf1S95iH0TLm22XB+ZiLH32ckOnlErVVL0eet BgAihnOsRz7xMX4hKYp4t7Ryuecr4A4vEGkMgCVbymwjvnXVwZpqe9G+0d/MX1jjWBo1ZpLJvKWk w854KYHzGz5lKg3jqr0dqaOmduxXUhRRyBP6FLFKdldE+UMnlvXEmeSshw== -----END CERTIFICATE----- ITALIA (ITALY) - Trusted List ID: ID100001 Page 288 ETSI 2014 - TSL HR - PDF/A-1b generator Signature algorithm: SHA1withRSA Issuer OU: Certificazione TSA Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 11:54:31 CET 2001 Valid to: Sun Dec 04 12:24:31 CET 2011 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?certificateRevocationList Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate [email protected] Subject Key Identifier 4C:EA:00:BA:C2:97:90:40:3A:D7:92:7E:D8:27:B3:EA:B7:CB:66:86 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6E:56:93:F5:54:1C:8A:CB:AF:9D:0E:75:26:40:F6:45:3D:0B:B0:75:4B:C7:83:C9:FE:48:D2:3F:F3: 20:88:E6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2004-12-30T23:00:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 289 ETSI 2014 - TSL HR - PDF/A-1b generator 18.2.3 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] OU=Certificazione TSA,OU=Servizi di Firma Qualificata,O=Enel.it S.p.A.,C=IT Service digital identities X509SubjectName Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata Subject O: Enel.it S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1006352448 X509 Certificate -----BEGIN CERTIFICATE----MIIGKjCCBRKgAwIBAgIEO/u4QDANBgkqhkiG9w0BAQUFADBqMQswCQYDVQQGEwJJVDEXMBUGA1UE ChMORW5lbC5pdCBTLnAuQS4xJTAjBgNVBAsTHFNlcnZpemkgZGkgRmlybWEgUXVhbGlmaWNhdGEx GzAZBgNVBAsTEkNlcnRpZmljYXppb25lIFRTQTAeFw0wMTEyMDQxMDU0MzFaFw0xMTEyMDQxMTI0 MzFaMGoxCzAJBgNVBAYTAklUMRcwFQYDVQQKEw5FbmVsLml0IFMucC5BLjElMCMGA1UECxMcU2Vy dml6aSBkaSBGaXJtYSBRdWFsaWZpY2F0YTEbMBkGA1UECxMSQ2VydGlmaWNhemlvbmUgVFNBMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmbfseNmhAWp3hX7jpeUnDBHOGvcPwXATG2D xPxLw956hHd2TxeunOeocFFlC9C7kicX+Stks7H9tR6noDe58/5b6gsZiUgQbWU3uRQxgCXuSLjQ gLRiPPJUBJTh2BvljIF7mGDzzGYK+QbWbwXDEsBgHarH7NbW9EjhOFXU90gMALuxa9Di1cO+fSKH noeXNt/xIb6gtuXfdQfi/r2DcudA2iRA0u7DXaMutzBFzfh4vQsg3Wpr007CqlhBTO9xNspOIc5C odGdpUk9i0N9eZfPSC8Om0EAnKfXICJL0YpjY7qX+e+IkPHa2XAKX5SWeAHmWB6Wb3koeey4b8L2 KwIDAQABo4IC1jCCAtIwEgYDVR0TAQH/BAgwBgEBAQIBADBIBgNVHSAEQTA/MD0GBitMFwEBATAz MDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3LmVuZWxpdC5pdC9maXJtYXF1YWxpZmljYXRhMIGgBgNV HR8EgZgwgZUwgZKggY+ggYyGgYlsZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmlj YXppb25lJTIwVFNBLG91PVNlcnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVs Lml0JTIwUy5wLkEuLGM9SVQ/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCBqAYDVR0SBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDCBqAYDVR0RBIGgMIGd hn1sZGFwOi8vcmVnaXN0cm8uZW5lbGl0Lml0L291PUNlcnRpZmljYXppb25lJTIwVFNBLG91PVNl cnZpemklMjBkaSUyMEZpcm1hJTIwUXVhbGlmaWNhdGEsbz1FbmVsLml0JTIwUy5wLkEuLGM9SVQ/ Y2FDZXJ0aWZpY2F0ZYEcZmlybWFkaWdpdGFsZS5lbmVsaXRAZW5lbC5pdDAOBgNVHQ8BAf8EBAMC AQYwKwYDVR0QBCQwIoAPMjAwMTEyMDQxMDU0MzFagQ8yMDA4MTIwMzIwMjQzMVowHQYDVR0OBBYE FEzqALrCl5BAOteSftgns+q3y2aGMB0GCSqGSIb2fQdBAAQQMA4bCFY1LjA6NC4wAwIEkDANBgkq hkiG9w0BAQUFAAOCAQEAVwYivpLm4wEVx3SObRlbx9LEcFQsOsvN0HY1BS/sEvM4XjFTdaUclRtb M1GilmTMu2bA/0gbAXAOBk8byVG/2qZwEl51IrXI3JTpZ84w6kzfi2qo6jkJjWtCyZIBxuhtOj17 AhXaFvf9NVBEZccmJoGfTUPs0NsB2cHHh3kyhUuvf1S95iH0TLm22XB+ZiLH32ckOnlErVVL0eet BgAihnOsRz7xMX4hKYp4t7Ryuecr4A4vEGkMgCVbymwjvnXVwZpqe9G+0d/MX1jjWBo1ZpLJvKWk w854KYHzGz5lKg3jqr0dqaOmduxXUhRRyBP6FLFKdldE+UMnlvXEmeSshw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer OU: Certificazione TSA Issuer OU: Servizi di Firma Qualificata Issuer O: Enel.it S.p.A. Issuer C: IT Subject OU: Certificazione TSA Subject OU: Servizi di Firma Qualificata ITALIA (ITALY) - Trusted List ID: ID100001 Page 290 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Enel.it S.p.A. Subject C: IT Valid from: Tue Dec 04 11:54:31 CET 2001 Valid to: Sun Dec 04 12:24:31 CET 2011 Public Key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asic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.76.23.1.1.1 CPS pointer: http://www.enelit.it/firmaqualificata CRL Distribution Points ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?certificateRevocationList Issuer Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate Subject Alternative Name ldap://registro.enelit.it/ou=Certificazione%20TSA,ou=Servizi%20di%20Firma%20Qualificata,o=En el.it%20S.p.A.,c=IT?caCertificate [email protected] Subject Key Identifier 4C:EA:00:BA:C2:97:90:40:3A:D7:92:7E:D8:27:B3:EA:B7:CB:66:86 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6E:56:93:F5:54:1C:8A:CB:AF:9D:0E:75:26:40:F6:45:3D:0B:B0:75:4B:C7:83:C9:FE:48:D2:3F:F3: 20:88:E6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-12-04T11:54:31Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 291 ETSI 2014 - TSL HR - PDF/A-1b generator 19 - TSP: Finital S.p.A. TSP Name Name [ en ] Finital S.p.A. Name [ it ] Finital S.p.A. Name [ en ] Finital - Finanziaria Italiana S.p.A. Name [ it ] Finital - Finanziaria Italiana S.p.A. Name [ en ] VATIT-01716110513 Name [ it ] VATIT-01716110513 Street Address [ en ] via benedetto varchi 59 Locality [ en ] arezzo Postal Code [ en ] 52100 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI http://www.digitpa.gov.it/ceased-qcsp URI mailto:[email protected] TSP Information URI URI [ en ] http://www.digitpa.gov.it/ceased-qcsp 19.1 - Service (supervisionceased): CN=Finital CA,OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 292 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=Finital CA,OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 78908007 X509 Certificate -----BEGIN CERTIFICATE----MIIEXzCCA0egAwIBAgIEBLQKZzANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMRMwEQYDVQQDEwpGaW5pdGFsIENBMB4XDTAxMDYyNTA3MzgxNVoXDTExMDYy MzA3MzgxNVowbzELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQHEwZBcmV6em8xFzAV BgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjETMBEGA1UEAxMKRmlu aXRhbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCqD6j9Vx2d4pXK+PRy3prX AvIHboTRXdt18foujg4cZdhc2K/foLeqZu9OPPB4M3OmNk/z371A5n4le/jVvaiev91j8/sVXGl0 CiNLpTDGfOll0nQCvbcRyNPq1gz271RNY9OWIjD8XEEYQzxshi4dEQckqYcZYH9rAFukfHc2FDyY cTBOknASchrWur4tJ3iOJigTPyPgRpNU27S+N2cJ6qVHCaeyhFthXgLoosOLkluqIJpQYVOxGaa7 vyJZFB27AE0hvk58QvtivDGJ32CnoSy69cqNPO6T55yKNSVmqZXmqELwIvLpqEYv1f8JrqztQgRm BjYeFvYnhFaoyxsCAwEAAaOCAQEwgf4wHQYDVR0OBBYEFD0uDVqhKVvGdy+Lxu2Z9kjuUdKcMA4G A1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAfBgNVHRIEGDAW hhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8EBTADAQH/MC4GA1UdHwQnMCUwI6AhoB+G HWh0dHBzOi8vY2EuZmluaXRhbC5pdC9jcmwuZGVyMEoGA1UdIARDMEEwPwYGK0wPAQEBMDUwMwYI KwYBBQUHAgEWJ2h0dHBzOi8vY2EuZmluaXRhbC5pdC9jcHMvY3BzQHNpZ24uaHRtbDANBgkqhkiG 9w0BAQUFAAOCAQEAVA25Sj74Dp46dmwE86aGeGHg+ryJSvlGdoKn1zM32nJQagcuzdab325qZb1R CWcOBvsk29JNnHByCJrXH0QvErUoy2hvvImFaEhQRnu9z8o6KGZmG71/r7ZsddJjJ9tnM2XM4sJj WbDfk9YXPvHPoHhYr4AYS4nTwVdxm5YKZUUku5kxVc6O3HqU8z0qo8EVYS1EliNHWTEjgDmIt7G9 trsj8vzWvShyvjyH+QeJdVjXOWqD4Nft9sJDmwxOWvySImxYNXsE1QtLD43JLLCelhlWbbxZPATl U4aM0jqg5Cyge7qDJ8lb4opFK/4DK3VGjACDwlbOGaz+ZRNOXgurLQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA Issuer OU: CA Division Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jun 25 09:38:15 CEST 2001 Valid to: Thu Jun 23 09:38:15 CEST 2011 Public Key: ITALIA (ITALY) - Trusted List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age 293 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Key Identifier 3D:2E:0D:5A:A1:29:5B:C6:77:2F:8B:C6:ED:99:F6:48:EE:51:D2:9C Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points https://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 36:71:5C:90:02:AC:9C:3D:5B:86:BA:23:B9:7C:84:FC:A1:A4:02:D1:94:6E:7E:69:A9:C7:E0:66:C4 :6A:AC:E0 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. [it] La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. Status Starting Time 2003-12-30T23:02:02Z 19.1.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=Finital CA,OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities X509SubjectName Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR ITALIA (ITALY) - Trusted List ID: ID100001 Page 294 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Certificate fields details Version: 3 Serial Number: 78908007 X509 Certificate -----BEGIN CERTIFICATE----MIIEXzCCA0egAwIBAgIEBLQKZzANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMRMwEQYDVQQDEwpGaW5pdGFsIENBMB4XDTAxMDYyNTA3MzgxNVoXDTExMDYy MzA3MzgxNVowbzELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQHEwZBcmV6em8xFzAV BgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjETMBEGA1UEAxMKRmlu aXRhbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCqD6j9Vx2d4pXK+PRy3prX AvIHboTRXdt18foujg4cZdhc2K/foLeqZu9OPPB4M3OmNk/z371A5n4le/jVvaiev91j8/sVXGl0 CiNLpTDGfOll0nQCvbcRyNPq1gz271RNY9OWIjD8XEEYQzxshi4dEQckqYcZYH9rAFukfHc2FDyY cTBOknASchrWur4tJ3iOJigTPyPgRpNU27S+N2cJ6qVHCaeyhFthXgLoosOLkluqIJpQYVOxGaa7 vyJZFB27AE0hvk58QvtivDGJ32CnoSy69cqNPO6T55yKNSVmqZXmqELwIvLpqEYv1f8JrqztQgRm BjYeFvYnhFaoyxsCAwEAAaOCAQEwgf4wHQYDVR0OBBYEFD0uDVqhKVvGdy+Lxu2Z9kjuUdKcMA4G A1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAfBgNVHRIEGDAW hhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8EBTADAQH/MC4GA1UdHwQnMCUwI6AhoB+G HWh0dHBzOi8vY2EuZmluaXRhbC5pdC9jcmwuZGVyMEoGA1UdIARDMEEwPwYGK0wPAQEBMDUwMwYI KwYBBQUHAgEWJ2h0dHBzOi8vY2EuZmluaXRhbC5pdC9jcHMvY3BzQHNpZ24uaHRtbDANBgkqhkiG 9w0BAQUFAAOCAQEAVA25Sj74Dp46dmwE86aGeGHg+ryJSvlGdoKn1zM32nJQagcuzdab325qZb1R CWcOBvsk29JNnHByCJrXH0QvErUoy2hvvImFaEhQRnu9z8o6KGZmG71/r7ZsddJjJ9tnM2XM4sJj WbDfk9YXPvHPoHhYr4AYS4nTwVdxm5YKZUUku5kxVc6O3HqU8z0qo8EVYS1EliNHWTEjgDmIt7G9 trsj8vzWvShyvjyH+QeJdVjXOWqD4Nft9sJDmwxOWvySImxYNXsE1QtLD43JLLCelhlWbbxZPATl U4aM0jqg5Cyge7qDJ8lb4opFK/4DK3VGjACDwlbOGaz+ZRNOXgurLQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA Issuer OU: CA Division Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jun 25 09:38:15 CEST 2001 Valid to: Thu Jun 23 09:38:15 CEST 2011 Public Key: Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:B0:AA:0F:A8:FD:57:1D:9D:E2:95:CA:F8:F4:72:DE:9A:D7:02:F2:07:6E:84:D1:5D:DB:75:F1:FA:2E:8E:0E:1C:65:D 8:5C:D8:AF:DF:A0:B7:AA:66:EF:4E:3C:F0:78:33:73:A6:36:4F:F3:DF:BD:40:E6:7E:25:7B:F8:D5:BD:A8:9E:BF:DD:63:F3:FB:15:5C:69:74:0A:23:4B:A5:30:C6:7C:E9:65:D2:74:02:BD:B7:11:C8:D3:EA:D6:0C:F6:EF:54:4 D:63:D3:96:22:30:FC:5C:41:18:43:3C:6C:86:2E:1D:11:07:24:A9:87:19:60:7F:6B:00:5B:A4:7C:77:36:14:3C:98:71:30:4E:92:70:12:72:1A:D6:BA:BE:2D:27:78:8E:26:28:13:3F:23:E0:46:93:54:DB:B4:BE:37:67:09:EA:A5:47: 09:A7:B2:84:5B:61:5E:02:E8:A2:C3:8B:92:5B:AA:20:9A:50:61:53:B1:19:A6:BB:BF:22:59:14:1D:BB:00:4D:21:BE:4E:7C:42:FB:62:BC:31:89:DF:60:A7:A1:2C:BA:F5:CA:8D:3C:EE:93:E7:9C:8A:35:25:66:A9:95:E6:A8:42 :F0:22:F2:E9:A8:46:2F:D5:FF:09:AE:AC:ED:42:04:66:06:36:1E:16:F6:27:84:56:A8:CB:1B:02:03:01:00:01 3D:2E:0D:5A:A1:29:5B:C6:77:2F:8B:C6:ED:99:F6:48:EE:51:D2:9C Page 295 ETSI 2014 - TSL HR - PDF/A-1b generator Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points https://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 36:71:5C:90:02:AC:9C:3D:5B:86:BA:23:B9:7C:84:FC:A1:A4:02:D1:94:6E:7E:69:A9:C7:E0:66:C4 :6A:AC:E0 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2003-12-30T23:01:02Z 19.1.2 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=Finital CA,OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities X509SubjectName Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 296 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 78908007 -----BEGIN CERTIFICATE----MIIEXzCCA0egAwIBAgIEBLQKZzANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMRMwEQYDVQQDEwpGaW5pdGFsIENBMB4XDTAxMDYyNTA3MzgxNVoXDTExMDYy MzA3MzgxNVowbzELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQHEwZBcmV6em8xFzAV BgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjETMBEGA1UEAxMKRmlu aXRhbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCqD6j9Vx2d4pXK+PRy3prX AvIHboTRXdt18foujg4cZdhc2K/foLeqZu9OPPB4M3OmNk/z371A5n4le/jVvaiev91j8/sVXGl0 CiNLpTDGfOll0nQCvbcRyNPq1gz271RNY9OWIjD8XEEYQzxshi4dEQckqYcZYH9rAFukfHc2FDyY cTBOknASchrWur4tJ3iOJigTPyPgRpNU27S+N2cJ6qVHCaeyhFthXgLoosOLkluqIJpQYVOxGaa7 vyJZFB27AE0hvk58QvtivDGJ32CnoSy69cqNPO6T55yKNSVmqZXmqELwIvLpqEYv1f8JrqztQgRm BjYeFvYnhFaoyxsCAwEAAaOCAQEwgf4wHQYDVR0OBBYEFD0uDVqhKVvGdy+Lxu2Z9kjuUdKcMA4G A1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAfBgNVHRIEGDAW hhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8EBTADAQH/MC4GA1UdHwQnMCUwI6AhoB+G HWh0dHBzOi8vY2EuZmluaXRhbC5pdC9jcmwuZGVyMEoGA1UdIARDMEEwPwYGK0wPAQEBMDUwMwYI KwYBBQUHAgEWJ2h0dHBzOi8vY2EuZmluaXRhbC5pdC9jcHMvY3BzQHNpZ24uaHRtbDANBgkqhkiG 9w0BAQUFAAOCAQEAVA25Sj74Dp46dmwE86aGeGHg+ryJSvlGdoKn1zM32nJQagcuzdab325qZb1R CWcOBvsk29JNnHByCJrXH0QvErUoy2hvvImFaEhQRnu9z8o6KGZmG71/r7ZsddJjJ9tnM2XM4sJj WbDfk9YXPvHPoHhYr4AYS4nTwVdxm5YKZUUku5kxVc6O3HqU8z0qo8EVYS1EliNHWTEjgDmIt7G9 trsj8vzWvShyvjyH+QeJdVjXOWqD4Nft9sJDmwxOWvySImxYNXsE1QtLD43JLLCelhlWbbxZPATl U4aM0jqg5Cyge7qDJ8lb4opFK/4DK3VGjACDwlbOGaz+ZRNOXgurLQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA Issuer OU: CA Division Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jun 25 09:38:15 CEST 2001 Valid to: Thu Jun 23 09:38:15 CEST 2011 Public Key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ubject Key Identifier 3D:2E:0D:5A:A1:29:5B:C6:77:2F:8B:C6:ED:99:F6:48:EE:51:D2:9C Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true ITALIA (ITALY) - Trusted List ID: ID100001 Page 297 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points https://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 36:71:5C:90:02:AC:9C:3D:5B:86:BA:23:B9:7C:84:FC:A1:A4:02:D1:94:6E:7E:69:A9:C7:E0:66:C4 :6A:AC:E0 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2003-12-30T23:00:00Z 19.1.3 - History instance n.3 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=Finital CA,OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities X509SubjectName Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Certificate fields details Version: 3 Serial Number: 78908007 ITALIA (ITALY) - Trusted List ID: ID100001 Page 298 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIEXzCCA0egAwIBAgIEBLQKZzANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMRMwEQYDVQQDEwpGaW5pdGFsIENBMB4XDTAxMDYyNTA3MzgxNVoXDTExMDYy MzA3MzgxNVowbzELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQHEwZBcmV6em8xFzAV BgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjETMBEGA1UEAxMKRmlu aXRhbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCqD6j9Vx2d4pXK+PRy3prX AvIHboTRXdt18foujg4cZdhc2K/foLeqZu9OPPB4M3OmNk/z371A5n4le/jVvaiev91j8/sVXGl0 CiNLpTDGfOll0nQCvbcRyNPq1gz271RNY9OWIjD8XEEYQzxshi4dEQckqYcZYH9rAFukfHc2FDyY cTBOknASchrWur4tJ3iOJigTPyPgRpNU27S+N2cJ6qVHCaeyhFthXgLoosOLkluqIJpQYVOxGaa7 vyJZFB27AE0hvk58QvtivDGJ32CnoSy69cqNPO6T55yKNSVmqZXmqELwIvLpqEYv1f8JrqztQgRm BjYeFvYnhFaoyxsCAwEAAaOCAQEwgf4wHQYDVR0OBBYEFD0uDVqhKVvGdy+Lxu2Z9kjuUdKcMA4G A1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAfBgNVHRIEGDAW hhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8EBTADAQH/MC4GA1UdHwQnMCUwI6AhoB+G HWh0dHBzOi8vY2EuZmluaXRhbC5pdC9jcmwuZGVyMEoGA1UdIARDMEEwPwYGK0wPAQEBMDUwMwYI KwYBBQUHAgEWJ2h0dHBzOi8vY2EuZmluaXRhbC5pdC9jcHMvY3BzQHNpZ24uaHRtbDANBgkqhkiG 9w0BAQUFAAOCAQEAVA25Sj74Dp46dmwE86aGeGHg+ryJSvlGdoKn1zM32nJQagcuzdab325qZb1R CWcOBvsk29JNnHByCJrXH0QvErUoy2hvvImFaEhQRnu9z8o6KGZmG71/r7ZsddJjJ9tnM2XM4sJj WbDfk9YXPvHPoHhYr4AYS4nTwVdxm5YKZUUku5kxVc6O3HqU8z0qo8EVYS1EliNHWTEjgDmIt7G9 trsj8vzWvShyvjyH+QeJdVjXOWqD4Nft9sJDmwxOWvySImxYNXsE1QtLD43JLLCelhlWbbxZPATl U4aM0jqg5Cyge7qDJ8lb4opFK/4DK3VGjACDwlbOGaz+ZRNOXgurLQ== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA Issuer OU: CA Division Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jun 25 09:38:15 CEST 2001 Valid to: Thu Jun 23 09:38:15 CEST 2011 Public Key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ubject Key Identifier 3D:2E:0D:5A:A1:29:5B:C6:77:2F:8B:C6:ED:99:F6:48:EE:51:D2:9C Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points https://ca.finital.it/crl.der ITALIA (ITALY) - Trusted List ID: ID100001 Page 299 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 36:71:5C:90:02:AC:9C:3D:5B:86:BA:23:B9:7C:84:FC:A1:A4:02:D1:94:6E:7E:69:A9:C7:E0:66:C4 :6A:AC:E0 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-06-25T09:38:15Z 19.2 - Service (supervisionceased): CN=Finital CA (timestamp),OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=Finital CA (timestamp),OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 79542095 X509 Certificate -----BEGIN CERTIFICATE----MIIEdjCCA16gAwIBAgIEBL23TzANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMR8wHQYDVQQDExZGaW5pdGFsIENBICh0aW1lc3RhbXApMB4XDTAxMDcwMjE1 NDYyM1oXDTExMDYzMDE1NDYyM1owezELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQH EwZBcmV6em8xFzAVBgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjEf MB0GA1UEAxMWRmluaXRhbCBDQSAodGltZXN0YW1wKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOtqkjUoNpqcvJttmJAx/o2mUs92CvW1KZuFj7/uz0weBBkLQ8YSwmZ+rzAwfckmTM5Q tzChhfhTJEYOz4V0H9ZiseXz+dd8JPXGWNAfvsZkh4UjOtgh0ccZAM6GXaStBKt97thKxYo3wUWo q+EPUrIu/gaeYuofGQxdqHpUW1lr7KAcM7/zHLoUx2SoODfA4o6fwfocBP6ZDFpxFbHVA+qU1+zP Keme0+e/7Eugx+atO3Vrb9AGnkyEE6NTxP3GQRyNIKmeLO0yVo0V3QA2uJdRRhBrcCnrd494vckR urak6jXB29HgmI9Znji27OLvla2ghdhj/dr+AOB5RV0FubECAwEAAaOCAQAwgf0wHQYDVR0OBBYE FPL8oXjB7XlOXCEAe95MaCyEfy2XMA4GA1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8v Y2EuZmluaXRhbC5pdDAfBgNVHRIEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8E BTADAQH/MC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9jYS5maW5pdGFsLml0L2NybC5kZXIwSgYD VR0gBEMwQTA/BgYrTA8BAQEwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9jYS5maW5pdGFsLml0L2Nw cy9jcHNAc2lnbi5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQB5bhoThmDuCl/7oxCFr+NjxSaVtQvw 7oymfB83NXwEft0FUT9kKPsDEMl/dK0+LxBGstyqEaJ0MjDACDSe3qaN9CRYcnMxGB4Iif4xjN4g zj1sLSKO8WrwDe3qM3d/LqgxNzVlsT9GIVfxGizlBO22fDQMqW+vZmkZnbX0NCiObQbaJ0XnRGl8 i+rrVIRe9FzBnMZyqGfMGZGcyWOW6gEt2v4sb/QcxlkEkaG/E9OZorf4d1nDWjjecizg5gbLZdpT GkrldmcbSCQblj36Dm0vaBtDzL6g7bcBFt3Cwrsx3u6L53BDU1tUxoiLQjQjemqWfEfvHillden6 DXivlXNe -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA (timestamp) Issuer OU: CA Division ITALIA (ITALY) - Trusted List ID: ID100001 Page 300 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA (timestamp) Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jul 02 17:46:23 CEST 2001 Valid to: Thu Jun 30 17:46:23 CEST 2011 Public Key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ubject Key Identifier F2:FC:A1:78:C1:ED:79:4E:5C:21:00:7B:DE:4C:68:2C:84:7F:2D:97 Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points http://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 86:10:D7:2A:30:2C:63:BF:CB:09:3E:14:E7:D9:D5:15:A1:DD:54:82:E4:2A:93:4A:72:7C:41:2F:95: F0:39:16 Service Status Service status description http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/supervisionceased [en] ITALIA (ITALY) - Trusted List ID: ID100001 The validity of the supervision assessment has lapsed without the service identified in "Service digital identity" being reassessed. The service is currently not under supervision any more from the date of the current status as the service is understood to have ceased operations. Page 301 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Status Starting Time La validità della valutazione di supervisione è scaduta senza che il servizio specificato in "Service digital identity" essere rivalutato. Il servizio non è al momento più sotto controllo dalla data dello stato corrente ed è da interpretare come una cessazione dell'attività. 2003-12-30T23:02:02Z 19.2.1 - History instance n.1 - Status: undersupervision Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=Finital CA (timestamp),OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities X509SubjectName Subject CN: Finital CA (timestamp) Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Certificate fields details Version: 3 Serial Number: 79542095 X509 Certificate -----BEGIN CERTIFICATE----MIIEdjCCA16gAwIBAgIEBL23TzANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMR8wHQYDVQQDExZGaW5pdGFsIENBICh0aW1lc3RhbXApMB4XDTAxMDcwMjE1 NDYyM1oXDTExMDYzMDE1NDYyM1owezELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQH EwZBcmV6em8xFzAVBgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjEf MB0GA1UEAxMWRmluaXRhbCBDQSAodGltZXN0YW1wKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOtqkjUoNpqcvJttmJAx/o2mUs92CvW1KZuFj7/uz0weBBkLQ8YSwmZ+rzAwfckmTM5Q tzChhfhTJEYOz4V0H9ZiseXz+dd8JPXGWNAfvsZkh4UjOtgh0ccZAM6GXaStBKt97thKxYo3wUWo q+EPUrIu/gaeYuofGQxdqHpUW1lr7KAcM7/zHLoUx2SoODfA4o6fwfocBP6ZDFpxFbHVA+qU1+zP Keme0+e/7Eugx+atO3Vrb9AGnkyEE6NTxP3GQRyNIKmeLO0yVo0V3QA2uJdRRhBrcCnrd494vckR urak6jXB29HgmI9Znji27OLvla2ghdhj/dr+AOB5RV0FubECAwEAAaOCAQAwgf0wHQYDVR0OBBYE FPL8oXjB7XlOXCEAe95MaCyEfy2XMA4GA1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8v Y2EuZmluaXRhbC5pdDAfBgNVHRIEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8E BTADAQH/MC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9jYS5maW5pdGFsLml0L2NybC5kZXIwSgYD VR0gBEMwQTA/BgYrTA8BAQEwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9jYS5maW5pdGFsLml0L2Nw cy9jcHNAc2lnbi5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQB5bhoThmDuCl/7oxCFr+NjxSaVtQvw 7oymfB83NXwEft0FUT9kKPsDEMl/dK0+LxBGstyqEaJ0MjDACDSe3qaN9CRYcnMxGB4Iif4xjN4g zj1sLSKO8WrwDe3qM3d/LqgxNzVlsT9GIVfxGizlBO22fDQMqW+vZmkZnbX0NCiObQbaJ0XnRGl8 i+rrVIRe9FzBnMZyqGfMGZGcyWOW6gEt2v4sb/QcxlkEkaG/E9OZorf4d1nDWjjecizg5gbLZdpT GkrldmcbSCQblj36Dm0vaBtDzL6g7bcBFt3Cwrsx3u6L53BDU1tUxoiLQjQjemqWfEfvHillden6 DXivlXNe -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA (timestamp) Issuer OU: CA Division ITALIA (ITALY) - Trusted List ID: ID100001 Page 302 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA (timestamp) Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jul 02 17:46:23 CEST 2001 Valid to: Thu Jun 30 17:46:23 CEST 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:EB:6A:92:35:28:36:9A:9C:BC:9B:6D:98:90:31:FE:8D:A6:52:CF:76:0A:F5:B5:29:9B:85:8F:BF:EE:CF:4C:1E:04:19:0 B:43:C6:12:C2:66:7E:AF:30:30:7D:C9:26:4C:CE:50:B7:30:A1:85:F8:53:24:46:0E:CF:85:74:1F:D6:62:B1:E5:F3:F9:D7:7C:24:F5:C6:58:D0:1F:BE:C6:64:87:85:23:3A:D8:21:D1:C7:19:00:CE:86:5D:A4:AD:04:AB:7D:EE:D8 :4A:C5:8A:37:C1:45:A8:AB:E1:0F:52:B2:2E:FE:06:9E:62:EA:1F:19:0C:5D:A8:7A:54:5B:59:6B:EC:A0:1C:33:BF:F3:1C:BA:14:C7:64:A8:38:37:C0:E2:8E:9F:C1:FA:1C:04:FE:99:0C:5A:71:15:B1:D5:03:EA:94:D7:EC:CF:2 9:E9:9E:D3:E7:BF:EC:4B:A0:C7:E6:AD:3B:75:6B:6F:D0:06:9E:4C:84:13:A3:53:C4:FD:C6:41:1C:8D:20:A9:9E:2C:ED:32:56:8D:15:DD:00:36:B8:97:51:46:10:6B:70:29:EB:77:8F:78:BD:C9:11:BA:B6:A4:EA:35:C1:DB:D1 :E0:98:8F:59:9E:38:B6:EC:E2:EF:95:AD:A0:85:D8:63:FD:DA:FE:00:E0:79:45:5D:05:B9:B1:02:03:01:00:01 Subject Key Identifier F2:FC:A1:78:C1:ED:79:4E:5C:21:00:7B:DE:4C:68:2C:84:7F:2D:97 Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points http://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 86:10:D7:2A:30:2C:63:BF:CB:09:3E:14:E7:D9:D5:15:A1:DD:54:82:E4:2A:93:4A:72:7C:41:2F:95: F0:39:16 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Status Starting Time 2003-12-30T23:01:02Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 303 ETSI 2014 - TSL HR - PDF/A-1b generator 19.2.2 - History instance n.2 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=Finital CA (timestamp),OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities X509SubjectName Subject CN: Finital CA (timestamp) Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Certificate fields details Version: 3 Serial Number: 79542095 X509 Certificate -----BEGIN CERTIFICATE----MIIEdjCCA16gAwIBAgIEBL23TzANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMR8wHQYDVQQDExZGaW5pdGFsIENBICh0aW1lc3RhbXApMB4XDTAxMDcwMjE1 NDYyM1oXDTExMDYzMDE1NDYyM1owezELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQH EwZBcmV6em8xFzAVBgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjEf MB0GA1UEAxMWRmluaXRhbCBDQSAodGltZXN0YW1wKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOtqkjUoNpqcvJttmJAx/o2mUs92CvW1KZuFj7/uz0weBBkLQ8YSwmZ+rzAwfckmTM5Q tzChhfhTJEYOz4V0H9ZiseXz+dd8JPXGWNAfvsZkh4UjOtgh0ccZAM6GXaStBKt97thKxYo3wUWo q+EPUrIu/gaeYuofGQxdqHpUW1lr7KAcM7/zHLoUx2SoODfA4o6fwfocBP6ZDFpxFbHVA+qU1+zP Keme0+e/7Eugx+atO3Vrb9AGnkyEE6NTxP3GQRyNIKmeLO0yVo0V3QA2uJdRRhBrcCnrd494vckR urak6jXB29HgmI9Znji27OLvla2ghdhj/dr+AOB5RV0FubECAwEAAaOCAQAwgf0wHQYDVR0OBBYE FPL8oXjB7XlOXCEAe95MaCyEfy2XMA4GA1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8v Y2EuZmluaXRhbC5pdDAfBgNVHRIEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8E BTADAQH/MC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9jYS5maW5pdGFsLml0L2NybC5kZXIwSgYD VR0gBEMwQTA/BgYrTA8BAQEwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9jYS5maW5pdGFsLml0L2Nw cy9jcHNAc2lnbi5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQB5bhoThmDuCl/7oxCFr+NjxSaVtQvw 7oymfB83NXwEft0FUT9kKPsDEMl/dK0+LxBGstyqEaJ0MjDACDSe3qaN9CRYcnMxGB4Iif4xjN4g zj1sLSKO8WrwDe3qM3d/LqgxNzVlsT9GIVfxGizlBO22fDQMqW+vZmkZnbX0NCiObQbaJ0XnRGl8 i+rrVIRe9FzBnMZyqGfMGZGcyWOW6gEt2v4sb/QcxlkEkaG/E9OZorf4d1nDWjjecizg5gbLZdpT GkrldmcbSCQblj36Dm0vaBtDzL6g7bcBFt3Cwrsx3u6L53BDU1tUxoiLQjQjemqWfEfvHillden6 DXivlXNe -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA (timestamp) Issuer OU: CA Division Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR ITALIA (ITALY) - Trusted List ID: ID100001 Page 304 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer C: IT Subject CN: Finital CA (timestamp) Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jul 02 17:46:23 CEST 2001 Valid to: Thu Jun 30 17:46:23 CEST 2011 Public Key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ubject Key Identifier F2:FC:A1:78:C1:ED:79:4E:5C:21:00:7B:DE:4C:68:2C:84:7F:2D:97 Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points http://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 86:10:D7:2A:30:2C:63:BF:CB:09:3E:14:E7:D9:D5:15:A1:DD:54:82:E4:2A:93:4A:72:7C:41:2F:95: F0:39:16 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2003-12-30T23:00:00Z 19.2.3 - History instance n.3 - Status: accredited Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Page 305 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] CN=Finital CA (timestamp),OU=CA Division,O=Finital S.p.A.,L=Arezzo,ST=AR,C=IT Service digital identities X509SubjectName Subject CN: Finital CA (timestamp) Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Certificate fields details Version: 3 Serial Number: 79542095 X509 Certificate -----BEGIN CERTIFICATE----MIIEdjCCA16gAwIBAgIEBL23TzANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJJVDELMAkGA1UE CBMCQVIxDzANBgNVBAcTBkFyZXp6bzEXMBUGA1UEChMORmluaXRhbCBTLnAuQS4xFDASBgNVBAsT C0NBIERpdmlzaW9uMR8wHQYDVQQDExZGaW5pdGFsIENBICh0aW1lc3RhbXApMB4XDTAxMDcwMjE1 NDYyM1oXDTExMDYzMDE1NDYyM1owezELMAkGA1UEBhMCSVQxCzAJBgNVBAgTAkFSMQ8wDQYDVQQH EwZBcmV6em8xFzAVBgNVBAoTDkZpbml0YWwgUy5wLkEuMRQwEgYDVQQLEwtDQSBEaXZpc2lvbjEf MB0GA1UEAxMWRmluaXRhbCBDQSAodGltZXN0YW1wKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOtqkjUoNpqcvJttmJAx/o2mUs92CvW1KZuFj7/uz0weBBkLQ8YSwmZ+rzAwfckmTM5Q tzChhfhTJEYOz4V0H9ZiseXz+dd8JPXGWNAfvsZkh4UjOtgh0ccZAM6GXaStBKt97thKxYo3wUWo q+EPUrIu/gaeYuofGQxdqHpUW1lr7KAcM7/zHLoUx2SoODfA4o6fwfocBP6ZDFpxFbHVA+qU1+zP Keme0+e/7Eugx+atO3Vrb9AGnkyEE6NTxP3GQRyNIKmeLO0yVo0V3QA2uJdRRhBrcCnrd494vckR urak6jXB29HgmI9Znji27OLvla2ghdhj/dr+AOB5RV0FubECAwEAAaOCAQAwgf0wHQYDVR0OBBYE FPL8oXjB7XlOXCEAe95MaCyEfy2XMA4GA1UdDwEB/wQEAwIBBjAfBgNVHREEGDAWhhRodHRwOi8v Y2EuZmluaXRhbC5pdDAfBgNVHRIEGDAWhhRodHRwOi8vY2EuZmluaXRhbC5pdDAPBgNVHRMBAf8E BTADAQH/MC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9jYS5maW5pdGFsLml0L2NybC5kZXIwSgYD VR0gBEMwQTA/BgYrTA8BAQEwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9jYS5maW5pdGFsLml0L2Nw cy9jcHNAc2lnbi5odG1sMA0GCSqGSIb3DQEBBQUAA4IBAQB5bhoThmDuCl/7oxCFr+NjxSaVtQvw 7oymfB83NXwEft0FUT9kKPsDEMl/dK0+LxBGstyqEaJ0MjDACDSe3qaN9CRYcnMxGB4Iif4xjN4g zj1sLSKO8WrwDe3qM3d/LqgxNzVlsT9GIVfxGizlBO22fDQMqW+vZmkZnbX0NCiObQbaJ0XnRGl8 i+rrVIRe9FzBnMZyqGfMGZGcyWOW6gEt2v4sb/QcxlkEkaG/E9OZorf4d1nDWjjecizg5gbLZdpT GkrldmcbSCQblj36Dm0vaBtDzL6g7bcBFt3Cwrsx3u6L53BDU1tUxoiLQjQjemqWfEfvHillden6 DXivlXNe -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Finital CA (timestamp) Issuer OU: CA Division Issuer O: Finital S.p.A. Issuer L: Arezzo Issuer ST: AR Issuer C: IT Subject CN: Finital CA (timestamp) ITALIA (ITALY) - Trusted List ID: ID100001 Page 306 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: CA Division Subject O: Finital S.p.A. Subject L: Arezzo Subject ST: AR Subject C: IT Valid from: Mon Jul 02 17:46:23 CEST 2001 Valid to: Thu Jun 30 17:46:23 CEST 2011 Public Key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ubject Key Identifier F2:FC:A1:78:C1:ED:79:4E:5C:21:00:7B:DE:4C:68:2C:84:7F:2D:97 Subject Alternative Name http://ca.finital.it Issuer Alternative Name http://ca.finital.it Basic Constraints IsCA: true CRL Distribution Points http://ca.finital.it/crl.der Certificate Policies Policy OID: 1.3.76.15.1.1.1 CPS pointer: https://ca.finital.it/cps/[email protected] Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 86:10:D7:2A:30:2C:63:BF:CB:09:3E:14:E7:D9:D5:15:A1:DD:54:82:E4:2A:93:4A:72:7C:41:2F:95: F0:39:16 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-07-02T17:46:23Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 307 ETSI 2014 - TSL HR - PDF/A-1b generator 20 - TSP: Banca Intesa S.p.A. TSP Name Name [ en ] Banca Intesa S.p.A. Name [ it ] Banca Intesa S.p.A. Name [ en ] Banca Intesa Name [ en ] VATIT-10810700152 Street Address [ en ] piazza paolo ferrari 10 Locality [ en ] milano Postal Code [ en ] 20121 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI http://www.bancaintesa.it URI mailto:[email protected] TSP Information URI URI [ en ] http://www.bancaintesa.it 20.1 - Service : CN=Bancaintesa Production Identrus Certification Authority,OU=Bancaintesa Identrus Infrastructure,O=Bancaintesa S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Bancaintesa Production Identrus Certification Authority,OU=Bancaintesa Identrus Infrastructure,O=Bancaintesa S.p.A. Service Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 308 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 225 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAOEwDQYJKoZIhvcNAQEFBQAwgY0xGzAZBgNVBAoTEkJhbmNhaW50ZXNh IFMucC5BLjEsMCoGA1UECxMjQmFuY2FpbnRlc2EgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxQDA+ BgNVBAMTN0JhbmNhaW50ZXNhIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkwHhcNMDQxMTEwMDk0NTU4WhcNMTEwNTA1MjA1NzM3WjCBjTEbMBkGA1UEChMSQmFuY2Fp bnRlc2EgUy5wLkEuMSwwKgYDVQQLEyNCYW5jYWludGVzYSBJZGVudHJ1cyBJbmZyYXN0cnVjdHVy ZTFAMD4GA1UEAxM3QmFuY2FpbnRlc2EgUHJvZHVjdGlvbiBJZGVudHJ1cyBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJtI08J/bsQ8KadPvEGZ k3CW7ZjVpVscmOStPIVC4OS/lEk2US0J/eP+ViVh+2aJ6dU1H9xBpFcALoliKDXzY8mhaNFYDWgc mghcWxCscq9oGySbOoOW1zUPKx7VdQkiFI3c7mbG8Un+ONdm4KGk1NzaQZr3wXjE1qCk3nft7dmp swCENW2d9BTwfSLsPLTqcUypqX+0C/UxtxqYCJok9KRfFDt1ZEAZRsqJU9pcvLrtexHEVDuO2orV kCo8nN9xBBcJIlL+KCBQWDLoBF78bSh0RilV850GkKTAxSv3NZcpQ0dxkhvMJyAVriA6cXFBplxs aFxYqZ5H2BBynpPSN0UCAwEAAaOCAWcwggFjMA8GA1UdEwEB/wQFMAMBAf8wRQYDVR0gBD4wPDA6 BgsrBgEEAYGcVAEBATArMCkGCCsGAQUFBwIBFh1odHRwczovL2NhLmJhbmNhaW50ZXNhLml0L2Nw czAOBgNVHQ8BAf8EBAMCAQYwgdkGA1UdHwSB0TCBzjCBy6CByKCBxYaBwmxkYXA6Ly9sZGFwLmNh LmJhbmNhaW50ZXNhLml0L2NuJTNkQmFuY2FpbnRlc2ElMjBQcm9kdWN0aW9uJTIwSWRlbnRydXMl MjBDZXJ0aWZpY2F0aW9uJTIwQXV0aG9yaXR5LG91JTNkQmFuY2FpbnRlc2ElMjBJZGVudHJ1cyUy MEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYWludGVzYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBTiD2p2boPdGswl9jICjGKVk9VcwDANBgkqhkiG9w0BAQUFAAOC AQEAJyFSkxvKcBp6v8DC4YbpNRhxG0beE5NJgapC0i4gF320gnaRrr2RaExteoY4bgu47nI2gChL 2jd/4OoD/gcMMVZw2tZIqxV+k+1608rPs7ZJpHpjccJh/0VT2gmrGoEpyXEdLnUn6JpXiLBVkcea rJYLgMX5RcLWtrAEodbs9glFUKyksPhWGSnsWst2yHVZtSb3H66BQ/q0YqDe8L0Ndy+M5fkUqw4c 89dsCZwnQC2H2WNbSPHQsQapAXqxKfUKdj84VdCckmhUWfTCehoJ7Ry5P0XXT/jf3ML/78JnXLH0 Dd/JzmkuMWuY4oBAePu1alILJcv8GKZiATe1B8YSPA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Bancaintesa Production Identrus Certification Authority Issuer OU: Bancaintesa Identrus Infrastructure Issuer O: Bancaintesa S.p.A. Subject CN: Bancaintesa Production Identrus Certification Authority Subject OU: Bancaintesa Identrus Infrastructure Subject O: Bancaintesa S.p.A. Valid from: Wed Nov 10 10:45:58 CET 2004 Valid to: Thu May 05 22:57:37 CEST 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:9B:48:D3:C2:7F:6E:C4:3C:29:A7:4F:BC:41:99:93:70:96:ED:98:D5:A5:5B:1C:98:E4:AD:3C:85:42:E0:E4:BF:94:49:3 6:51:2D:09:FD:E3:FE:56:25:61:FB:66:89:E9:D5:35:1F:DC:41:A4:57:00:2E:89:62:28:35:F3:63:C9:A1:68:D1:58:0D:68:1C:9A:08:5C:5B:10:AC:72:AF:68:1B:24:9B:3A:83:96:D7:35:0F:2B:1E:D5:75:09:22:14:8D:DC:EE:66:C 6:F1:49:FE:38:D7:66:E0:A1:A4:D4:DC:DA:41:9A:F7:C1:78:C4:D6:A0:A4:DE:77:ED:ED:D9:A9:B3:00:84:35:6D:9D:F4:14:F0:7D:22:EC:3C:B4:EA:71:4C:A9:A9:7F:B4:0B:F5:31:B7:1A:98:08:9A:24:F4:A4:5F:14:3B:75:64 :40:19:46:CA:89:53:DA:5C:BC:BA:ED:7B:11:C4:54:3B:8E:DA:8A:D5:90:2A:3C:9C:DF:71:04:17:09:22:52:FE:28:20:50:58:32:E8:04:5E:FC:6D:28:74:46:29:55:F3:9D:06:90:A4:C0:C5:2B:F7:35:97:29:43:47:71:92:1B:CC:27 :20:15:AE:20:3A:71:71:41:A6:5C:6C:68:5C:58:A9:9E:47:D8:10:72:9E:93:D2:37:45:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20052.1.1.1 CPS pointer: https://ca.bancaintesa.it/cps CRL Distribution Points ldap://ldap.ca.bancaintesa.it/cn%3dBancaintesa%20Production%20Identrus%20Certification%20Au thority,ou%3dBancaintesa%20Identrus%20Infrastructure,o%3dBancaintesa%20S.p.A.?certificateRe vocationList Subject Key Identifier E2:0F:6A:76:6E:83:DD:1A:CC:25:F6:32:02:8C:62:95:93:D5:5C:C0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 309 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: D6:5A:47:DC:41:E9:85:45:11:8B:3C:96:FE:98:4C:82:C5:56:C6:49:B1:CA:9A:AD:2B:81:F9:78:C0 :42:49:19 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2006-12-27T23:01:01Z 20.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://ca.intesasanpaolo.com Name [ en ] Intesa Sanpaolo Bank S.p.A. Name [ it ] Banca Intesa Sanpaolo S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Scheme Operator Name Scheme Territory IT 20.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=Bancaintesa Production Identrus Certification Authority,OU=Bancaintesa Identrus Infrastructure,O=Bancaintesa S.p.A. Service digital identities X509SubjectName Subject CN: Bancaintesa Production Identrus Certification Authority Subject OU: Bancaintesa Identrus Infrastructure Subject O: Bancaintesa S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 310 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 225 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAOEwDQYJKoZIhvcNAQEFBQAwgY0xGzAZBgNVBAoTEkJhbmNhaW50ZXNh IFMucC5BLjEsMCoGA1UECxMjQmFuY2FpbnRlc2EgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxQDA+ BgNVBAMTN0JhbmNhaW50ZXNhIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkwHhcNMDQxMTEwMDk0NTU4WhcNMTEwNTA1MjA1NzM3WjCBjTEbMBkGA1UEChMSQmFuY2Fp bnRlc2EgUy5wLkEuMSwwKgYDVQQLEyNCYW5jYWludGVzYSBJZGVudHJ1cyBJbmZyYXN0cnVjdHVy ZTFAMD4GA1UEAxM3QmFuY2FpbnRlc2EgUHJvZHVjdGlvbiBJZGVudHJ1cyBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJtI08J/bsQ8KadPvEGZ k3CW7ZjVpVscmOStPIVC4OS/lEk2US0J/eP+ViVh+2aJ6dU1H9xBpFcALoliKDXzY8mhaNFYDWgc mghcWxCscq9oGySbOoOW1zUPKx7VdQkiFI3c7mbG8Un+ONdm4KGk1NzaQZr3wXjE1qCk3nft7dmp swCENW2d9BTwfSLsPLTqcUypqX+0C/UxtxqYCJok9KRfFDt1ZEAZRsqJU9pcvLrtexHEVDuO2orV kCo8nN9xBBcJIlL+KCBQWDLoBF78bSh0RilV850GkKTAxSv3NZcpQ0dxkhvMJyAVriA6cXFBplxs aFxYqZ5H2BBynpPSN0UCAwEAAaOCAWcwggFjMA8GA1UdEwEB/wQFMAMBAf8wRQYDVR0gBD4wPDA6 BgsrBgEEAYGcVAEBATArMCkGCCsGAQUFBwIBFh1odHRwczovL2NhLmJhbmNhaW50ZXNhLml0L2Nw czAOBgNVHQ8BAf8EBAMCAQYwgdkGA1UdHwSB0TCBzjCBy6CByKCBxYaBwmxkYXA6Ly9sZGFwLmNh LmJhbmNhaW50ZXNhLml0L2NuJTNkQmFuY2FpbnRlc2ElMjBQcm9kdWN0aW9uJTIwSWRlbnRydXMl MjBDZXJ0aWZpY2F0aW9uJTIwQXV0aG9yaXR5LG91JTNkQmFuY2FpbnRlc2ElMjBJZGVudHJ1cyUy MEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYWludGVzYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBTiD2p2boPdGswl9jICjGKVk9VcwDANBgkqhkiG9w0BAQUFAAOC AQEAJyFSkxvKcBp6v8DC4YbpNRhxG0beE5NJgapC0i4gF320gnaRrr2RaExteoY4bgu47nI2gChL 2jd/4OoD/gcMMVZw2tZIqxV+k+1608rPs7ZJpHpjccJh/0VT2gmrGoEpyXEdLnUn6JpXiLBVkcea rJYLgMX5RcLWtrAEodbs9glFUKyksPhWGSnsWst2yHVZtSb3H66BQ/q0YqDe8L0Ndy+M5fkUqw4c 89dsCZwnQC2H2WNbSPHQsQapAXqxKfUKdj84VdCckmhUWfTCehoJ7Ry5P0XXT/jf3ML/78JnXLH0 Dd/JzmkuMWuY4oBAePu1alILJcv8GKZiATe1B8YSPA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Bancaintesa Production Identrus Certification Authority Issuer OU: Bancaintesa Identrus Infrastructure Issuer O: Bancaintesa S.p.A. Subject CN: Bancaintesa Production Identrus Certification Authority Subject OU: Bancaintesa Identrus Infrastructure Subject O: Bancaintesa S.p.A. Valid from: Wed Nov 10 10:45:58 CET 2004 Valid to: Thu May 05 22:57:37 CEST 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:9B:48:D3:C2:7F:6E:C4:3C:29:A7:4F:BC:41:99:93:70:96:ED:98:D5:A5:5B:1C:98:E4:AD:3C:85:42:E0:E4:BF:94:49:3 6:51:2D:09:FD:E3:FE:56:25:61:FB:66:89:E9:D5:35:1F:DC:41:A4:57:00:2E:89:62:28:35:F3:63:C9:A1:68:D1:58:0D:68:1C:9A:08:5C:5B:10:AC:72:AF:68:1B:24:9B:3A:83:96:D7:35:0F:2B:1E:D5:75:09:22:14:8D:DC:EE:66:C 6:F1:49:FE:38:D7:66:E0:A1:A4:D4:DC:DA:41:9A:F7:C1:78:C4:D6:A0:A4:DE:77:ED:ED:D9:A9:B3:00:84:35:6D:9D:F4:14:F0:7D:22:EC:3C:B4:EA:71:4C:A9:A9:7F:B4:0B:F5:31:B7:1A:98:08:9A:24:F4:A4:5F:14:3B:75:64 :40:19:46:CA:89:53:DA:5C:BC:BA:ED:7B:11:C4:54:3B:8E:DA:8A:D5:90:2A:3C:9C:DF:71:04:17:09:22:52:FE:28:20:50:58:32:E8:04:5E:FC:6D:28:74:46:29:55:F3:9D:06:90:A4:C0:C5:2B:F7:35:97:29:43:47:71:92:1B:CC:27 :20:15:AE:20:3A:71:71:41:A6:5C:6C:68:5C:58:A9:9E:47:D8:10:72:9E:93:D2:37:45:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20052.1.1.1 CPS pointer: https://ca.bancaintesa.it/cps CRL Distribution Points ldap://ldap.ca.bancaintesa.it/cn%3dBancaintesa%20Production%20Identrus%20Certification%20Au thority,ou%3dBancaintesa%20Identrus%20Infrastructure,o%3dBancaintesa%20S.p.A.?certificateRe vocationList Subject Key Identifier E2:0F:6A:76:6E:83:DD:1A:CC:25:F6:32:02:8C:62:95:93:D5:5C:C0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 311 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: D6:5A:47:DC:41:E9:85:45:11:8B:3C:96:FE:98:4C:82:C5:56:C6:49:B1:CA:9A:AD:2B:81:F9:78:C0 :42:49:19 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2006-12-27T23:00:01Z 20.1.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=Bancaintesa Production Identrus Certification Authority,OU=Bancaintesa Identrus Infrastructure,O=Bancaintesa S.p.A. Service digital identities X509SubjectName Subject CN: Bancaintesa Production Identrus Certification Authority Subject OU: Bancaintesa Identrus Infrastructure Subject O: Bancaintesa S.p.A. Certificate fields details Version: 3 Serial Number: 225 X509 Certificate -----BEGIN CERTIFICATE----MIIFATCCA+mgAwIBAgICAOEwDQYJKoZIhvcNAQEFBQAwgY0xGzAZBgNVBAoTEkJhbmNhaW50ZXNh IFMucC5BLjEsMCoGA1UECxMjQmFuY2FpbnRlc2EgSWRlbnRydXMgSW5mcmFzdHJ1Y3R1cmUxQDA+ BgNVBAMTN0JhbmNhaW50ZXNhIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkwHhcNMDQxMTEwMDk0NTU4WhcNMTEwNTA1MjA1NzM3WjCBjTEbMBkGA1UEChMSQmFuY2Fp bnRlc2EgUy5wLkEuMSwwKgYDVQQLEyNCYW5jYWludGVzYSBJZGVudHJ1cyBJbmZyYXN0cnVjdHVy ZTFAMD4GA1UEAxM3QmFuY2FpbnRlc2EgUHJvZHVjdGlvbiBJZGVudHJ1cyBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJtI08J/bsQ8KadPvEGZ k3CW7ZjVpVscmOStPIVC4OS/lEk2US0J/eP+ViVh+2aJ6dU1H9xBpFcALoliKDXzY8mhaNFYDWgc mghcWxCscq9oGySbOoOW1zUPKx7VdQkiFI3c7mbG8Un+ONdm4KGk1NzaQZr3wXjE1qCk3nft7dmp swCENW2d9BTwfSLsPLTqcUypqX+0C/UxtxqYCJok9KRfFDt1ZEAZRsqJU9pcvLrtexHEVDuO2orV kCo8nN9xBBcJIlL+KCBQWDLoBF78bSh0RilV850GkKTAxSv3NZcpQ0dxkhvMJyAVriA6cXFBplxs aFxYqZ5H2BBynpPSN0UCAwEAAaOCAWcwggFjMA8GA1UdEwEB/wQFMAMBAf8wRQYDVR0gBD4wPDA6 BgsrBgEEAYGcVAEBATArMCkGCCsGAQUFBwIBFh1odHRwczovL2NhLmJhbmNhaW50ZXNhLml0L2Nw czAOBgNVHQ8BAf8EBAMCAQYwgdkGA1UdHwSB0TCBzjCBy6CByKCBxYaBwmxkYXA6Ly9sZGFwLmNh LmJhbmNhaW50ZXNhLml0L2NuJTNkQmFuY2FpbnRlc2ElMjBQcm9kdWN0aW9uJTIwSWRlbnRydXMl MjBDZXJ0aWZpY2F0aW9uJTIwQXV0aG9yaXR5LG91JTNkQmFuY2FpbnRlc2ElMjBJZGVudHJ1cyUy MEluZnJhc3RydWN0dXJlLG8lM2RCYW5jYWludGVzYSUyMFMucC5BLj9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0MB0GA1UdDgQWBBTiD2p2boPdGswl9jICjGKVk9VcwDANBgkqhkiG9w0BAQUFAAOC AQEAJyFSkxvKcBp6v8DC4YbpNRhxG0beE5NJgapC0i4gF320gnaRrr2RaExteoY4bgu47nI2gChL 2jd/4OoD/gcMMVZw2tZIqxV+k+1608rPs7ZJpHpjccJh/0VT2gmrGoEpyXEdLnUn6JpXiLBVkcea rJYLgMX5RcLWtrAEodbs9glFUKyksPhWGSnsWst2yHVZtSb3H66BQ/q0YqDe8L0Ndy+M5fkUqw4c 89dsCZwnQC2H2WNbSPHQsQapAXqxKfUKdj84VdCckmhUWfTCehoJ7Ry5P0XXT/jf3ML/78JnXLH0 Dd/JzmkuMWuY4oBAePu1alILJcv8GKZiATe1B8YSPA== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Bancaintesa Production Identrus Certification Authority Issuer OU: Bancaintesa Identrus Infrastructure Issuer O: Bancaintesa S.p.A. Subject CN: Bancaintesa Production Identrus Certification Authority ITALIA (ITALY) - Trusted List ID: ID100001 Page 312 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: Bancaintesa Identrus Infrastructure Subject O: Bancaintesa S.p.A. Valid from: Wed Nov 10 10:45:58 CET 2004 Valid to: Thu May 05 22:57:37 CEST 2011 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:9B:48:D3:C2:7F:6E:C4:3C:29:A7:4F:BC:41:99:93:70:96:ED:98:D5:A5:5B:1C:98:E4:AD:3C:85:42:E0:E4:BF:94:49:3 6:51:2D:09:FD:E3:FE:56:25:61:FB:66:89:E9:D5:35:1F:DC:41:A4:57:00:2E:89:62:28:35:F3:63:C9:A1:68:D1:58:0D:68:1C:9A:08:5C:5B:10:AC:72:AF:68:1B:24:9B:3A:83:96:D7:35:0F:2B:1E:D5:75:09:22:14:8D:DC:EE:66:C 6:F1:49:FE:38:D7:66:E0:A1:A4:D4:DC:DA:41:9A:F7:C1:78:C4:D6:A0:A4:DE:77:ED:ED:D9:A9:B3:00:84:35:6D:9D:F4:14:F0:7D:22:EC:3C:B4:EA:71:4C:A9:A9:7F:B4:0B:F5:31:B7:1A:98:08:9A:24:F4:A4:5F:14:3B:75:64 :40:19:46:CA:89:53:DA:5C:BC:BA:ED:7B:11:C4:54:3B:8E:DA:8A:D5:90:2A:3C:9C:DF:71:04:17:09:22:52:FE:28:20:50:58:32:E8:04:5E:FC:6D:28:74:46:29:55:F3:9D:06:90:A4:C0:C5:2B:F7:35:97:29:43:47:71:92:1B:CC:27 :20:15:AE:20:3A:71:71:41:A6:5C:6C:68:5C:58:A9:9E:47:D8:10:72:9E:93:D2:37:45:02:03:01:00:01 Basic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.20052.1.1.1 CPS pointer: https://ca.bancaintesa.it/cps CRL Distribution Points ldap://ldap.ca.bancaintesa.it/cn%3dBancaintesa%20Production%20Identrus%20Certification%20Au thority,ou%3dBancaintesa%20Identrus%20Infrastructure,o%3dBancaintesa%20S.p.A.?certificateRe vocationList Subject Key Identifier E2:0F:6A:76:6E:83:DD:1A:CC:25:F6:32:02:8C:62:95:93:D5:5C:C0 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D6:5A:47:DC:41:E9:85:45:11:8B:3C:96:FE:98:4C:82:C5:56:C6:49:B1:CA:9A:AD:2B:81:F9:78:C0 :42:49:19 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-11-10T10:45:58Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 313 ETSI 2014 - TSL HR - PDF/A-1b generator 21 - TSP: Sanpaolo IMI S.p.A. TSP Name Name [ en ] Sanpaolo IMI S.p.A. Name [ en ] Sanpaolo IMI Name [ en ] VATIT-10810700152 Street Address [ en ] piazza san carlo 156 Locality [ en ] torino Postal Code [ en ] 10126 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI mailto:[email protected] URI https://ca.intesasanpaolo.com/scriptIden0/identrus/portal.jsp TSP Information URI URI [ en ] http://ca.intesasanpaolo.com 21.1 - Service : CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A.,C=IT Service Name Name Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 314 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 300602 X509 Certificate -----BEGIN CERTIFICATE----MIIFbTCCBFWgAwIBAgIDBJY6MA0GCSqGSIb3DQEBBQUAMIGbMQswCQYDVQQGEwJJVDEcMBoGA1UE CgwTU2FucGFvbG8gSU1JIFMucC5BLjEsMCoGA1UECwwjc2FucGFvbG9pbWkgSWRlbnRydXMgSW5m cmFzdHJ1Y3R1cmUxQDA+BgNVBAMMN3NhbnBhb2xvaW1pIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMzI2MDgwODA3WhcNMTMxMjExMjIyNjE0WjCBmzEL MAkGA1UEBhMCSVQxHDAaBgNVBAoME1NhbnBhb2xvIElNSSBTLnAuQS4xLDAqBgNVBAsMI3NhbnBh b2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0dXJlMUAwPgYDVQQDDDdzYW5wYW9sb2ltaSBQcm9k dWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAriwjlXwk/g5CkdhLpSkptZ9CGiPDSDUBScy3iWi7pGR7M3APkk7fLvRv 7QHaNnMcF5hNUs5j8u8TOnxYvV0oVCEpiFSiqVI++O/oS/LiqNQLBvsHxToc9/x8+Gk3v1CJGicH X14pjnkX/cIt7TmqJnCXeEP1a/gT9XVLBkKE2QJDtnG7a/sKbqaoLRJ1qpBwE/v6OlW+Equ8rUj7 8x013Kt6uSbASU9X+cA32Dd5go+r5nXL8+HnmHHE5GzatETIEFov1QNesNz18KMo5EHF4B34C5gh IOhM9ProbJxwkW4/p0Eo+KKCPxMVx1Yc55rYGFPowo4VDIA/On2lhobmlQIDAQABo4IBtjCCAbIw DwYDVR0TAQH/BAUwAwEB/zBFBgNVHSAEPjA8MDoGCysGAQQBgZJWAQEBMCswKQYIKwYBBQUHAgEW HWh0dHA6Ly9jYS5zYW5wYW9sb2ltaS5jb20vY3BzMA4GA1UdDwEB/wQEAwIBBjCCAScGA1UdHwSC AR4wggEaMEKgQKA+hjxodHRwOi8vY3JsLnNhbnBhb2xvaW1pLmNvbS9SZXBvc2l0b3J5L0lkZW5U cnVzdC9TUElNSS9nZXRDUkwwgdOggdCggc2GgcpsZGFwOi8vbGRhcC5zYW5wYW9sb2ltaS5jb20v Y24lM2RzYW5wYW9sb2ltaSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24l MjBBdXRob3JpdHksb3UlM2RzYW5wYW9sb2ltaSUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUs byUzZFNhbnBhb2xvJTIwSU1JJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25M aXN0MB0GA1UdDgQWBBTIbVCpbuUaDSr5RGMEKgXyzLT7DjANBgkqhkiG9w0BAQUFAAOCAQEABtKv dR+XlEqzAK/k9IJerfv9rLWMowh2d5yAgJ8OEBGA+WEHkjrraxu/pyso2MBU4pp3St+An2DdtNmc nLlf7H+n/6F4lqyqXIrpLEMPrLj4R539gDNWuxiluw5oxi+XQGyda3qCa7p/adjZXiGL+XoN+vF4 6eTbz8xvMqd9KTEKubfhMCyhyOmmk3MfGLPq7mLd9xvJd+MhY39ixHWiW4W3JfzDeVcWuqfYc3nC 68MqYA7oLK4U3GO5CGob4PIRVhNKDoiDoDWF/QkICqL9BAlU6xmWt7dSj7DNOQm03/wgEielCSHW hz+G14qykwGOvj4CH8Zemo53E3BE/HK37Q== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: sanpaoloimi Production Identrus Certification Authority Issuer OU: sanpaoloimi Identrus Infrastructure Issuer O: Sanpaolo IMI S.p.A. Issuer C: IT Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Subject C: IT Valid from: Mon Mar 26 10:08:07 CEST 2007 Valid to: Wed Dec 11 23:26:14 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.sanpaoloimi.com/cps CRL Distribution Points http://crl.sanpaoloimi.com/Repository/IdenTrust/SPIMI/getCRL ldap://ldap.sanpaoloimi.com/cn%3dsanpaoloimi%20Production%20Identrus%20Certification%20A uthority,ou%3dsanpaoloimi%20Identrus%20Infrastructure,o%3dSanpaolo%20IMI%20S.p.A.,c%3dI T?certificateRevocationList Subject Key Identifier ITALIA (ITALY) - Trusted List ID: ID100001 C8:6D:50:A9:6E:E5:1A:0D:2A:F9:44:63:04:2A:05:F2:CC:B4:FB:0E Page 315 ETSI 2014 - TSL HR - PDF/A-1b generator Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 92:9A:39:9F:4D:AD:0D:57:A5:DB:22:FD:C5:26:99:05:3B:D8:EC:65:6F:D3:1F:04:47:14:B8:51:80: 23:C0:C6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2007-03-31T22:01:01Z 21.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://ca.intesasanpaolo.com Name [ en ] Intesa Sanpaolo Bank S.p.A. Name [ it ] Banca Intesa Sanpaolo S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Scheme Operator Name Scheme Territory IT 21.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: ITALIA (ITALY) - Trusted List ID: ID100001 sanpaoloimi Production Identrus Certification Authority Page 316 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 300602 X509 Certificate -----BEGIN CERTIFICATE----MIIFbTCCBFWgAwIBAgIDBJY6MA0GCSqGSIb3DQEBBQUAMIGbMQswCQYDVQQGEwJJVDEcMBoGA1UE CgwTU2FucGFvbG8gSU1JIFMucC5BLjEsMCoGA1UECwwjc2FucGFvbG9pbWkgSWRlbnRydXMgSW5m cmFzdHJ1Y3R1cmUxQDA+BgNVBAMMN3NhbnBhb2xvaW1pIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMzI2MDgwODA3WhcNMTMxMjExMjIyNjE0WjCBmzEL MAkGA1UEBhMCSVQxHDAaBgNVBAoME1NhbnBhb2xvIElNSSBTLnAuQS4xLDAqBgNVBAsMI3NhbnBh b2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0dXJlMUAwPgYDVQQDDDdzYW5wYW9sb2ltaSBQcm9k dWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAriwjlXwk/g5CkdhLpSkptZ9CGiPDSDUBScy3iWi7pGR7M3APkk7fLvRv 7QHaNnMcF5hNUs5j8u8TOnxYvV0oVCEpiFSiqVI++O/oS/LiqNQLBvsHxToc9/x8+Gk3v1CJGicH X14pjnkX/cIt7TmqJnCXeEP1a/gT9XVLBkKE2QJDtnG7a/sKbqaoLRJ1qpBwE/v6OlW+Equ8rUj7 8x013Kt6uSbASU9X+cA32Dd5go+r5nXL8+HnmHHE5GzatETIEFov1QNesNz18KMo5EHF4B34C5gh IOhM9ProbJxwkW4/p0Eo+KKCPxMVx1Yc55rYGFPowo4VDIA/On2lhobmlQIDAQABo4IBtjCCAbIw DwYDVR0TAQH/BAUwAwEB/zBFBgNVHSAEPjA8MDoGCysGAQQBgZJWAQEBMCswKQYIKwYBBQUHAgEW HWh0dHA6Ly9jYS5zYW5wYW9sb2ltaS5jb20vY3BzMA4GA1UdDwEB/wQEAwIBBjCCAScGA1UdHwSC AR4wggEaMEKgQKA+hjxodHRwOi8vY3JsLnNhbnBhb2xvaW1pLmNvbS9SZXBvc2l0b3J5L0lkZW5U cnVzdC9TUElNSS9nZXRDUkwwgdOggdCggc2GgcpsZGFwOi8vbGRhcC5zYW5wYW9sb2ltaS5jb20v Y24lM2RzYW5wYW9sb2ltaSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24l MjBBdXRob3JpdHksb3UlM2RzYW5wYW9sb2ltaSUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUs byUzZFNhbnBhb2xvJTIwSU1JJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25M aXN0MB0GA1UdDgQWBBTIbVCpbuUaDSr5RGMEKgXyzLT7DjANBgkqhkiG9w0BAQUFAAOCAQEABtKv dR+XlEqzAK/k9IJerfv9rLWMowh2d5yAgJ8OEBGA+WEHkjrraxu/pyso2MBU4pp3St+An2DdtNmc nLlf7H+n/6F4lqyqXIrpLEMPrLj4R539gDNWuxiluw5oxi+XQGyda3qCa7p/adjZXiGL+XoN+vF4 6eTbz8xvMqd9KTEKubfhMCyhyOmmk3MfGLPq7mLd9xvJd+MhY39ixHWiW4W3JfzDeVcWuqfYc3nC 68MqYA7oLK4U3GO5CGob4PIRVhNKDoiDoDWF/QkICqL9BAlU6xmWt7dSj7DNOQm03/wgEielCSHW hz+G14qykwGOvj4CH8Zemo53E3BE/HK37Q== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: sanpaoloimi Production Identrus Certification Authority Issuer OU: sanpaoloimi Identrus Infrastructure Issuer O: Sanpaolo IMI S.p.A. Issuer C: IT Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Subject C: IT Valid from: Mon Mar 26 10:08:07 CEST 2007 Valid to: Wed Dec 11 23:26:14 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.sanpaoloimi.com/cps ITALIA (ITALY) - Trusted List ID: ID100001 Page 317 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points http://crl.sanpaoloimi.com/Repository/IdenTrust/SPIMI/getCRL ldap://ldap.sanpaoloimi.com/cn%3dsanpaoloimi%20Production%20Identrus%20Certification%20A uthority,ou%3dsanpaoloimi%20Identrus%20Infrastructure,o%3dSanpaolo%20IMI%20S.p.A.,c%3dI T?certificateRevocationList Subject Key Identifier C8:6D:50:A9:6E:E5:1A:0D:2A:F9:44:63:04:2A:05:F2:CC:B4:FB:0E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 92:9A:39:9F:4D:AD:0D:57:A5:DB:22:FD:C5:26:99:05:3B:D8:EC:65:6F:D3:1F:04:47:14:B8:51:80: 23:C0:C6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2007-03-31T22:00:01Z 21.1.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 300602 ITALIA (ITALY) - Trusted List ID: ID100001 Page 318 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFbTCCBFWgAwIBAgIDBJY6MA0GCSqGSIb3DQEBBQUAMIGbMQswCQYDVQQGEwJJVDEcMBoGA1UE CgwTU2FucGFvbG8gSU1JIFMucC5BLjEsMCoGA1UECwwjc2FucGFvbG9pbWkgSWRlbnRydXMgSW5m cmFzdHJ1Y3R1cmUxQDA+BgNVBAMMN3NhbnBhb2xvaW1pIFByb2R1Y3Rpb24gSWRlbnRydXMgQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMzI2MDgwODA3WhcNMTMxMjExMjIyNjE0WjCBmzEL MAkGA1UEBhMCSVQxHDAaBgNVBAoME1NhbnBhb2xvIElNSSBTLnAuQS4xLDAqBgNVBAsMI3NhbnBh b2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0dXJlMUAwPgYDVQQDDDdzYW5wYW9sb2ltaSBQcm9k dWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAriwjlXwk/g5CkdhLpSkptZ9CGiPDSDUBScy3iWi7pGR7M3APkk7fLvRv 7QHaNnMcF5hNUs5j8u8TOnxYvV0oVCEpiFSiqVI++O/oS/LiqNQLBvsHxToc9/x8+Gk3v1CJGicH X14pjnkX/cIt7TmqJnCXeEP1a/gT9XVLBkKE2QJDtnG7a/sKbqaoLRJ1qpBwE/v6OlW+Equ8rUj7 8x013Kt6uSbASU9X+cA32Dd5go+r5nXL8+HnmHHE5GzatETIEFov1QNesNz18KMo5EHF4B34C5gh IOhM9ProbJxwkW4/p0Eo+KKCPxMVx1Yc55rYGFPowo4VDIA/On2lhobmlQIDAQABo4IBtjCCAbIw DwYDVR0TAQH/BAUwAwEB/zBFBgNVHSAEPjA8MDoGCysGAQQBgZJWAQEBMCswKQYIKwYBBQUHAgEW HWh0dHA6Ly9jYS5zYW5wYW9sb2ltaS5jb20vY3BzMA4GA1UdDwEB/wQEAwIBBjCCAScGA1UdHwSC AR4wggEaMEKgQKA+hjxodHRwOi8vY3JsLnNhbnBhb2xvaW1pLmNvbS9SZXBvc2l0b3J5L0lkZW5U cnVzdC9TUElNSS9nZXRDUkwwgdOggdCggc2GgcpsZGFwOi8vbGRhcC5zYW5wYW9sb2ltaS5jb20v Y24lM2RzYW5wYW9sb2ltaSUyMFByb2R1Y3Rpb24lMjBJZGVudHJ1cyUyMENlcnRpZmljYXRpb24l MjBBdXRob3JpdHksb3UlM2RzYW5wYW9sb2ltaSUyMElkZW50cnVzJTIwSW5mcmFzdHJ1Y3R1cmUs byUzZFNhbnBhb2xvJTIwSU1JJTIwUy5wLkEuLGMlM2RJVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25M aXN0MB0GA1UdDgQWBBTIbVCpbuUaDSr5RGMEKgXyzLT7DjANBgkqhkiG9w0BAQUFAAOCAQEABtKv dR+XlEqzAK/k9IJerfv9rLWMowh2d5yAgJ8OEBGA+WEHkjrraxu/pyso2MBU4pp3St+An2DdtNmc nLlf7H+n/6F4lqyqXIrpLEMPrLj4R539gDNWuxiluw5oxi+XQGyda3qCa7p/adjZXiGL+XoN+vF4 6eTbz8xvMqd9KTEKubfhMCyhyOmmk3MfGLPq7mLd9xvJd+MhY39ixHWiW4W3JfzDeVcWuqfYc3nC 68MqYA7oLK4U3GO5CGob4PIRVhNKDoiDoDWF/QkICqL9BAlU6xmWt7dSj7DNOQm03/wgEielCSHW hz+G14qykwGOvj4CH8Zemo53E3BE/HK37Q== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: sanpaoloimi Production Identrus Certification Authority Issuer OU: sanpaoloimi Identrus Infrastructure Issuer O: Sanpaolo IMI S.p.A. Issuer C: IT Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Subject C: IT Valid from: Mon Mar 26 10:08:07 CEST 2007 Valid to: Wed Dec 11 23:26:14 CET 2013 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.6.1.4.1.18774.1.1.1 CPS pointer: http://ca.sanpaoloimi.com/cps CRL Distribution Points http://crl.sanpaoloimi.com/Repository/IdenTrust/SPIMI/getCRL ldap://ldap.sanpaoloimi.com/cn%3dsanpaoloimi%20Production%20Identrus%20Certification%20A uthority,ou%3dsanpaoloimi%20Identrus%20Infrastructure,o%3dSanpaolo%20IMI%20S.p.A.,c%3dI T?certificateRevocationList Subject Key Identifier C8:6D:50:A9:6E:E5:1A:0D:2A:F9:44:63:04:2A:05:F2:CC:B4:FB:0E Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 319 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: 92:9A:39:9F:4D:AD:0D:57:A5:DB:22:FD:C5:26:99:05:3B:D8:EC:65:6F:D3:1F:04:47:14:B8:51:80: 23:C0:C6 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2007-03-26T09:08:07Z 21.2 - Service : CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A. Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1045 X509 Certificate -----BEGIN CERTIFICATE----MIIE/zCCA+egAwIBAgICBBUwDQYJKoZIhvcNAQEFBQAwgY4xHDAaBgNVBAoTE1NhbnBhb2xvIElN SSBTLnAuQS4xLDAqBgNVBAsTI3NhbnBhb2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0dXJlMUAw PgYDVQQDEzdzYW5wYW9sb2ltaSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MB4XDTA0MTExMDEzNTkzNFoXDTExMDEyNjAzMTczNVowgY4xHDAaBgNVBAoTE1NhbnBh b2xvIElNSSBTLnAuQS4xLDAqBgNVBAsTI3NhbnBhb2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0 dXJlMUAwPgYDVQQDEzdzYW5wYW9sb2ltaSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSRMwt2c82oa3fA2 S+rBgrkQ5bt4LHssVEJIzMipJPUXVPIZoaPLo2MQ9ofzrjXdXKc3ITZE5pJ5c4IwRFjWoaNlCEvM JD4JP77KkI+lkpoa0xsIAN/eXFr15E0Y2utwTR74KpuUugIO5dl8q+Yf3iCWeL9b4Y5y7qbtgod3 N6+mXe6uW7vdEO+BN35us1yH5esW9ymu4OnGspl4Y6kjMg5NHPh4YdDwybffQ1oQ582GyHdh/pH8 cMYQJg8qFNfOtwdf5WkwAZhYKXcZ47WJNfKrmB2ZULjhCmivoLzc2OGOpZWUTkxAfnWhzgGbLVPx YJMzrlotuWVnG1JGEtBAmQIDAQABo4IBYzCCAV8wDwYDVR0TAQH/BAUwAwEB/zBABgNVHSAEOTA3 MDUGBitMGQICATArMCkGCCsGAQUFBwIBFh1odHRwOi8vY2Euc2FucGFvbG9pbWkuY29tL2NwczAO BgNVHQ8BAf8EBAMCAQYwgdoGA1UdHwSB0jCBzzCBzKCByaCBxoaBw2xkYXA6Ly9sZGFwLnNhbnBh b2xvaW1pLmNvbS9jbiUzZHNhbnBhb2xvaW1pJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2Vy dGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZHNhbnBhb2xvaW1pJTIwSWRlbnRydXMlMjBJbmZy YXN0cnVjdHVyZSxvJTNkU2FucGFvbG8lMjBJTUklMjBTLnAuQS4/Y2VydGlmaWNhdGVSZXZvY2F0 aW9uTGlzdDAdBgNVHQ4EFgQUhXgprrySGVhmNZ5Gzh6hFmBDpGEwDQYJKoZIhvcNAQEFBQADggEB ABy9KDWSWjRTysl1ZCzxTQlYGUGHrEVxaSzKK4NXkY6s2zphKQRs8KLjTw9TSldS5wfS/eRpRT4m eJzScV1NMUx+wq9/EVUkbw4EFqdHBVI73ZrVXtI5rmNalNaJwKKZ7ovdyAuDVcnYpV6zO12ohai5 3Di0uCeg9bWEKtNV+8aY4Ja5SNAdBr+UMRsPUCMsHJvQtfbkyEeAazpFd6JviiFTn0LPYkMURPio 4pHLiveNBvH05bkpb2iM2Wm977hKX+h4QdFsC3/JcBI3fis2byrHTCgwDdbfpqldVyvhfAQ4H0wd 5t/1nw51S1sFeIlDwGrgS5RBwDqwdIf8Ulny6Q8= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: sanpaoloimi Production Identrus Certification Authority Issuer OU: sanpaoloimi Identrus Infrastructure Issuer O: Sanpaolo IMI S.p.A. Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure ITALIA (ITALY) - Trusted List ID: ID100001 Page 320 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Sanpaolo IMI S.p.A. Valid from: Wed Nov 10 14:59:34 CET 2004 Valid to: Wed Jan 26 04:17:35 CET 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.25.2.2.1 CPS pointer: http://ca.sanpaoloimi.com/cps CRL Distribution Points ldap://ldap.sanpaoloimi.com/cn%3dsanpaoloimi%20Production%20Identrus%20Certification%20A uthority,ou%3dsanpaoloimi%20Identrus%20Infrastructure,o%3dSanpaolo%20IMI%20S.p.A.?certifi cateRevocationList Subject Key Identifier 85:78:29:AE:BC:92:19:58:66:35:9E:46:CE:1E:A1:16:60:43:A4:61 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1D:93:79:0E:7D:46:CE:70:97:DB:15:26:FA:88:D8:37:F7:FC:A7:A3:71:01:CB:8B:85:D1:52:F7:D6: B5:FB:B4 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2007-03-31T22:01:01Z 21.2.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://ca.intesasanpaolo.com Name [ en ] Intesa Sanpaolo Bank S.p.A. Name [ it ] Banca Intesa Sanpaolo S.p.A. [ it ] Agenzia per l'Italia Digitale TSP Name Scheme Operator Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 321 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] Scheme Territory Agenzia per l'Italia Digitale IT 21.2.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A. Service digital identities X509SubjectName Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Certificate fields details Version: 3 Serial Number: 1045 X509 Certificate -----BEGIN CERTIFICATE----MIIE/zCCA+egAwIBAgICBBUwDQYJKoZIhvcNAQEFBQAwgY4xHDAaBgNVBAoTE1NhbnBhb2xvIElN SSBTLnAuQS4xLDAqBgNVBAsTI3NhbnBhb2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0dXJlMUAw PgYDVQQDEzdzYW5wYW9sb2ltaSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MB4XDTA0MTExMDEzNTkzNFoXDTExMDEyNjAzMTczNVowgY4xHDAaBgNVBAoTE1NhbnBh b2xvIElNSSBTLnAuQS4xLDAqBgNVBAsTI3NhbnBhb2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0 dXJlMUAwPgYDVQQDEzdzYW5wYW9sb2ltaSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSRMwt2c82oa3fA2 S+rBgrkQ5bt4LHssVEJIzMipJPUXVPIZoaPLo2MQ9ofzrjXdXKc3ITZE5pJ5c4IwRFjWoaNlCEvM JD4JP77KkI+lkpoa0xsIAN/eXFr15E0Y2utwTR74KpuUugIO5dl8q+Yf3iCWeL9b4Y5y7qbtgod3 N6+mXe6uW7vdEO+BN35us1yH5esW9ymu4OnGspl4Y6kjMg5NHPh4YdDwybffQ1oQ582GyHdh/pH8 cMYQJg8qFNfOtwdf5WkwAZhYKXcZ47WJNfKrmB2ZULjhCmivoLzc2OGOpZWUTkxAfnWhzgGbLVPx YJMzrlotuWVnG1JGEtBAmQIDAQABo4IBYzCCAV8wDwYDVR0TAQH/BAUwAwEB/zBABgNVHSAEOTA3 MDUGBitMGQICATArMCkGCCsGAQUFBwIBFh1odHRwOi8vY2Euc2FucGFvbG9pbWkuY29tL2NwczAO BgNVHQ8BAf8EBAMCAQYwgdoGA1UdHwSB0jCBzzCBzKCByaCBxoaBw2xkYXA6Ly9sZGFwLnNhbnBh b2xvaW1pLmNvbS9jbiUzZHNhbnBhb2xvaW1pJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2Vy dGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZHNhbnBhb2xvaW1pJTIwSWRlbnRydXMlMjBJbmZy YXN0cnVjdHVyZSxvJTNkU2FucGFvbG8lMjBJTUklMjBTLnAuQS4/Y2VydGlmaWNhdGVSZXZvY2F0 aW9uTGlzdDAdBgNVHQ4EFgQUhXgprrySGVhmNZ5Gzh6hFmBDpGEwDQYJKoZIhvcNAQEFBQADggEB ABy9KDWSWjRTysl1ZCzxTQlYGUGHrEVxaSzKK4NXkY6s2zphKQRs8KLjTw9TSldS5wfS/eRpRT4m eJzScV1NMUx+wq9/EVUkbw4EFqdHBVI73ZrVXtI5rmNalNaJwKKZ7ovdyAuDVcnYpV6zO12ohai5 3Di0uCeg9bWEKtNV+8aY4Ja5SNAdBr+UMRsPUCMsHJvQtfbkyEeAazpFd6JviiFTn0LPYkMURPio 4pHLiveNBvH05bkpb2iM2Wm977hKX+h4QdFsC3/JcBI3fis2byrHTCgwDdbfpqldVyvhfAQ4H0wd 5t/1nw51S1sFeIlDwGrgS5RBwDqwdIf8Ulny6Q8= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: sanpaoloimi Production Identrus Certification Authority Issuer OU: sanpaoloimi Identrus Infrastructure Issuer O: Sanpaolo IMI S.p.A. Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure ITALIA (ITALY) - Trusted List ID: ID100001 Page 322 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Sanpaolo IMI S.p.A. Valid from: Wed Nov 10 14:59:34 CET 2004 Valid to: Wed Jan 26 04:17:35 CET 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.25.2.2.1 CPS pointer: http://ca.sanpaoloimi.com/cps CRL Distribution Points ldap://ldap.sanpaoloimi.com/cn%3dsanpaoloimi%20Production%20Identrus%20Certification%20A uthority,ou%3dsanpaoloimi%20Identrus%20Infrastructure,o%3dSanpaolo%20IMI%20S.p.A.?certifi cateRevocationList Subject Key Identifier 85:78:29:AE:BC:92:19:58:66:35:9E:46:CE:1E:A1:16:60:43:A4:61 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1D:93:79:0E:7D:46:CE:70:97:DB:15:26:FA:88:D8:37:F7:FC:A7:A3:71:01:CB:8B:85:D1:52:F7:D6: B5:FB:B4 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2007-03-31T22:00:01Z 21.2.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=sanpaoloimi Production Identrus Certification Authority,OU=sanpaoloimi Identrus Infrastructure,O=Sanpaolo IMI S.p.A. Service digital identities X509SubjectName Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Certificate fields details ITALIA (ITALY) - Trusted List ID: ID100001 Page 323 ETSI 2014 - TSL HR - PDF/A-1b generator Version: 3 Serial Number: 1045 X509 Certificate -----BEGIN CERTIFICATE----MIIE/zCCA+egAwIBAgICBBUwDQYJKoZIhvcNAQEFBQAwgY4xHDAaBgNVBAoTE1NhbnBhb2xvIElN SSBTLnAuQS4xLDAqBgNVBAsTI3NhbnBhb2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0dXJlMUAw PgYDVQQDEzdzYW5wYW9sb2ltaSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MB4XDTA0MTExMDEzNTkzNFoXDTExMDEyNjAzMTczNVowgY4xHDAaBgNVBAoTE1NhbnBh b2xvIElNSSBTLnAuQS4xLDAqBgNVBAsTI3NhbnBhb2xvaW1pIElkZW50cnVzIEluZnJhc3RydWN0 dXJlMUAwPgYDVQQDEzdzYW5wYW9sb2ltaSBQcm9kdWN0aW9uIElkZW50cnVzIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSRMwt2c82oa3fA2 S+rBgrkQ5bt4LHssVEJIzMipJPUXVPIZoaPLo2MQ9ofzrjXdXKc3ITZE5pJ5c4IwRFjWoaNlCEvM JD4JP77KkI+lkpoa0xsIAN/eXFr15E0Y2utwTR74KpuUugIO5dl8q+Yf3iCWeL9b4Y5y7qbtgod3 N6+mXe6uW7vdEO+BN35us1yH5esW9ymu4OnGspl4Y6kjMg5NHPh4YdDwybffQ1oQ582GyHdh/pH8 cMYQJg8qFNfOtwdf5WkwAZhYKXcZ47WJNfKrmB2ZULjhCmivoLzc2OGOpZWUTkxAfnWhzgGbLVPx YJMzrlotuWVnG1JGEtBAmQIDAQABo4IBYzCCAV8wDwYDVR0TAQH/BAUwAwEB/zBABgNVHSAEOTA3 MDUGBitMGQICATArMCkGCCsGAQUFBwIBFh1odHRwOi8vY2Euc2FucGFvbG9pbWkuY29tL2NwczAO BgNVHQ8BAf8EBAMCAQYwgdoGA1UdHwSB0jCBzzCBzKCByaCBxoaBw2xkYXA6Ly9sZGFwLnNhbnBh b2xvaW1pLmNvbS9jbiUzZHNhbnBhb2xvaW1pJTIwUHJvZHVjdGlvbiUyMElkZW50cnVzJTIwQ2Vy dGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvdSUzZHNhbnBhb2xvaW1pJTIwSWRlbnRydXMlMjBJbmZy YXN0cnVjdHVyZSxvJTNkU2FucGFvbG8lMjBJTUklMjBTLnAuQS4/Y2VydGlmaWNhdGVSZXZvY2F0 aW9uTGlzdDAdBgNVHQ4EFgQUhXgprrySGVhmNZ5Gzh6hFmBDpGEwDQYJKoZIhvcNAQEFBQADggEB ABy9KDWSWjRTysl1ZCzxTQlYGUGHrEVxaSzKK4NXkY6s2zphKQRs8KLjTw9TSldS5wfS/eRpRT4m eJzScV1NMUx+wq9/EVUkbw4EFqdHBVI73ZrVXtI5rmNalNaJwKKZ7ovdyAuDVcnYpV6zO12ohai5 3Di0uCeg9bWEKtNV+8aY4Ja5SNAdBr+UMRsPUCMsHJvQtfbkyEeAazpFd6JviiFTn0LPYkMURPio 4pHLiveNBvH05bkpb2iM2Wm977hKX+h4QdFsC3/JcBI3fis2byrHTCgwDdbfpqldVyvhfAQ4H0wd 5t/1nw51S1sFeIlDwGrgS5RBwDqwdIf8Ulny6Q8= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: sanpaoloimi Production Identrus Certification Authority Issuer OU: sanpaoloimi Identrus Infrastructure Issuer O: Sanpaolo IMI S.p.A. Subject CN: sanpaoloimi Production Identrus Certification Authority Subject OU: sanpaoloimi Identrus Infrastructure Subject O: Sanpaolo IMI S.p.A. Valid from: Wed Nov 10 14:59:34 CET 2004 Valid to: Wed Jan 26 04:17:35 CET 2011 Public Key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asic Constraints IsCA: true Certificate Policies Policy OID: 1.3.76.25.2.2.1 CPS pointer: http://ca.sanpaoloimi.com/cps CRL Distribution Points ldap://ldap.sanpaoloimi.com/cn%3dsanpaoloimi%20Production%20Identrus%20Certification%20A uthority,ou%3dsanpaoloimi%20Identrus%20Infrastructure,o%3dSanpaolo%20IMI%20S.p.A.?certifi cateRevocationList Subject Key Identifier 85:78:29:AE:BC:92:19:58:66:35:9E:46:CE:1E:A1:16:60:43:A4:61 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 1D:93:79:0E:7D:46:CE:70:97:DB:15:26:FA:88:D8:37:F7:FC:A7:A3:71:01:CB:8B:85:D1:52:F7:D6: B5:FB:B4 ITALIA (ITALY) - Trusted List ID: ID100001 Page 324 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2004-11-10T14:59:34Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 325 ETSI 2014 - TSL HR - PDF/A-1b generator 22 - TSP: Cedacrinord S.p.A. TSP Name Name [ en ] Cedacrinord S.p.A. Name [ it ] Cedacrinord S.p.A. Name [ en ] Cedacrinord SpA Name [ it ] Cedacrinord SpA Name [ en ] VATIT-00432960342 Name [ it ] VATIT-00432960342 Street Address [ en ] Via del Conventino, 1 Locality [ en ] Collecchio Postal Code [ en ] 43044 Country Name [ en ] IT Street Address [ it ] Via del Conventino, 1 Locality [ it ] Collecchio Postal Code [ it ] 43044 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI http://www.cedacricert.it/Portale/Cedacricert_eng.html URI mailto:[email protected] TSP Information URI URI [ en ] http://www.cedacricert.it/Portale/Cedacricert_eng.html URI [ it ] http://www.cedacricert.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 326 ETSI 2014 - TSL HR - PDF/A-1b generator 22.1 - Service : CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1040640660 X509 Certificate -----BEGIN CERTIFICATE----MIIEdTCCA12gAwIBAgIEPgbqlDANBgkqhkiG9w0BAQUFADBpMRMwEQYKCZImiZPyLGQBGRMDb3Jn MRUwEwYKCZImiZPyLGQBGRMFY2FjZG4xCzAJBgNVBAYTAklUMRgwFgYDVQQKEw9DZWRhY3Jpbm9y ZCBTcEExFDASBgNVBAMTC0NlZGFjcmljZXJ0MB4XDTAyMTIyMzEwNTIyMloXDTA4MTIyMjEwNTIy MlowaTETMBEGCgmSJomT8ixkARkTA29yZzEVMBMGCgmSJomT8ixkARkTBWNhY2RuMQswCQYDVQQG EwJJVDEYMBYGA1UEChMPQ2VkYWNyaW5vcmQgU3BBMRQwEgYDVQQDEwtDZWRhY3JpY2VydDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALitnaBo8AAyPYxIpqg60L+RkS9zEbUpTNx0aX1N 4jakBXh3FQncrtbf2T4cLfdv/Ah8zN0uim3qKAt8zQFt3BMnAPlBR2H495r6l7cIHI2Xqm3gsdFb x3TwjaT4QZ2U5JBnEbjE0vpqWMe9DOrIrXAIGOaLvO5svQjbIBOn1GaoJUxK7eoEq1y0z5nsXRyw Pkr8e6A/DaA9R/PiyDKFnkNI70VzFc1DFJtAKPRh+Tc07JOu8U6NP6c0/rbJyDsblNC88LQZXoHD xnoR8SnOJe2moHzmD3NCrxy1BrPSoSU4ZS7TEmVwok/CJodLQ/kKDMmULRC/lTPTdKvVBiiU2BsC AwEAAaOCASMwggEfMBIGA1UdEwEB/wQIMAYBAf8CAQEwPAYDVR0gBDUwMzAxBgYrTBEBAQEwJzAl BggrBgEFBQcCARYZaHR0cDovL3d3dy5jZWRhY3JpY2VydC5pdDB7BgNVHR8EdDByMHCgbqBshmps ZGFwOi8vbGRhcC5jZWRhY3JpY2VydC5pdC9DTj1DZWRhY3JpY2VydCxPPUNlZGFjcmlub3JkIFNw QSxDPUlULERDPWNhY2RuLERDPW9yZz9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQW BBRKuVgWCLk8UGBcpoiTWhYyfQdv1TAfBgNVHSMEGDAWgBRKuVgWCLk8UGBcpoiTWhYyfQdv1TAO BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAGmNwzFX8RnT0QfsQDwbDWE7EnwztTWb LcZFyXvYabLjU4H+DnOFEY992TWEBpRor89QthlmHYUDRDuxcIXFvTCmGlJI69Bl7IqZm0lusXo+ zo96+SUng55zGd3hJ/KKKzvhseu/nTt5E4uTnS8vLfPzsinPlY2RsbFZ2Jfug4rn5oD9VWxZgEJC FU5fp1k/WxHF1saQJJqOfJuaXL6I8sA3LBk4wV9OhxXAvOyMZMNiZwVR2Xbr/+WFgnrugQo0XauD fJvzqjhCZoUkxEo4iSU5nlH5sHirZc02qXKlNyRiI4hj4yPaxGQcJ8UY4VH2Xn0/x9N7WN3H00TK s6Ff6Ac= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Cedacricert Issuer O: Cedacrinord SpA Issuer C: IT Issuer DC: cacdn Issuer DC: org Subject CN: Cedacricert Subject O: Cedacrinord SpA Subject C: IT Subject DC: cacdn Subject DC: org ITALIA (ITALY) - Trusted List ID: ID100001 Page 327 ETSI 2014 - TSL HR - PDF/A-1b generator Valid from: Mon Dec 23 11:52:22 CET 2002 Valid to: Mon Dec 22 11:52:22 CET 2008 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.17.1.1.1 CPS pointer: http://www.cedacricert.it CRL Distribution Points ldap://ldap.cedacricert.it/CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org?certificateRevocationList Subject Key Identifier 4A:B9:58:16:08:B9:3C:50:60:5C:A6:88:93:5A:16:32:7D:07:6F:D5 Authority Key Identifier 4A:B9:58:16:08:B9:3C:50:60:5C:A6:88:93:5A:16:32:7D:07:6F:D5 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 85:3D:20:E0:18:EE:0C:75:36:8C:D8:56:1B:73:A3:A2:2A:46:5F:C7:41:61:2A:32:9E:91:58:86:DB:2 7:6A:4B Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2004-05-20T22:01:01Z 22.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.cedacricert.it/Portale/Cedacricert_eng.html Name [ en ] CEDACRI S.p.A. Name [ it ] CEDACRI S.p.A. [ it ] Agenzia per l'Italia Digitale TSP Name Scheme Operator Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 328 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] Scheme Territory Agenzia per l'Italia Digitale IT 22.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org Service digital identities Certificate fields details Version: 3 Serial Number: 1040640660 X509 Certificate -----BEGIN CERTIFICATE----MIIEdTCCA12gAwIBAgIEPgbqlDANBgkqhkiG9w0BAQUFADBpMRMwEQYKCZImiZPyLGQBGRMDb3Jn MRUwEwYKCZImiZPyLGQBGRMFY2FjZG4xCzAJBgNVBAYTAklUMRgwFgYDVQQKEw9DZWRhY3Jpbm9y ZCBTcEExFDASBgNVBAMTC0NlZGFjcmljZXJ0MB4XDTAyMTIyMzEwNTIyMloXDTA4MTIyMjEwNTIy MlowaTETMBEGCgmSJomT8ixkARkTA29yZzEVMBMGCgmSJomT8ixkARkTBWNhY2RuMQswCQYDVQQG EwJJVDEYMBYGA1UEChMPQ2VkYWNyaW5vcmQgU3BBMRQwEgYDVQQDEwtDZWRhY3JpY2VydDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALitnaBo8AAyPYxIpqg60L+RkS9zEbUpTNx0aX1N 4jakBXh3FQncrtbf2T4cLfdv/Ah8zN0uim3qKAt8zQFt3BMnAPlBR2H495r6l7cIHI2Xqm3gsdFb x3TwjaT4QZ2U5JBnEbjE0vpqWMe9DOrIrXAIGOaLvO5svQjbIBOn1GaoJUxK7eoEq1y0z5nsXRyw Pkr8e6A/DaA9R/PiyDKFnkNI70VzFc1DFJtAKPRh+Tc07JOu8U6NP6c0/rbJyDsblNC88LQZXoHD xnoR8SnOJe2moHzmD3NCrxy1BrPSoSU4ZS7TEmVwok/CJodLQ/kKDMmULRC/lTPTdKvVBiiU2BsC AwEAAaOCASMwggEfMBIGA1UdEwEB/wQIMAYBAf8CAQEwPAYDVR0gBDUwMzAxBgYrTBEBAQEwJzAl BggrBgEFBQcCARYZaHR0cDovL3d3dy5jZWRhY3JpY2VydC5pdDB7BgNVHR8EdDByMHCgbqBshmps ZGFwOi8vbGRhcC5jZWRhY3JpY2VydC5pdC9DTj1DZWRhY3JpY2VydCxPPUNlZGFjcmlub3JkIFNw QSxDPUlULERDPWNhY2RuLERDPW9yZz9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQW BBRKuVgWCLk8UGBcpoiTWhYyfQdv1TAfBgNVHSMEGDAWgBRKuVgWCLk8UGBcpoiTWhYyfQdv1TAO BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAGmNwzFX8RnT0QfsQDwbDWE7EnwztTWb LcZFyXvYabLjU4H+DnOFEY992TWEBpRor89QthlmHYUDRDuxcIXFvTCmGlJI69Bl7IqZm0lusXo+ zo96+SUng55zGd3hJ/KKKzvhseu/nTt5E4uTnS8vLfPzsinPlY2RsbFZ2Jfug4rn5oD9VWxZgEJC FU5fp1k/WxHF1saQJJqOfJuaXL6I8sA3LBk4wV9OhxXAvOyMZMNiZwVR2Xbr/+WFgnrugQo0XauD fJvzqjhCZoUkxEo4iSU5nlH5sHirZc02qXKlNyRiI4hj4yPaxGQcJ8UY4VH2Xn0/x9N7WN3H00TK s6Ff6Ac= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Cedacricert Issuer O: Cedacrinord SpA Issuer C: IT Issuer DC: cacdn Issuer DC: org Subject CN: Cedacricert Subject O: Cedacrinord SpA Subject C: IT Subject DC: cacdn Subject DC: org ITALIA (ITALY) - Trusted List ID: ID100001 Page 329 ETSI 2014 - TSL HR - PDF/A-1b generator Valid from: Mon Dec 23 11:52:22 CET 2002 Valid to: Mon Dec 22 11:52:22 CET 2008 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.17.1.1.1 CPS pointer: http://www.cedacricert.it CRL Distribution Points ldap://ldap.cedacricert.it/CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org?certificateRevocationList Subject Key Identifier 4A:B9:58:16:08:B9:3C:50:60:5C:A6:88:93:5A:16:32:7D:07:6F:D5 Authority Key Identifier 4A:B9:58:16:08:B9:3C:50:60:5C:A6:88:93:5A:16:32:7D:07:6F:D5 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 85:3D:20:E0:18:EE:0C:75:36:8C:D8:56:1B:73:A3:A2:2A:46:5F:C7:41:61:2A:32:9E:91:58:86:DB:2 7:6A:4B X509SubjectName Subject CN: Cedacricert Subject O: Cedacrinord SpA Subject C: IT Subject DC: cacdn Subject DC: org Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2004-05-20T22:00:01Z 22.1.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] ITALIA (ITALY) - Trusted List ID: ID100001 CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org Page 330 ETSI 2014 - TSL HR - PDF/A-1b generator Service digital identities Certificate fields details Version: 3 Serial Number: 1040640660 X509 Certificate -----BEGIN CERTIFICATE----MIIEdTCCA12gAwIBAgIEPgbqlDANBgkqhkiG9w0BAQUFADBpMRMwEQYKCZImiZPyLGQBGRMDb3Jn MRUwEwYKCZImiZPyLGQBGRMFY2FjZG4xCzAJBgNVBAYTAklUMRgwFgYDVQQKEw9DZWRhY3Jpbm9y ZCBTcEExFDASBgNVBAMTC0NlZGFjcmljZXJ0MB4XDTAyMTIyMzEwNTIyMloXDTA4MTIyMjEwNTIy MlowaTETMBEGCgmSJomT8ixkARkTA29yZzEVMBMGCgmSJomT8ixkARkTBWNhY2RuMQswCQYDVQQG EwJJVDEYMBYGA1UEChMPQ2VkYWNyaW5vcmQgU3BBMRQwEgYDVQQDEwtDZWRhY3JpY2VydDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALitnaBo8AAyPYxIpqg60L+RkS9zEbUpTNx0aX1N 4jakBXh3FQncrtbf2T4cLfdv/Ah8zN0uim3qKAt8zQFt3BMnAPlBR2H495r6l7cIHI2Xqm3gsdFb x3TwjaT4QZ2U5JBnEbjE0vpqWMe9DOrIrXAIGOaLvO5svQjbIBOn1GaoJUxK7eoEq1y0z5nsXRyw Pkr8e6A/DaA9R/PiyDKFnkNI70VzFc1DFJtAKPRh+Tc07JOu8U6NP6c0/rbJyDsblNC88LQZXoHD xnoR8SnOJe2moHzmD3NCrxy1BrPSoSU4ZS7TEmVwok/CJodLQ/kKDMmULRC/lTPTdKvVBiiU2BsC AwEAAaOCASMwggEfMBIGA1UdEwEB/wQIMAYBAf8CAQEwPAYDVR0gBDUwMzAxBgYrTBEBAQEwJzAl BggrBgEFBQcCARYZaHR0cDovL3d3dy5jZWRhY3JpY2VydC5pdDB7BgNVHR8EdDByMHCgbqBshmps ZGFwOi8vbGRhcC5jZWRhY3JpY2VydC5pdC9DTj1DZWRhY3JpY2VydCxPPUNlZGFjcmlub3JkIFNw QSxDPUlULERDPWNhY2RuLERDPW9yZz9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MB0GA1UdDgQW BBRKuVgWCLk8UGBcpoiTWhYyfQdv1TAfBgNVHSMEGDAWgBRKuVgWCLk8UGBcpoiTWhYyfQdv1TAO BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAGmNwzFX8RnT0QfsQDwbDWE7EnwztTWb LcZFyXvYabLjU4H+DnOFEY992TWEBpRor89QthlmHYUDRDuxcIXFvTCmGlJI69Bl7IqZm0lusXo+ zo96+SUng55zGd3hJ/KKKzvhseu/nTt5E4uTnS8vLfPzsinPlY2RsbFZ2Jfug4rn5oD9VWxZgEJC FU5fp1k/WxHF1saQJJqOfJuaXL6I8sA3LBk4wV9OhxXAvOyMZMNiZwVR2Xbr/+WFgnrugQo0XauD fJvzqjhCZoUkxEo4iSU5nlH5sHirZc02qXKlNyRiI4hj4yPaxGQcJ8UY4VH2Xn0/x9N7WN3H00TK s6Ff6Ac= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: Cedacricert Issuer O: Cedacrinord SpA Issuer C: IT Issuer DC: cacdn Issuer DC: org Subject CN: Cedacricert Subject O: Cedacrinord SpA Subject C: IT Subject DC: cacdn Subject DC: org Valid from: Mon Dec 23 11:52:22 CET 2002 Valid to: Mon Dec 22 11:52:22 CET 2008 Public Key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asic Constraints IsCA: true - Path length: 1 Certificate Policies Policy OID: 1.3.76.17.1.1.1 CPS pointer: http://www.cedacricert.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 331 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldap.cedacricert.it/CN=Cedacricert,O=Cedacrinord SpA,C=IT,DC=cacdn,DC=org?certificateRevocationList Subject Key Identifier 4A:B9:58:16:08:B9:3C:50:60:5C:A6:88:93:5A:16:32:7D:07:6F:D5 Authority Key Identifier 4A:B9:58:16:08:B9:3C:50:60:5C:A6:88:93:5A:16:32:7D:07:6F:D5 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 85:3D:20:E0:18:EE:0C:75:36:8C:D8:56:1B:73:A3:A2:2A:46:5F:C7:41:61:2A:32:9E:91:58:86:DB:2 7:6A:4B X509SubjectName Subject CN: Cedacricert Subject O: Cedacrinord SpA Subject C: IT Subject DC: cacdn Subject DC: org Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2002-12-23T11:52:22Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 332 ETSI 2014 - TSL HR - PDF/A-1b generator 23 - TSP: SECETI S.p.A. TSP Name Name [ en ] SECETI S.p.A. Name [ it ] SECETI Name [ en ] Societa' per Azioni Servizi Centralizzati SECETI Seceti S.p.A. Name [ it ] Societa' per Azioni Servizi Centralizzati SECETI Seceti S.p.A. Name [ en ] VATIT-01747700159 Name [ it ] VATIT-01747700159 Street Address [ en ] via zurigo 3 Locality [ en ] milano Postal Code [ en ] 20147 Country Name [ en ] IT Street Address [ it ] via zurigo 3 Locality [ it ] milano Postal Code [ it ] 20147 Country Name [ it ] IT TSP Trade Name PostalAddress PostalAddress ElectronicAddress URI https://www.firmadigitale.seceti.it URI mailto:[email protected] TSP Information URI URI [ en ] https://www.firmadigitale.seceti.it URI [ it ] https://www.firmadigitale.seceti.it ITALIA (ITALY) - Trusted List ID: ID100001 Page 333 ETSI 2014 - TSL HR - PDF/A-1b generator 23.1 - Service : CN=SECETI Certificatore per la firma digitale,L=Milano,O=SECETI S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=SECETI Certificatore per la firma digitale,L=Milano,O=SECETI S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 1000000001 X509 Certificate -----BEGIN CERTIFICATE----MIIEvDCCA6SgAwIBAgIEO5rKATANBgkqhkiG9w0BAQUFADBrMQswCQYDVQQGEwJJVDEWMBQGA1UE ChMNU0VDRVRJIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMTMwMQYDVQQDEypTRUNFVEkgQ2VydGlm aWNhdG9yZSBwZXIgbGEgZmlybWEgZGlnaXRhbGUwHhcNMDAwOTE0MTYwNzAwWhcNMTAwOTE0MjM1 OTAwWjBrMQswCQYDVQQGEwJJVDEWMBQGA1UEChMNU0VDRVRJIFMucC5BLjEPMA0GA1UEBxMGTWls YW5vMTMwMQYDVQQDEypTRUNFVEkgQ2VydGlmaWNhdG9yZSBwZXIgbGEgZmlybWEgZGlnaXRhbGUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3/U9cZFYzbv7FztV5LJiiJNyh/gw1ACv 7hETguZ4s7QPJBJNxYrglQUvxk8tvDtQXpvcL0rJiJ2Kf1AukqhQJz959CDcOrrVfpgyG91SB2f8 kuDpGiorkX6TwM+N9sdgJqcvlh8e2vFxsZDkWzz7OWyvms+4HLS+amDM7A2G2sdpe2FUDcNRNp79 YmScUTWM5YRFm3E7rEJg6Ls/qqVvsCGW+aMLX0L6shXWwSRRhfr/DlyIWCB8F2LdQ2Orngah8q1K 53SwLtYX6rq5cZejRYt8wMH+fzre8a2q/cFf8bp04FByoFGPKiWCsNDSHy+6L/MsFaQDenixm5eS bnF1AgMBAAGjggFmMIIBYjCBuQYDVR0fBIGxMIGuMIGroIGooIGlhoGibGRhcDovL2Rpci5maXJt YWRpZ2l0YWxlLnNlY2V0aS5pdC9jbiUzRFNFQ0VUSSUyMENlcnRpZmljYXRvcmUlMjBwZXIlMjBs YSUyMGZpcm1hJTIwZGlnaXRhbGUlMkNvJTNEU0VDRVRJJTIwUyUyRXAlMkVBJTJFJTJDYyUzRElU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MGQGA1UdIARdMFswWQYGK4EOAQEBME8w TQYIKwYBBQUHAgEWQWh0dHA6Ly93d3cuZmlybWFkaWdpdGFsZS5zZWNldGkuaXQvTWFudWFsaS9N YW51YWxlT3BlcmF0aXZvRkQucGRmMB0GA1UdDgQWBBTuO2J2AToWJV3qLbnzNLBJERF5XzAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAoxpd52Njs7rt qzvP5mT9v4VYFmIcC3ewQVImrcmTy+KBCwXBNGOVR0fgqDKUHvQnd9FBZVVPYo7eOCggBY53RQ7t zA/1j4W6iPoaDiYXKtcXe+2HRm5agQF+kSm+DBfoK8/ZSX3kw/KbFsw28hEzPxZNsmrg3VK+UBjX TVRV/kPoJSead6ARM731ywHyS2qMRFUby9BTrv0HarMd5U6nKCysAdCcXTGypuS3NotnF2jZjHtG qEjLyfL8fjDcnz4GOvrFo4UhDmPVZ3K3NXsjkUC+PHpYvqIhcXGx0H9SgMx4wIgk8xh2HyX29GMB PkPwWpcGPKKZw7/EbT8rVucipw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SECETI Certificatore per la firma digitale Issuer L: Milano Issuer O: SECETI S.p.A. Issuer C: IT Subject CN: SECETI Certificatore per la firma digitale Subject L: Milano Subject O: SECETI S.p.A. Subject C: IT Valid from: Thu Sep 14 18:07:00 CEST 2000 Valid to: Wed Sep 15 01:59:00 CEST 2010 ITALIA (ITALY) - Trusted List ID: ID100001 Page 334 ETSI 2014 - TSL HR - PDF/A-1b generator Public Key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istribution Points ldap://dir.firmadigitale.seceti.it/cn%3DSECETI%20Certificatore%20per%20la%20firma%20digitale %2Co%3DSECETI%20S%2Ep%2EA%2E%2Cc%3DIT?certificateRevocationList;binary Certificate Policies Policy OID: 1.3.142.1.1.1 CPS pointer: http://www.firmadigitale.seceti.it/Manuali/ManualeOperativoFD.pdf Subject Key Identifier EE:3B:62:76:01:3A:16:25:5D:EA:2D:B9:F3:34:B0:49:11:11:79:5F Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FF:3E:60:67:B6:FC:56:7C:CF:9E:B7:11:32:1E:1B:C3:AF:39:2D:DA:12:82:9A:AE:3E:97:D3:A9:0 9:B1:EE:02 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2003-07-30T22:01:01Z 23.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] https://portal.actalis.it/Info/qcsp-english [ en ] Actalis S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Scheme Territory IT 23.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/CA/QC Page 335 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] CN=SECETI Certificatore per la firma digitale,L=Milano,O=SECETI S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SECETI Certificatore per la firma digitale Subject L: Milano Subject O: SECETI S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 1000000001 X509 Certificate -----BEGIN CERTIFICATE----MIIEvDCCA6SgAwIBAgIEO5rKATANBgkqhkiG9w0BAQUFADBrMQswCQYDVQQGEwJJVDEWMBQGA1UE ChMNU0VDRVRJIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMTMwMQYDVQQDEypTRUNFVEkgQ2VydGlm aWNhdG9yZSBwZXIgbGEgZmlybWEgZGlnaXRhbGUwHhcNMDAwOTE0MTYwNzAwWhcNMTAwOTE0MjM1 OTAwWjBrMQswCQYDVQQGEwJJVDEWMBQGA1UEChMNU0VDRVRJIFMucC5BLjEPMA0GA1UEBxMGTWls YW5vMTMwMQYDVQQDEypTRUNFVEkgQ2VydGlmaWNhdG9yZSBwZXIgbGEgZmlybWEgZGlnaXRhbGUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3/U9cZFYzbv7FztV5LJiiJNyh/gw1ACv 7hETguZ4s7QPJBJNxYrglQUvxk8tvDtQXpvcL0rJiJ2Kf1AukqhQJz959CDcOrrVfpgyG91SB2f8 kuDpGiorkX6TwM+N9sdgJqcvlh8e2vFxsZDkWzz7OWyvms+4HLS+amDM7A2G2sdpe2FUDcNRNp79 YmScUTWM5YRFm3E7rEJg6Ls/qqVvsCGW+aMLX0L6shXWwSRRhfr/DlyIWCB8F2LdQ2Orngah8q1K 53SwLtYX6rq5cZejRYt8wMH+fzre8a2q/cFf8bp04FByoFGPKiWCsNDSHy+6L/MsFaQDenixm5eS bnF1AgMBAAGjggFmMIIBYjCBuQYDVR0fBIGxMIGuMIGroIGooIGlhoGibGRhcDovL2Rpci5maXJt YWRpZ2l0YWxlLnNlY2V0aS5pdC9jbiUzRFNFQ0VUSSUyMENlcnRpZmljYXRvcmUlMjBwZXIlMjBs YSUyMGZpcm1hJTIwZGlnaXRhbGUlMkNvJTNEU0VDRVRJJTIwUyUyRXAlMkVBJTJFJTJDYyUzRElU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MGQGA1UdIARdMFswWQYGK4EOAQEBME8w TQYIKwYBBQUHAgEWQWh0dHA6Ly93d3cuZmlybWFkaWdpdGFsZS5zZWNldGkuaXQvTWFudWFsaS9N YW51YWxlT3BlcmF0aXZvRkQucGRmMB0GA1UdDgQWBBTuO2J2AToWJV3qLbnzNLBJERF5XzAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAoxpd52Njs7rt qzvP5mT9v4VYFmIcC3ewQVImrcmTy+KBCwXBNGOVR0fgqDKUHvQnd9FBZVVPYo7eOCggBY53RQ7t zA/1j4W6iPoaDiYXKtcXe+2HRm5agQF+kSm+DBfoK8/ZSX3kw/KbFsw28hEzPxZNsmrg3VK+UBjX TVRV/kPoJSead6ARM731ywHyS2qMRFUby9BTrv0HarMd5U6nKCysAdCcXTGypuS3NotnF2jZjHtG qEjLyfL8fjDcnz4GOvrFo4UhDmPVZ3K3NXsjkUC+PHpYvqIhcXGx0H9SgMx4wIgk8xh2HyX29GMB PkPwWpcGPKKZw7/EbT8rVucipw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SECETI Certificatore per la firma digitale Issuer L: Milano Issuer O: SECETI S.p.A. Issuer C: IT Subject CN: SECETI Certificatore per la firma digitale Subject L: Milano Subject O: SECETI S.p.A. Subject C: IT Valid from: Thu Sep 14 18:07:00 CEST 2000 ITALIA (ITALY) - Trusted List ID: ID100001 Page 336 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Wed Sep 15 01:59:00 CEST 2010 Public Key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istribution Points ldap://dir.firmadigitale.seceti.it/cn%3DSECETI%20Certificatore%20per%20la%20firma%20digitale %2Co%3DSECETI%20S%2Ep%2EA%2E%2Cc%3DIT?certificateRevocationList;binary Certificate Policies Policy OID: 1.3.142.1.1.1 CPS pointer: http://www.firmadigitale.seceti.it/Manuali/ManualeOperativoFD.pdf Subject Key Identifier EE:3B:62:76:01:3A:16:25:5D:EA:2D:B9:F3:34:B0:49:11:11:79:5F Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FF:3E:60:67:B6:FC:56:7C:CF:9E:B7:11:32:1E:1B:C3:AF:39:2D:DA:12:82:9A:AE:3E:97:D3:A9:0 9:B1:EE:02 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2003-07-30T22:00:01Z 23.1.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=SECETI Certificatore per la firma digitale,L=Milano,O=SECETI S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SECETI Certificatore per la firma digitale Subject L: Milano Subject O: SECETI S.p.A. Subject C: IT Certificate fields details Version: ITALIA (ITALY) - Trusted List ID: ID100001 3 Page 337 ETSI 2014 - TSL HR - PDF/A-1b generator Serial Number: X509 Certificate 1000000001 -----BEGIN CERTIFICATE----MIIEvDCCA6SgAwIBAgIEO5rKATANBgkqhkiG9w0BAQUFADBrMQswCQYDVQQGEwJJVDEWMBQGA1UE ChMNU0VDRVRJIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMTMwMQYDVQQDEypTRUNFVEkgQ2VydGlm aWNhdG9yZSBwZXIgbGEgZmlybWEgZGlnaXRhbGUwHhcNMDAwOTE0MTYwNzAwWhcNMTAwOTE0MjM1 OTAwWjBrMQswCQYDVQQGEwJJVDEWMBQGA1UEChMNU0VDRVRJIFMucC5BLjEPMA0GA1UEBxMGTWls YW5vMTMwMQYDVQQDEypTRUNFVEkgQ2VydGlmaWNhdG9yZSBwZXIgbGEgZmlybWEgZGlnaXRhbGUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3/U9cZFYzbv7FztV5LJiiJNyh/gw1ACv 7hETguZ4s7QPJBJNxYrglQUvxk8tvDtQXpvcL0rJiJ2Kf1AukqhQJz959CDcOrrVfpgyG91SB2f8 kuDpGiorkX6TwM+N9sdgJqcvlh8e2vFxsZDkWzz7OWyvms+4HLS+amDM7A2G2sdpe2FUDcNRNp79 YmScUTWM5YRFm3E7rEJg6Ls/qqVvsCGW+aMLX0L6shXWwSRRhfr/DlyIWCB8F2LdQ2Orngah8q1K 53SwLtYX6rq5cZejRYt8wMH+fzre8a2q/cFf8bp04FByoFGPKiWCsNDSHy+6L/MsFaQDenixm5eS bnF1AgMBAAGjggFmMIIBYjCBuQYDVR0fBIGxMIGuMIGroIGooIGlhoGibGRhcDovL2Rpci5maXJt YWRpZ2l0YWxlLnNlY2V0aS5pdC9jbiUzRFNFQ0VUSSUyMENlcnRpZmljYXRvcmUlMjBwZXIlMjBs YSUyMGZpcm1hJTIwZGlnaXRhbGUlMkNvJTNEU0VDRVRJJTIwUyUyRXAlMkVBJTJFJTJDYyUzRElU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MGQGA1UdIARdMFswWQYGK4EOAQEBME8w TQYIKwYBBQUHAgEWQWh0dHA6Ly93d3cuZmlybWFkaWdpdGFsZS5zZWNldGkuaXQvTWFudWFsaS9N YW51YWxlT3BlcmF0aXZvRkQucGRmMB0GA1UdDgQWBBTuO2J2AToWJV3qLbnzNLBJERF5XzAPBgNV HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAoxpd52Njs7rt qzvP5mT9v4VYFmIcC3ewQVImrcmTy+KBCwXBNGOVR0fgqDKUHvQnd9FBZVVPYo7eOCggBY53RQ7t zA/1j4W6iPoaDiYXKtcXe+2HRm5agQF+kSm+DBfoK8/ZSX3kw/KbFsw28hEzPxZNsmrg3VK+UBjX TVRV/kPoJSead6ARM731ywHyS2qMRFUby9BTrv0HarMd5U6nKCysAdCcXTGypuS3NotnF2jZjHtG qEjLyfL8fjDcnz4GOvrFo4UhDmPVZ3K3NXsjkUC+PHpYvqIhcXGx0H9SgMx4wIgk8xh2HyX29GMB PkPwWpcGPKKZw7/EbT8rVucipw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SECETI Certificatore per la firma digitale Issuer L: Milano Issuer O: SECETI S.p.A. Issuer C: IT Subject CN: SECETI Certificatore per la firma digitale Subject L: Milano Subject O: SECETI S.p.A. Subject C: IT Valid from: Thu Sep 14 18:07:00 CEST 2000 Valid to: Wed Sep 15 01:59:00 CEST 2010 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C2:DF:F5:3D:71:91:58:CD:BB:FB:17:3B:55:E4:B2:62:88:93:72:87:F8:30:D4:00:AF:EE:11:13:82:E6:78:B3:B4:0F:24 :12:4D:C5:8A:E0:95:05:2F:C6:4F:2D:BC:3B:50:5E:9B:DC:2F:4A:C9:88:9D:8A:7F:50:2E:92:A8:50:27:3F:79:F4:20:DC:3A:BA:D5:7E:98:32:1B:DD:52:07:67:FC:92:E0:E9:1A:2A:2B:91:7E:93:C0:CF:8D:F6:C7:60:26:A7:2F :96:1F:1E:DA:F1:71:B1:90:E4:5B:3C:FB:39:6C:AF:9A:CF:B8:1C:B4:BE:6A:60:CC:EC:0D:86:DA:C7:69:7B:61:54:0D:C3:51:36:9E:FD:62:64:9C:51:35:8C:E5:84:45:9B:71:3B:AC:42:60:E8:BB:3F:AA:A5:6F:B0:21:96:F9:A 3:0B:5F:42:FA:B2:15:D6:C1:24:51:85:FA:FF:0E:5C:88:58:20:7C:17:62:DD:43:63:AB:9E:06:A1:F2:AD:4A:E7:74:B0:2E:D6:17:EA:BA:B9:71:97:A3:45:8B:7C:C0:C1:FE:7F:3A:DE:F1:AD:AA:FD:C1:5F:F1:BA:74:E0:50:7 2:A0:51:8F:2A:25:82:B0:D0:D2:1F:2F:BA:2F:F3:2C:15:A4:03:7A:78:B1:9B:97:92:6E:71:75:02:03:01:00:01 CRL Distribution Points ldap://dir.firmadigitale.seceti.it/cn%3DSECETI%20Certificatore%20per%20la%20firma%20digitale %2Co%3DSECETI%20S%2Ep%2EA%2E%2Cc%3DIT?certificateRevocationList;binary Certificate Policies Policy OID: 1.3.142.1.1.1 CPS pointer: http://www.firmadigitale.seceti.it/Manuali/ManualeOperativoFD.pdf Subject Key Identifier EE:3B:62:76:01:3A:16:25:5D:EA:2D:B9:F3:34:B0:49:11:11:79:5F Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: FF:3E:60:67:B6:FC:56:7C:CF:9E:B7:11:32:1E:1B:C3:AF:39:2D:DA:12:82:9A:AE:3E:97:D3:A9:0 9:B1:EE:02 ITALIA (ITALY) - Trusted List ID: ID100001 Page 338 ETSI 2014 - TSL HR - PDF/A-1b generator Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2000-09-14T17:07:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 339 ETSI 2014 - TSL HR - PDF/A-1b generator 24 - TSP: SIA S.p.A. TSP Name Name [ en ] SIA S.p.A. Name [ it ] SIA S.p.A. Name [ en ] SIA Name [ en ] VATIT-10596540152 Street Address [ en ] via torquato taramelli 26 Locality [ en ] milano Postal Code [ en ] 20124 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI https://ca.sia.it URI mailto:[email protected] TSP Information URI URI [ en ] https://ca.sia.it 24.1 - Service : CN=SIA - Servizio di Certificazione per la Firma Digitale,L=Milano,O=SIA S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] CN=SIA - Servizio di Certificazione per la Firma Digitale,L=Milano,O=SIA S.p.A.,C=IT Service Name Name Service digital identities ITALIA (ITALY) - Trusted List ID: ID100001 Page 340 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 60 X509 Certificate -----BEGIN CERTIFICATE----MIIFeTCCBGGgAwIBAgIBPDANBgkqhkiG9w0BAQUFADB0MQswCQYDVQQGEwJJVDETMBEGA1UEChMK U0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMT8wPQYDVQQDEzZTSUEgLSBTZXJ2aXppbyBkaSBD ZXJ0aWZpY2F6aW9uZSBwZXIgbGEgRmlybWEgRGlnaXRhbGUwHhcNMDEwMTAxMDcwMjAwWhcNMTAx MjMxMjM1OTAwWjB0MQswCQYDVQQGEwJJVDETMBEGA1UEChMKU0lBIFMucC5BLjEPMA0GA1UEBxMG TWlsYW5vMT8wPQYDVQQDEzZTSUEgLSBTZXJ2aXppbyBkaSBDZXJ0aWZpY2F6aW9uZSBwZXIgbGEg RmlybWEgRGlnaXRhbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLtwFVu4c+6fM 1cJQpSqz85KoPY5RXIk7sArPiHn/9QEIgu9enYNiOyw9pL3kcrlck0FSqA8h8TEOPmbuRaINZMaL HvJVKxuQDsaZk9S+9Qj9E43Z+rsRV2k2b0ooLIQB9Lk2aS2nU6ejnVnOcOctrLaeCM7QFEBl6raV kZh7zfYAAV15hpJ4WYbRonNjZT6Kpz6QYh/JUJDagUb8SFJ2ZevYGWiYe2mjO5+/5v7BCunDQKdV jGHFSAC8HwTiGCs53R7CAcBfDrH/PKE05TNjGWhq+7DOdhmMRLaiB8uIkqZG1GR0PmxXXi8hGA4o Fa3ZfRab1mspScYAx2rcQbSXAgMBAAGjggIUMIICEDAdBgNVHQ4EFgQUxWQeoqh0QemK6iXB29RR HYjLbp8wgcQGA1UdHwSBvDCBuTAtoCugKYYnaHR0cHM6Ly9jYS5zaWEuaXQvY2dpLWJpbi9haXBh ZHMvZ2V0Q1JMMIGHoIGEoIGBhn9sZGFwOi8vbGRhcC5zaWEuaXQvY249U0lBIC0gU2Vydml6aW8g ZGkgQ2VydGlmaWNhemlvbmUgcGVyIGxhIEZpcm1hIERpZ2l0YWxlLG89U0lBIFMucC5BLixjPUlU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MIIBBQYDVR0gBIH9MIH6MIH3BgYrgQcB AQUwgewwgbQGCCsGAQUFBwICMIGnGoGkTCd1c28gZGVpIGNlcnRpZmljYXRpIGVtZXNzaSBkYWxs YSBTSUEgUy5wLkEuIChSRUEgbi45Njg4ODgsIFRyaWIuIE1pbGFubyBuLjE3NjQ4MSwgRFVOUyBu LjQyOC02MTEtMzEzKSBlJyBzb2dnZXR0byBhbGxlIGNvbmRpemlvbmkgcHJlY2lzYXRlIG5lbCBN YW51YWxlIE9wZXJhdGl2by4wMwYIKwYBBQUHAgEWJ2h0dHBzOi8vY2Euc2lhLml0L2FpcGFkcy9y ZXBvc2l0b3J5L0NQUzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0B AQUFAAOCAQEALRdTG8/srJYKRugdoPsT86CxZ9doTCmDLmTcjSpdAPxIXY9DXOYxXQZgZibo9vx5 hX2bi/4amO7/IT1nlIYsDOkE3Hoq7nHcO24QAMOURwsjdaQxD2jDQRdIdOi0CMIebZKlumyTTYCM 3OpfR0KgZAuZxAa8sNjOq9FJQ3ZYu4R252aXGGgpoVsjUpWka+RWynNbyCUGGcElsQBmsw841aij 4rYXlWDAIJWMsH5xSUu9OdcgpRiYPkTzDi5DO9X+AXxuMYA5OYY7CgTjWGUpHrGJIlAhCsmM4zaS pKbXZK2YVFZ8lT3xH7HIufKXy1Nyn2gepXr0hs/aewg2MbrnDw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SIA - Servizio di Certificazione per la Firma Digitale Issuer L: Milano Issuer O: SIA S.p.A. Issuer C: IT Subject CN: SIA - Servizio di Certificazione per la Firma Digitale Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Valid from: Mon Jan 01 08:02:00 CET 2001 Valid to: Sat Jan 01 00:59:00 CET 2011 Public Key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ubject Key Identifier C5:64:1E:A2:A8:74:41:E9:8A:EA:25:C1:DB:D4:51:1D:88:CB:6E:9F CRL Distribution Points https://ca.sia.it/cgi-bin/aipads/getCRL ldap://ldap.sia.it/cn=SIA - Servizio di Certificazione per la Firma Digitale,o=SIA S.p.A.,c=IT?certificateRevocationList;binary Certificate Policies Policy OID: 1.3.135.1.1.5 CPS text: [L'uso dei certificati emessi dalla SIA S.p.A. (REA n.968888, Trib. Milano n.176481, DUNS n.428-611-313) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://ca.sia.it/aipads/repository/CPS ITALIA (ITALY) - Trusted List ID: ID100001 Page 341 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B5:C2:4B:76:9B:D7:FF:7B:60:E6:FE:9E:70:7D:B3:1A:0A:81:F3:6B:9F:97:E4:ED:3B:40:18:81:CE :F4:7C:37 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2002-12-31T23:01:01Z 24.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] https://portal.actalis.it/Info/qcsp-english [ en ] Actalis S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Scheme Territory IT 24.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=SIA - Servizio di Certificazione per la Firma Digitale,L=Milano,O=SIA S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: ITALIA (ITALY) - Trusted List ID: ID100001 SIA - Servizio di Certificazione per la Firma Digitale Page 342 ETSI 2014 - TSL HR - PDF/A-1b generator Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 60 X509 Certificate -----BEGIN CERTIFICATE----MIIFeTCCBGGgAwIBAgIBPDANBgkqhkiG9w0BAQUFADB0MQswCQYDVQQGEwJJVDETMBEGA1UEChMK U0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMT8wPQYDVQQDEzZTSUEgLSBTZXJ2aXppbyBkaSBD ZXJ0aWZpY2F6aW9uZSBwZXIgbGEgRmlybWEgRGlnaXRhbGUwHhcNMDEwMTAxMDcwMjAwWhcNMTAx MjMxMjM1OTAwWjB0MQswCQYDVQQGEwJJVDETMBEGA1UEChMKU0lBIFMucC5BLjEPMA0GA1UEBxMG TWlsYW5vMT8wPQYDVQQDEzZTSUEgLSBTZXJ2aXppbyBkaSBDZXJ0aWZpY2F6aW9uZSBwZXIgbGEg RmlybWEgRGlnaXRhbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLtwFVu4c+6fM 1cJQpSqz85KoPY5RXIk7sArPiHn/9QEIgu9enYNiOyw9pL3kcrlck0FSqA8h8TEOPmbuRaINZMaL HvJVKxuQDsaZk9S+9Qj9E43Z+rsRV2k2b0ooLIQB9Lk2aS2nU6ejnVnOcOctrLaeCM7QFEBl6raV kZh7zfYAAV15hpJ4WYbRonNjZT6Kpz6QYh/JUJDagUb8SFJ2ZevYGWiYe2mjO5+/5v7BCunDQKdV jGHFSAC8HwTiGCs53R7CAcBfDrH/PKE05TNjGWhq+7DOdhmMRLaiB8uIkqZG1GR0PmxXXi8hGA4o Fa3ZfRab1mspScYAx2rcQbSXAgMBAAGjggIUMIICEDAdBgNVHQ4EFgQUxWQeoqh0QemK6iXB29RR HYjLbp8wgcQGA1UdHwSBvDCBuTAtoCugKYYnaHR0cHM6Ly9jYS5zaWEuaXQvY2dpLWJpbi9haXBh ZHMvZ2V0Q1JMMIGHoIGEoIGBhn9sZGFwOi8vbGRhcC5zaWEuaXQvY249U0lBIC0gU2Vydml6aW8g ZGkgQ2VydGlmaWNhemlvbmUgcGVyIGxhIEZpcm1hIERpZ2l0YWxlLG89U0lBIFMucC5BLixjPUlU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MIIBBQYDVR0gBIH9MIH6MIH3BgYrgQcB AQUwgewwgbQGCCsGAQUFBwICMIGnGoGkTCd1c28gZGVpIGNlcnRpZmljYXRpIGVtZXNzaSBkYWxs YSBTSUEgUy5wLkEuIChSRUEgbi45Njg4ODgsIFRyaWIuIE1pbGFubyBuLjE3NjQ4MSwgRFVOUyBu LjQyOC02MTEtMzEzKSBlJyBzb2dnZXR0byBhbGxlIGNvbmRpemlvbmkgcHJlY2lzYXRlIG5lbCBN YW51YWxlIE9wZXJhdGl2by4wMwYIKwYBBQUHAgEWJ2h0dHBzOi8vY2Euc2lhLml0L2FpcGFkcy9y ZXBvc2l0b3J5L0NQUzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0B AQUFAAOCAQEALRdTG8/srJYKRugdoPsT86CxZ9doTCmDLmTcjSpdAPxIXY9DXOYxXQZgZibo9vx5 hX2bi/4amO7/IT1nlIYsDOkE3Hoq7nHcO24QAMOURwsjdaQxD2jDQRdIdOi0CMIebZKlumyTTYCM 3OpfR0KgZAuZxAa8sNjOq9FJQ3ZYu4R252aXGGgpoVsjUpWka+RWynNbyCUGGcElsQBmsw841aij 4rYXlWDAIJWMsH5xSUu9OdcgpRiYPkTzDi5DO9X+AXxuMYA5OYY7CgTjWGUpHrGJIlAhCsmM4zaS pKbXZK2YVFZ8lT3xH7HIufKXy1Nyn2gepXr0hs/aewg2MbrnDw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SIA - Servizio di Certificazione per la Firma Digitale Issuer L: Milano Issuer O: SIA S.p.A. Issuer C: IT Subject CN: SIA - Servizio di Certificazione per la Firma Digitale Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Valid from: Mon Jan 01 08:02:00 CET 2001 Valid to: Sat Jan 01 00:59:00 CET 2011 Public Key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ubject Key Identifier C5:64:1E:A2:A8:74:41:E9:8A:EA:25:C1:DB:D4:51:1D:88:CB:6E:9F CRL Distribution Points https://ca.sia.it/cgi-bin/aipads/getCRL ldap://ldap.sia.it/cn=SIA - Servizio di Certificazione per la Firma Digitale,o=SIA S.p.A.,c=IT?certificateRevocationList;binary ITALIA (ITALY) - Trusted List ID: ID100001 Page 343 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate Policies Policy OID: 1.3.135.1.1.5 CPS text: [L'uso dei certificati emessi dalla SIA S.p.A. (REA n.968888, Trib. Milano n.176481, DUNS n.428-611-313) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://ca.sia.it/aipads/repository/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: B5:C2:4B:76:9B:D7:FF:7B:60:E6:FE:9E:70:7D:B3:1A:0A:81:F3:6B:9F:97:E4:ED:3B:40:18:81:CE :F4:7C:37 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2002-12-31T23:00:01Z 24.1.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=SIA - Servizio di Certificazione per la Firma Digitale,L=Milano,O=SIA S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SIA - Servizio di Certificazione per la Firma Digitale Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 60 ITALIA (ITALY) - Trusted List ID: ID100001 Page 344 ETSI 2014 - TSL HR - PDF/A-1b generator X509 Certificate -----BEGIN CERTIFICATE----MIIFeTCCBGGgAwIBAgIBPDANBgkqhkiG9w0BAQUFADB0MQswCQYDVQQGEwJJVDETMBEGA1UEChMK U0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMT8wPQYDVQQDEzZTSUEgLSBTZXJ2aXppbyBkaSBD ZXJ0aWZpY2F6aW9uZSBwZXIgbGEgRmlybWEgRGlnaXRhbGUwHhcNMDEwMTAxMDcwMjAwWhcNMTAx MjMxMjM1OTAwWjB0MQswCQYDVQQGEwJJVDETMBEGA1UEChMKU0lBIFMucC5BLjEPMA0GA1UEBxMG TWlsYW5vMT8wPQYDVQQDEzZTSUEgLSBTZXJ2aXppbyBkaSBDZXJ0aWZpY2F6aW9uZSBwZXIgbGEg RmlybWEgRGlnaXRhbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLtwFVu4c+6fM 1cJQpSqz85KoPY5RXIk7sArPiHn/9QEIgu9enYNiOyw9pL3kcrlck0FSqA8h8TEOPmbuRaINZMaL HvJVKxuQDsaZk9S+9Qj9E43Z+rsRV2k2b0ooLIQB9Lk2aS2nU6ejnVnOcOctrLaeCM7QFEBl6raV kZh7zfYAAV15hpJ4WYbRonNjZT6Kpz6QYh/JUJDagUb8SFJ2ZevYGWiYe2mjO5+/5v7BCunDQKdV jGHFSAC8HwTiGCs53R7CAcBfDrH/PKE05TNjGWhq+7DOdhmMRLaiB8uIkqZG1GR0PmxXXi8hGA4o Fa3ZfRab1mspScYAx2rcQbSXAgMBAAGjggIUMIICEDAdBgNVHQ4EFgQUxWQeoqh0QemK6iXB29RR HYjLbp8wgcQGA1UdHwSBvDCBuTAtoCugKYYnaHR0cHM6Ly9jYS5zaWEuaXQvY2dpLWJpbi9haXBh ZHMvZ2V0Q1JMMIGHoIGEoIGBhn9sZGFwOi8vbGRhcC5zaWEuaXQvY249U0lBIC0gU2Vydml6aW8g ZGkgQ2VydGlmaWNhemlvbmUgcGVyIGxhIEZpcm1hIERpZ2l0YWxlLG89U0lBIFMucC5BLixjPUlU P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q7YmluYXJ5MIIBBQYDVR0gBIH9MIH6MIH3BgYrgQcB AQUwgewwgbQGCCsGAQUFBwICMIGnGoGkTCd1c28gZGVpIGNlcnRpZmljYXRpIGVtZXNzaSBkYWxs YSBTSUEgUy5wLkEuIChSRUEgbi45Njg4ODgsIFRyaWIuIE1pbGFubyBuLjE3NjQ4MSwgRFVOUyBu LjQyOC02MTEtMzEzKSBlJyBzb2dnZXR0byBhbGxlIGNvbmRpemlvbmkgcHJlY2lzYXRlIG5lbCBN YW51YWxlIE9wZXJhdGl2by4wMwYIKwYBBQUHAgEWJ2h0dHBzOi8vY2Euc2lhLml0L2FpcGFkcy9y ZXBvc2l0b3J5L0NQUzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0B AQUFAAOCAQEALRdTG8/srJYKRugdoPsT86CxZ9doTCmDLmTcjSpdAPxIXY9DXOYxXQZgZibo9vx5 hX2bi/4amO7/IT1nlIYsDOkE3Hoq7nHcO24QAMOURwsjdaQxD2jDQRdIdOi0CMIebZKlumyTTYCM 3OpfR0KgZAuZxAa8sNjOq9FJQ3ZYu4R252aXGGgpoVsjUpWka+RWynNbyCUGGcElsQBmsw841aij 4rYXlWDAIJWMsH5xSUu9OdcgpRiYPkTzDi5DO9X+AXxuMYA5OYY7CgTjWGUpHrGJIlAhCsmM4zaS pKbXZK2YVFZ8lT3xH7HIufKXy1Nyn2gepXr0hs/aewg2MbrnDw== -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SIA - Servizio di Certificazione per la Firma Digitale Issuer L: Milano Issuer O: SIA S.p.A. Issuer C: IT Subject CN: SIA - Servizio di Certificazione per la Firma Digitale Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Valid from: Mon Jan 01 08:02:00 CET 2001 Valid to: Sat Jan 01 00:59:00 CET 2011 Public Key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ubject Key Identifier C5:64:1E:A2:A8:74:41:E9:8A:EA:25:C1:DB:D4:51:1D:88:CB:6E:9F CRL Distribution Points https://ca.sia.it/cgi-bin/aipads/getCRL ldap://ldap.sia.it/cn=SIA - Servizio di Certificazione per la Firma Digitale,o=SIA S.p.A.,c=IT?certificateRevocationList;binary Certificate Policies Policy OID: 1.3.135.1.1.5 CPS text: [L'uso dei certificati emessi dalla SIA S.p.A. (REA n.968888, Trib. Milano n.176481, DUNS n.428-611-313) e' soggetto alle condizioni precisate nel Manuale Operativo.] CPS pointer: https://ca.sia.it/aipads/repository/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 345 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: B5:C2:4B:76:9B:D7:FF:7B:60:E6:FE:9E:70:7D:B3:1A:0A:81:F3:6B:9F:97:E4:ED:3B:40:18:81:CE :F4:7C:37 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-01-01T08:02:00Z 24.2 - Service : CN=SIA Secure Time Stamping CA,L=Milano,O=SIA S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=SIA Secure Time Stamping CA,L=Milano,O=SIA S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 54 X509 Certificate -----BEGIN CERTIFICATE----MIID9TCCAt2gAwIBAgIBNjANBgkqhkiG9w0BAQUFADBZMQswCQYDVQQGEwJJVDETMBEGA1UEChMK U0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMSQwIgYDVQQDExtTSUEgU2VjdXJlIFRpbWUgU3Rh bXBpbmcgQ0EwHhcNMDAwNjAxMDg0NzAwWhcNMDMwNjAxMjM1OTAwWjBZMQswCQYDVQQGEwJJVDET MBEGA1UEChMKU0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMSQwIgYDVQQDExtTSUEgU2VjdXJl IFRpbWUgU3RhbXBpbmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/W66EIR7 5NMkS8QCRSp5tU7JbeRbr87TN64+wXzGqpTFkIdEPiYPDYp2DfDrEN+XwNJ+70wVuXAIRSxFYL4Y jlBjdywiHtpUsfNAHLCoj//3Zk3vg9rrQyNCESuNB3Gm1zplxVuuz5IJeVV9i92Wgmcn8LzAU8PY VmvXeiHZoudgFdVGOBuVDQllnS8seK2VjfDqpiB+y0Z7metca1ewNu9JDLpV3B5O1/WqlYxsT7+5 18s4lUSP9DwZq+eB2i2JM9cRNYF6j1If5uiqeK/WhxxZncnKOUTU88gDCKfmLjfclbzDzsznBZ4+ E5vZW47Ld11Ce2C+ANHHeEiU3+n/AgMBAAGjgccwgcQwHQYDVR0OBBYEFOS1ugWeSWYodp4g8gDC PBxbqMM3MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHBzOi8vY2Euc2lhLml0L3NlY3RzL3JlcG9zaXRv cnkvQ1JMMEkGA1UdIARCMEAwPgYGK4EHAQEEMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vY2Euc2lh Lml0L3NlY3RzL3JlcG9zaXRvcnkvQ1BTMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEG MA0GCSqGSIb3DQEBBQUAA4IBAQBsgAdWuw0xDHMBIzAncqgOybBPuIiBlvfTJOeIt9EByAmiqr8H R/cTUIJ9Fa64AlVEzzd+5Nfar/E4jF+6n+T+WaMQawueT5IJMH5H9Qy2eu+yT/PMChs8eIOPKoDj dBJfnS7E5Py3Cq3ZweWNAUOQZ5qEk2vddvpAF70TPwKnqGzC7+GZU1v3+OOpU0eavFDeDoxTI/RI eEj1IHLAHR6mYdJz1fgyyjbr6JTgsVKfxNHlojT4LOTe+rYnXPdrJ4Hp4OhLP5i+XqolA4uvW5s7 PKKDcuZgoU9hIv0xAdc62Ki96OPmxkbZyKq9/mflz8Lh6vfJCZIxGLilSM8+vFw/ -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SIA Secure Time Stamping CA Issuer L: Milano Issuer O: SIA S.p.A. Issuer C: IT Subject CN: SIA Secure Time Stamping CA Subject L: Milano ITALIA (ITALY) - Trusted List ID: ID100001 Page 346 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: SIA S.p.A. Subject C: IT Valid from: Thu Jun 01 10:47:00 CEST 2000 Valid to: Mon Jun 02 01:59:00 CEST 2003 Public Key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ubject Key Identifier E4:B5:BA:05:9E:49:66:28:76:9E:20:F2:00:C2:3C:1C:5B:A8:C3:37 CRL Distribution Points https://ca.sia.it/sects/repository/CRL Certificate Policies Policy OID: 1.3.135.1.1.4 CPS pointer: https://ca.sia.it/sects/repository/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: DF:75:C7:A3:64:BF:16:1F:D7:74:32:BA:4F:F3:94:A8:13:5D:C0:3C:1D:03:D5:62:EE:5B:B1:A1:47 :65:E4:EA Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2002-12-31T23:01:01Z 24.2.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] https://portal.actalis.it/Info/qcsp-english [ en ] Actalis S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 347 ETSI 2014 - TSL HR - PDF/A-1b generator Scheme Territory IT 24.2.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=SIA Secure Time Stamping CA,L=Milano,O=SIA S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SIA Secure Time Stamping CA Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 54 X509 Certificate -----BEGIN CERTIFICATE----MIID9TCCAt2gAwIBAgIBNjANBgkqhkiG9w0BAQUFADBZMQswCQYDVQQGEwJJVDETMBEGA1UEChMK U0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMSQwIgYDVQQDExtTSUEgU2VjdXJlIFRpbWUgU3Rh bXBpbmcgQ0EwHhcNMDAwNjAxMDg0NzAwWhcNMDMwNjAxMjM1OTAwWjBZMQswCQYDVQQGEwJJVDET MBEGA1UEChMKU0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMSQwIgYDVQQDExtTSUEgU2VjdXJl IFRpbWUgU3RhbXBpbmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/W66EIR7 5NMkS8QCRSp5tU7JbeRbr87TN64+wXzGqpTFkIdEPiYPDYp2DfDrEN+XwNJ+70wVuXAIRSxFYL4Y jlBjdywiHtpUsfNAHLCoj//3Zk3vg9rrQyNCESuNB3Gm1zplxVuuz5IJeVV9i92Wgmcn8LzAU8PY VmvXeiHZoudgFdVGOBuVDQllnS8seK2VjfDqpiB+y0Z7metca1ewNu9JDLpV3B5O1/WqlYxsT7+5 18s4lUSP9DwZq+eB2i2JM9cRNYF6j1If5uiqeK/WhxxZncnKOUTU88gDCKfmLjfclbzDzsznBZ4+ E5vZW47Ld11Ce2C+ANHHeEiU3+n/AgMBAAGjgccwgcQwHQYDVR0OBBYEFOS1ugWeSWYodp4g8gDC PBxbqMM3MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHBzOi8vY2Euc2lhLml0L3NlY3RzL3JlcG9zaXRv cnkvQ1JMMEkGA1UdIARCMEAwPgYGK4EHAQEEMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vY2Euc2lh Lml0L3NlY3RzL3JlcG9zaXRvcnkvQ1BTMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEG MA0GCSqGSIb3DQEBBQUAA4IBAQBsgAdWuw0xDHMBIzAncqgOybBPuIiBlvfTJOeIt9EByAmiqr8H R/cTUIJ9Fa64AlVEzzd+5Nfar/E4jF+6n+T+WaMQawueT5IJMH5H9Qy2eu+yT/PMChs8eIOPKoDj dBJfnS7E5Py3Cq3ZweWNAUOQZ5qEk2vddvpAF70TPwKnqGzC7+GZU1v3+OOpU0eavFDeDoxTI/RI eEj1IHLAHR6mYdJz1fgyyjbr6JTgsVKfxNHlojT4LOTe+rYnXPdrJ4Hp4OhLP5i+XqolA4uvW5s7 PKKDcuZgoU9hIv0xAdc62Ki96OPmxkbZyKq9/mflz8Lh6vfJCZIxGLilSM8+vFw/ -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SIA Secure Time Stamping CA Issuer L: Milano Issuer O: SIA S.p.A. Issuer C: IT Subject CN: SIA Secure Time Stamping CA Subject L: Milano ITALIA (ITALY) - Trusted List ID: ID100001 Page 348 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: SIA S.p.A. Subject C: IT Valid from: Thu Jun 01 10:47:00 CEST 2000 Valid to: Mon Jun 02 01:59:00 CEST 2003 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:CA:FD:6E:BA:10:84:7B:E4:D3:24:4B:C4:02:45:2A:79:B5:4E:C9:6D:E4:5B:AF:CE:D3:37:AE:3E:C1:7C:C6:AA:94: C5:90:87:44:3E:26:0F:0D:8A:76:0D:F0:EB:10:DF:97:C0:D2:7E:EF:4C:15:B9:70:08:45:2C:45:60:BE:18:8E:50:63:77:2C:22:1E:DA:54:B1:F3:40:1C:B0:A8:8F:FF:F7:66:4D:EF:83:DA:EB:43:23:42:11:2B:8D:07:71:A6:D7:3A :65:C5:5B:AE:CF:92:09:79:55:7D:8B:DD:96:82:67:27:F0:BC:C0:53:C3:D8:56:6B:D7:7A:21:D9:A2:E7:60:15:D5:46:38:1B:95:0D:09:65:9D:2F:2C:78:AD:95:8D:F0:EA:A6:20:7E:CB:46:7B:99:EB:5C:6B:57:B0:36:EF:49:0C :BA:55:DC:1E:4E:D7:F5:AA:95:8C:6C:4F:BF:B9:D7:CB:38:95:44:8F:F4:3C:19:AB:E7:81:DA:2D:89:33:D7:11:35:81:7A:8F:52:1F:E6:E8:AA:78:AF:D6:87:1C:59:9D:C9:CA:39:44:D4:F3:C8:03:08:A7:E6:2E:37:DC:95:BC: C3:CE:CC:E7:05:9E:3E:13:9B:D9:5B:8E:CB:77:5D:42:7B:60:BE:00:D1:C7:78:48:94:DF:E9:FF:02:03:01:00:01 Subject Key Identifier E4:B5:BA:05:9E:49:66:28:76:9E:20:F2:00:C2:3C:1C:5B:A8:C3:37 CRL Distribution Points https://ca.sia.it/sects/repository/CRL Certificate Policies Policy OID: 1.3.135.1.1.4 CPS pointer: https://ca.sia.it/sects/repository/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: DF:75:C7:A3:64:BF:16:1F:D7:74:32:BA:4F:F3:94:A8:13:5D:C0:3C:1D:03:D5:62:EE:5B:B1:A1:47 :65:E4:EA Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2002-12-31T23:00:01Z 24.2.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=SIA Secure Time Stamping CA,L=Milano,O=SIA S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SIA Secure Time Stamping CA Subject L: Milano Subject O: SIA S.p.A. Subject C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 349 ETSI 2014 - TSL HR - PDF/A-1b generator Certificate fields details Version: 3 Serial Number: 54 X509 Certificate -----BEGIN CERTIFICATE----MIID9TCCAt2gAwIBAgIBNjANBgkqhkiG9w0BAQUFADBZMQswCQYDVQQGEwJJVDETMBEGA1UEChMK U0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMSQwIgYDVQQDExtTSUEgU2VjdXJlIFRpbWUgU3Rh bXBpbmcgQ0EwHhcNMDAwNjAxMDg0NzAwWhcNMDMwNjAxMjM1OTAwWjBZMQswCQYDVQQGEwJJVDET MBEGA1UEChMKU0lBIFMucC5BLjEPMA0GA1UEBxMGTWlsYW5vMSQwIgYDVQQDExtTSUEgU2VjdXJl IFRpbWUgU3RhbXBpbmcgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/W66EIR7 5NMkS8QCRSp5tU7JbeRbr87TN64+wXzGqpTFkIdEPiYPDYp2DfDrEN+XwNJ+70wVuXAIRSxFYL4Y jlBjdywiHtpUsfNAHLCoj//3Zk3vg9rrQyNCESuNB3Gm1zplxVuuz5IJeVV9i92Wgmcn8LzAU8PY VmvXeiHZoudgFdVGOBuVDQllnS8seK2VjfDqpiB+y0Z7metca1ewNu9JDLpV3B5O1/WqlYxsT7+5 18s4lUSP9DwZq+eB2i2JM9cRNYF6j1If5uiqeK/WhxxZncnKOUTU88gDCKfmLjfclbzDzsznBZ4+ E5vZW47Ld11Ce2C+ANHHeEiU3+n/AgMBAAGjgccwgcQwHQYDVR0OBBYEFOS1ugWeSWYodp4g8gDC PBxbqMM3MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHBzOi8vY2Euc2lhLml0L3NlY3RzL3JlcG9zaXRv cnkvQ1JMMEkGA1UdIARCMEAwPgYGK4EHAQEEMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vY2Euc2lh Lml0L3NlY3RzL3JlcG9zaXRvcnkvQ1BTMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEG MA0GCSqGSIb3DQEBBQUAA4IBAQBsgAdWuw0xDHMBIzAncqgOybBPuIiBlvfTJOeIt9EByAmiqr8H R/cTUIJ9Fa64AlVEzzd+5Nfar/E4jF+6n+T+WaMQawueT5IJMH5H9Qy2eu+yT/PMChs8eIOPKoDj dBJfnS7E5Py3Cq3ZweWNAUOQZ5qEk2vddvpAF70TPwKnqGzC7+GZU1v3+OOpU0eavFDeDoxTI/RI eEj1IHLAHR6mYdJz1fgyyjbr6JTgsVKfxNHlojT4LOTe+rYnXPdrJ4Hp4OhLP5i+XqolA4uvW5s7 PKKDcuZgoU9hIv0xAdc62Ki96OPmxkbZyKq9/mflz8Lh6vfJCZIxGLilSM8+vFw/ -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SIA Secure Time Stamping CA Issuer L: Milano Issuer O: SIA S.p.A. Issuer C: IT Subject CN: SIA Secure Time Stamping CA Subject L: Milano Subject O: SIA S.p.A. Subject C: IT Valid from: Thu Jun 01 10:47:00 CEST 2000 Valid to: Mon Jun 02 01:59:00 CEST 2003 Public Key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ubject Key Identifier E4:B5:BA:05:9E:49:66:28:76:9E:20:F2:00:C2:3C:1C:5B:A8:C3:37 CRL Distribution Points https://ca.sia.it/sects/repository/CRL Certificate Policies Policy OID: 1.3.135.1.1.4 CPS pointer: https://ca.sia.it/sects/repository/CPS Basic Constraints IsCA: true Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 350 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: DF:75:C7:A3:64:BF:16:1F:D7:74:32:BA:4F:F3:94:A8:13:5D:C0:3C:1D:03:D5:62:EE:5B:B1:A1:47 :65:E4:EA Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2000-06-01T10:47:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 351 ETSI 2014 - TSL HR - PDF/A-1b generator 25 - TSP: SSB S.p.A. TSP Name Name [ en ] SSB S.p.A. Name [ it ] SSB S.p.A. Name [ en ] SSB Name [ it ] SSB Name [ en ] VATIT-10596540152 Name [ it ] VATIT-10596540152 Street Address [ en ] via faravelli 14 Locality [ en ] milano Postal Code [ en ] 20149 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI https://www.ssb.net URI mailto:[email protected] TSP Information URI URI [ en ] https://portal.actalis.it/Info/qcsp-english 25.1 - Service : CN=SSB Firma Qualificata,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 352 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] CN=SSB Firma Qualificata,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service digital identities Certificate fields details Version: 3 Serial Number: 151 X509 Certificate -----BEGIN CERTIFICATE----MIIF+zCCBOOgAwIBAgICAJcwDQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSVQxEzARBgNVBAoT ClNTQiBTLnAuQS4xIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5T ZXJ2aXppIGRpIFBLSTEeMBwGA1UEAxMVU1NCIEZpcm1hIFF1YWxpZmljYXRhMB4XDTAxMDIyMzE0 NDAwMFoXDTEwMDIyMzIzNTkwMFowfTELMAkGA1UEBhMCSVQxEzARBgNVBAoTClNTQiBTLnAuQS4x IDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5TZXJ2aXppIGRpIFBL STEeMBwGA1UEAxMVU1NCIEZpcm1hIFF1YWxpZmljYXRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyqAJI+XPctaD7pFY74YkZKqwhdOrLgbYXfP+Nw0LoxJiMJLiTvvob6mHlWi3VfML 5gzzUMRJXsSGSUZ2RKqpC5sT722Og8VerBYjSn+DICI8foWEpWMW5nMX5cLPG7gbzjQnpmQnhDnP K6b7Lt2feMM2jDGfAZZ566DBcAsLuc0Cq9Ot6XkPQiASmbrKmuQ4fAew69RCE3tPzmpNOJ52F+AW u50Ct/uaZoGnJTB/bAv1xYl/vFTbBuKbNQklQ/7eQR4T7nbAmrmr8f30KYAUkTNMglxHs/j7OlzY RORL3rQskBWF9f3eGNVPiTQKLmDpYZZH3zh/4p6saZO/otkC2wIDAQABo4ICgzCCAn8wgawGA1Ud HwSBpDCBoTCBnqCBm6CBmIaBlWxkYXA6Ly9sZGFwLXBraS5zc2IubmV0L2NuPVNTQiUyMEZpcm1h JTIwUXVhbGlmaWNhdGEsb3U9U2Vydml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24lMjBB dXRob3JpdHksbz1TU0IlMjBTLnAuQS4sYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MDUG A1UdIAQuMCwwKgYHK0wEAwEFATAfMB0GCCsGAQUFBwIBFhFodHRwOi8vY2Euc3NiLm5ldDCBqAYD VR0SBIGgMIGdgQ9pbmZvLWNhQHNzYi5uZXSGgYlsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1T U0IlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91PVNlcnZpemklMjBkaSUyMFBLSSxvdT1DZXJ0aWZp Y2F0aW9uJTIwQXV0aG9yaXR5LG89U1NCJTIwUy5wLkEuLGM9SVQ/Y0FDZXJ0aWZpY2F0ZTCBqAYD VR0RBIGgMIGdgQ9pbmZvLWNhQHNzYi5uZXSGgYlsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1T U0IlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91PVNlcnZpemklMjBkaSUyMFBLSSxvdT1DZXJ0aWZp Y2F0aW9uJTIwQXV0aG9yaXR5LG89U1NCJTIwUy5wLkEuLGM9SVQ/Y0FDZXJ0aWZpY2F0ZTAdBgNV HQ4EFgQUSHEpCue6fKRlFO2bcvz2B4qAD4AwEgYDVR0TAQH/BAgwBgEB/wIBATAOBgNVHQ8BAf8E BAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAHO30o3V2oyU4vEzV8LexOYNTE4w0zMisFTrporNR97E OQHiZKHcWTyXhcNVpep5aFw7B2yslsZI4CrtTSaIHFRH8VWtb2EsK+xgYdJ6qbtckrGkA6YTy9Zx fYxqs1yWOPXe0Hwx0JhTdM0CUQ98LJWPCOZQgeu91jH+0jLOuY8aJX2Vikel0Y1+mihoUuK8ODh5 FMqLZQfBoLNnkF66BvqV5rCiNgryM7J4m+Yrq9nGN9w3Oi0QcnpHOSlgXbGVuaDs62fzyMIZcgn8 szovoBmuCK1HCdw3Ln/tjotN7RS/XWgfy1NS5MOtKJtfMJzy2umYtgC0bGAjUUJne8oqh64= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SSB Firma Qualificata Issuer OU: Servizi di PKI Issuer OU: Certification Authority Issuer O: SSB S.p.A. Issuer C: IT Subject CN: SSB Firma Qualificata Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Valid from: Fri Feb 23 15:40:00 CET 2001 Valid to: Wed Feb 24 00:59:00 CET 2010 Public Key: ITALIA (ITALY) - Trusted List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age 353 ETSI 2014 - TSL HR - PDF/A-1b generator CRL Distribution Points ldap://ldappki.ssb.net/cn=SSB%20Firma%20Qualificata,ou=Servizi%20di%20PKI,ou=Certification%20Autho rity,o=SSB%20S.p.A.,c=IT?certificateRevocationList Certificate Policies Policy OID: 1.3.76.4.3.1.5.1 CPS pointer: http://ca.ssb.net Issuer Alternative Name [email protected] Subject Alternative Name [email protected] ldap://ldappki.ssb.net/cn=SSB%20Firma%20Qualificata,ou=Servizi%20di%20PKI,ou=Certification%20Autho rity,o=SSB%20S.p.A.,c=IT?cACertificate Subject Key Identifier 48:71:29:0A:E7:BA:7C:A4:65:14:ED:9B:72:FC:F6:07:8A:80:0F:80 Basic Constraints IsCA: true - Path length: 1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 54:21:B3:BE:8F:BB:42:50:28:55:00:DC:63:60:55:46:82:A0:00:22:58:16:63:D3:61:0F:37:85:0F:C9: B0:43 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2002-12-31T23:01:01Z 25.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] https://portal.actalis.it/Info/qcsp-english [ en ] Actalis S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Scheme Territory ITALIA (ITALY) - Trusted List ID: ID100001 IT Page 354 ETSI 2014 - TSL HR - PDF/A-1b generator 25.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] CN=SSB Firma Qualificata,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SSB Firma Qualificata Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 151 X509 Certificate -----BEGIN CERTIFICATE----MIIF+zCCBOOgAwIBAgICAJcwDQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSVQxEzARBgNVBAoT ClNTQiBTLnAuQS4xIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5T ZXJ2aXppIGRpIFBLSTEeMBwGA1UEAxMVU1NCIEZpcm1hIFF1YWxpZmljYXRhMB4XDTAxMDIyMzE0 NDAwMFoXDTEwMDIyMzIzNTkwMFowfTELMAkGA1UEBhMCSVQxEzARBgNVBAoTClNTQiBTLnAuQS4x IDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5TZXJ2aXppIGRpIFBL STEeMBwGA1UEAxMVU1NCIEZpcm1hIFF1YWxpZmljYXRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyqAJI+XPctaD7pFY74YkZKqwhdOrLgbYXfP+Nw0LoxJiMJLiTvvob6mHlWi3VfML 5gzzUMRJXsSGSUZ2RKqpC5sT722Og8VerBYjSn+DICI8foWEpWMW5nMX5cLPG7gbzjQnpmQnhDnP K6b7Lt2feMM2jDGfAZZ566DBcAsLuc0Cq9Ot6XkPQiASmbrKmuQ4fAew69RCE3tPzmpNOJ52F+AW u50Ct/uaZoGnJTB/bAv1xYl/vFTbBuKbNQklQ/7eQR4T7nbAmrmr8f30KYAUkTNMglxHs/j7OlzY RORL3rQskBWF9f3eGNVPiTQKLmDpYZZH3zh/4p6saZO/otkC2wIDAQABo4ICgzCCAn8wgawGA1Ud HwSBpDCBoTCBnqCBm6CBmIaBlWxkYXA6Ly9sZGFwLXBraS5zc2IubmV0L2NuPVNTQiUyMEZpcm1h JTIwUXVhbGlmaWNhdGEsb3U9U2Vydml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24lMjBB dXRob3JpdHksbz1TU0IlMjBTLnAuQS4sYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MDUG A1UdIAQuMCwwKgYHK0wEAwEFATAfMB0GCCsGAQUFBwIBFhFodHRwOi8vY2Euc3NiLm5ldDCBqAYD VR0SBIGgMIGdgQ9pbmZvLWNhQHNzYi5uZXSGgYlsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1T U0IlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91PVNlcnZpemklMjBkaSUyMFBLSSxvdT1DZXJ0aWZp Y2F0aW9uJTIwQXV0aG9yaXR5LG89U1NCJTIwUy5wLkEuLGM9SVQ/Y0FDZXJ0aWZpY2F0ZTCBqAYD VR0RBIGgMIGdgQ9pbmZvLWNhQHNzYi5uZXSGgYlsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1T U0IlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91PVNlcnZpemklMjBkaSUyMFBLSSxvdT1DZXJ0aWZp Y2F0aW9uJTIwQXV0aG9yaXR5LG89U1NCJTIwUy5wLkEuLGM9SVQ/Y0FDZXJ0aWZpY2F0ZTAdBgNV HQ4EFgQUSHEpCue6fKRlFO2bcvz2B4qAD4AwEgYDVR0TAQH/BAgwBgEB/wIBATAOBgNVHQ8BAf8E BAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAHO30o3V2oyU4vEzV8LexOYNTE4w0zMisFTrporNR97E OQHiZKHcWTyXhcNVpep5aFw7B2yslsZI4CrtTSaIHFRH8VWtb2EsK+xgYdJ6qbtckrGkA6YTy9Zx fYxqs1yWOPXe0Hwx0JhTdM0CUQ98LJWPCOZQgeu91jH+0jLOuY8aJX2Vikel0Y1+mihoUuK8ODh5 FMqLZQfBoLNnkF66BvqV5rCiNgryM7J4m+Yrq9nGN9w3Oi0QcnpHOSlgXbGVuaDs62fzyMIZcgn8 szovoBmuCK1HCdw3Ln/tjotN7RS/XWgfy1NS5MOtKJtfMJzy2umYtgC0bGAjUUJne8oqh64= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SSB Firma Qualificata Issuer OU: Servizi di PKI Issuer OU: Certification Authority Issuer O: SSB S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 355 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: SSB Firma Qualificata Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Valid from: Fri Feb 23 15:40:00 CET 2001 Valid to: Wed Feb 24 00:59:00 CET 2010 Public Key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istribution Points ldap://ldappki.ssb.net/cn=SSB%20Firma%20Qualificata,ou=Servizi%20di%20PKI,ou=Certification%20Autho rity,o=SSB%20S.p.A.,c=IT?certificateRevocationList Certificate Policies Policy OID: 1.3.76.4.3.1.5.1 CPS pointer: http://ca.ssb.net Issuer Alternative Name [email protected] Subject Alternative Name [email protected] ldap://ldappki.ssb.net/cn=SSB%20Firma%20Qualificata,ou=Servizi%20di%20PKI,ou=Certification%20Autho rity,o=SSB%20S.p.A.,c=IT?cACertificate Subject Key Identifier 48:71:29:0A:E7:BA:7C:A4:65:14:ED:9B:72:FC:F6:07:8A:80:0F:80 Basic Constraints IsCA: true - Path length: 1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 54:21:B3:BE:8F:BB:42:50:28:55:00:DC:63:60:55:46:82:A0:00:22:58:16:63:D3:61:0F:37:85:0F:C9: B0:43 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2002-12-31T23:00:01Z 25.1.3 - History instance n.2 - Status: accredited Service Type Identifier ITALIA (ITALY) - Trusted List ID: ID100001 http://uri.etsi.org/TrstSvc/Svctype/CA/QC Page 356 ETSI 2014 - TSL HR - PDF/A-1b generator Service Name Name [ en ] CN=SSB Firma Qualificata,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: SSB Firma Qualificata Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 151 X509 Certificate -----BEGIN CERTIFICATE----MIIF+zCCBOOgAwIBAgICAJcwDQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSVQxEzARBgNVBAoT ClNTQiBTLnAuQS4xIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5T ZXJ2aXppIGRpIFBLSTEeMBwGA1UEAxMVU1NCIEZpcm1hIFF1YWxpZmljYXRhMB4XDTAxMDIyMzE0 NDAwMFoXDTEwMDIyMzIzNTkwMFowfTELMAkGA1UEBhMCSVQxEzARBgNVBAoTClNTQiBTLnAuQS4x IDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5TZXJ2aXppIGRpIFBL STEeMBwGA1UEAxMVU1NCIEZpcm1hIFF1YWxpZmljYXRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyqAJI+XPctaD7pFY74YkZKqwhdOrLgbYXfP+Nw0LoxJiMJLiTvvob6mHlWi3VfML 5gzzUMRJXsSGSUZ2RKqpC5sT722Og8VerBYjSn+DICI8foWEpWMW5nMX5cLPG7gbzjQnpmQnhDnP K6b7Lt2feMM2jDGfAZZ566DBcAsLuc0Cq9Ot6XkPQiASmbrKmuQ4fAew69RCE3tPzmpNOJ52F+AW u50Ct/uaZoGnJTB/bAv1xYl/vFTbBuKbNQklQ/7eQR4T7nbAmrmr8f30KYAUkTNMglxHs/j7OlzY RORL3rQskBWF9f3eGNVPiTQKLmDpYZZH3zh/4p6saZO/otkC2wIDAQABo4ICgzCCAn8wgawGA1Ud HwSBpDCBoTCBnqCBm6CBmIaBlWxkYXA6Ly9sZGFwLXBraS5zc2IubmV0L2NuPVNTQiUyMEZpcm1h JTIwUXVhbGlmaWNhdGEsb3U9U2Vydml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24lMjBB dXRob3JpdHksbz1TU0IlMjBTLnAuQS4sYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MDUG A1UdIAQuMCwwKgYHK0wEAwEFATAfMB0GCCsGAQUFBwIBFhFodHRwOi8vY2Euc3NiLm5ldDCBqAYD VR0SBIGgMIGdgQ9pbmZvLWNhQHNzYi5uZXSGgYlsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1T U0IlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91PVNlcnZpemklMjBkaSUyMFBLSSxvdT1DZXJ0aWZp Y2F0aW9uJTIwQXV0aG9yaXR5LG89U1NCJTIwUy5wLkEuLGM9SVQ/Y0FDZXJ0aWZpY2F0ZTCBqAYD VR0RBIGgMIGdgQ9pbmZvLWNhQHNzYi5uZXSGgYlsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1T U0IlMjBGaXJtYSUyMFF1YWxpZmljYXRhLG91PVNlcnZpemklMjBkaSUyMFBLSSxvdT1DZXJ0aWZp Y2F0aW9uJTIwQXV0aG9yaXR5LG89U1NCJTIwUy5wLkEuLGM9SVQ/Y0FDZXJ0aWZpY2F0ZTAdBgNV HQ4EFgQUSHEpCue6fKRlFO2bcvz2B4qAD4AwEgYDVR0TAQH/BAgwBgEB/wIBATAOBgNVHQ8BAf8E BAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAHO30o3V2oyU4vEzV8LexOYNTE4w0zMisFTrporNR97E OQHiZKHcWTyXhcNVpep5aFw7B2yslsZI4CrtTSaIHFRH8VWtb2EsK+xgYdJ6qbtckrGkA6YTy9Zx fYxqs1yWOPXe0Hwx0JhTdM0CUQ98LJWPCOZQgeu91jH+0jLOuY8aJX2Vikel0Y1+mihoUuK8ODh5 FMqLZQfBoLNnkF66BvqV5rCiNgryM7J4m+Yrq9nGN9w3Oi0QcnpHOSlgXbGVuaDs62fzyMIZcgn8 szovoBmuCK1HCdw3Ln/tjotN7RS/XWgfy1NS5MOtKJtfMJzy2umYtgC0bGAjUUJne8oqh64= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: SSB Firma Qualificata Issuer OU: Servizi di PKI Issuer OU: Certification Authority Issuer O: SSB S.p.A. Issuer C: IT Subject CN: SSB Firma Qualificata Subject OU: Servizi di PKI ITALIA (ITALY) - Trusted List ID: ID100001 Page 357 ETSI 2014 - TSL HR - PDF/A-1b generator Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Valid from: Fri Feb 23 15:40:00 CET 2001 Valid to: Wed Feb 24 00:59:00 CET 2010 Public Key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istribution Points ldap://ldappki.ssb.net/cn=SSB%20Firma%20Qualificata,ou=Servizi%20di%20PKI,ou=Certification%20Autho rity,o=SSB%20S.p.A.,c=IT?certificateRevocationList Certificate Policies Policy OID: 1.3.76.4.3.1.5.1 CPS pointer: http://ca.ssb.net Issuer Alternative Name [email protected] Subject Alternative Name [email protected] ldap://ldappki.ssb.net/cn=SSB%20Firma%20Qualificata,ou=Servizi%20di%20PKI,ou=Certification%20Autho rity,o=SSB%20S.p.A.,c=IT?cACertificate Subject Key Identifier 48:71:29:0A:E7:BA:7C:A4:65:14:ED:9B:72:FC:F6:07:8A:80:0F:80 Basic Constraints IsCA: true - Path length: 1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 54:21:B3:BE:8F:BB:42:50:28:55:00:DC:63:60:55:46:82:A0:00:22:58:16:63:D3:61:0F:37:85:0F:C9: B0:43 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-02-23T15:40:00Z 25.2 - Service : CN=ROOT CA - Validazione Temporale,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC [en] ITALIA (ITALY) - Trusted List ID: ID100001 A time stamping service as part of a service from a trust service provider issuing qualified certificates that issues timestamp tokens (TST) that can be used in the validation process of qualified signature or advanced signatures supported by qualified certificates to ascertain and extend the signature validity when the qualified certificate is (will be) revoked or expired (will expire). Page 358 ETSI 2014 - TSL HR - PDF/A-1b generator [it] Un servizio di marcatura temporale fornito come parte di un servizio da un fornitore di servizi di fiducia, che rilascia certificati qualificati ed emette i token time-stamp (TST) che possono essere utilizzati nel processo di validazione della firma qualificata o di firme avanzate, supportato da certificati qualificati per accertare e prorogare la validità della firma quando il certificato qualificato è (sarà) revocato o scaduto. [ en ] CN=ROOT CA - Validazione Temporale,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 154 X509 Certificate -----BEGIN CERTIFICATE----MIIGOzCCBSOgAwIBAgICAJowDQYJKoZIhvcNAQEFBQAwgYcxCzAJBgNVBAYTAklUMRMwEQYDVQQK EwpTU0IgUy5wLkEuMSAwHgYDVQQLExdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEXMBUGA1UECxMO U2Vydml6aSBkaSBQS0kxKDAmBgNVBAMTH1JPT1QgQ0EgLSBWYWxpZGF6aW9uZSBUZW1wb3JhbGUw HhcNMDEwNTEwMTIwNTAwWhcNMDkwNTEwMjM1OTAwWjCBhzELMAkGA1UEBhMCSVQxEzARBgNVBAoT ClNTQiBTLnAuQS4xIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5T ZXJ2aXppIGRpIFBLSTEoMCYGA1UEAxMfUk9PVCBDQSAtIFZhbGlkYXppb25lIFRlbXBvcmFsZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYjvIzvIuZXbZLvOpG62A93E2Vmn3OFudjH +hZstCL+jv+aI27f6weGtz7VMrTdMvym8HH+vKtW0FQQQRO8Tfzi18HdXdimtfwnIiKnvh6ecaLG csbV1GvyXvshy9JFjPPmHPnNEoTnDtRF8jNaPh9wKmGxDWqwh4UMs5mr/LMAJ99jy0J3oVagVOzi P8iapTE9jX3Vx9wzGxFslSVA9cRZyCB8qrXLtTqxSGo+ePdvhar6vu02uYd6qTTiAXxp37JHMW5v yyC8DoQdf+BSCeguaLhTwKhXEd8OWOGA8voSFu07IRW1jLi5zu9MJTpNjALu5gj5r5Yr5s37QSvv NKcCAwEAAaOCAq0wggKpMIG6BgNVHR8EgbIwga8wgayggamggaaGgaNsZGFwOi8vbGRhcC1wa2ku c3NiLm5ldC9jbj1ST09UJTIwQ0ElMjAtJTIwVmFsaWRhemlvbmUlMjBUZW1wb3JhbGUsb3U9U2Vy dml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24lMjBBdXRob3JpdHksbz1TU0IlMjBTLnAu QS4sYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MDUGA1UdIAQuMCwwKgYHK0wEAwEFATAf MB0GCCsGAQUFBwIBFhFodHRwOi8vY2Euc3NiLm5ldDCBtgYDVR0SBIGuMIGrgQ9pbmZvLWNhQHNz Yi5uZXSGgZdsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1ST09UJTIwQ0ElMjAtJTIwVmFsaWRh emlvbmUlMjBUZW1wb3JhbGUsb3U9U2Vydml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24l MjBBdXRob3JpdHksbz1TU0IlMjBTLnAuQS4sYz1JVD9jQUNlcnRpZmljYXRlMIG2BgNVHREEga4w gauBD2luZm8tY2FAc3NiLm5ldIaBl2xkYXA6Ly9sZGFwLXBraS5zc2IubmV0L2NuPVJPT1QlMjBD QSUyMC0lMjBWYWxpZGF6aW9uZSUyMFRlbXBvcmFsZSxvdT1TZXJ2aXppJTIwZGklMjBQS0ksb3U9 Q2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvPVNTQiUyMFMucC5BLixjPUlUP2NBQ2VydGlmaWNh dGUwHQYDVR0OBBYEFHAfodcpRjW6qC0Et3vH1ZOJ38yiMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYD VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQCeqD0bC44Wf4bv9NRyyWNTHHQ5/aEJBEgA inorfcAnhp0GtNiSv7ELyMDtEgLXLTOBGEXK31zYWlC/oFniuPbL/d/ddsidoP9akJYmQ8D27XxO ECs2aR/aO/gnautc4XA8pvnNw+9kYkHGo4watNKKaRJXiJ7b9LBUSKp0p40eWXMbs6M6NMe1oJd+ qTdbLmdFGlycRmbvtoTxcleQXoDvAyvCGLhVhYW5QBFQgjZPvaQCS72UQFHPxuL97sxuLzbd8p88 CqAxI8muwhbXWRRVw9vcP1MEgfbS2f1rkSM5HoSwL4iEkoxbI387sPSWf9IlfqUXncEkrfjaRIXR DSZO -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ROOT CA - Validazione Temporale Issuer OU: Servizi di PKI Issuer OU: Certification Authority Issuer O: SSB S.p.A. Issuer C: IT Subject CN: ROOT CA - Validazione Temporale Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Valid from: Thu May 10 14:05:00 CEST 2001 ITALIA (ITALY) - Trusted List ID: ID100001 Page 359 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Mon May 11 01:59:00 CEST 2009 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C6:23:BC:8C:EF:22:E6:57:6D:92:EF:3A:91:BA:D8:0F:77:13:65:66:9F:73:85:B9:D8:C7:FA:16:6C:B4:22:FE:8E:FF:9 A:23:6E:DF:EB:07:86:B7:3E:D5:32:B4:DD:32:FC:A6:F0:71:FE:BC:AB:56:D0:54:10:41:13:BC:4D:FC:E2:D7:C1:DD:5D:D8:A6:B5:FC:27:22:22:A7:BE:1E:9E:71:A2:C6:72:C6:D5:D4:6B:F2:5E:FB:21:CB:D2:45:8C:F3:E6: 1C:F9:CD:12:84:E7:0E:D4:45:F2:33:5A:3E:1F:70:2A:61:B1:0D:6A:B0:87:85:0C:B3:99:AB:FC:B3:00:27:DF:63:CB:42:77:A1:56:A0:54:EC:E2:3F:C8:9A:A5:31:3D:8D:7D:D5:C7:DC:33:1B:11:6C:95:25:40:F5:C4:59:C8:20: 7C:AA:B5:CB:B5:3A:B1:48:6A:3E:78:F7:6F:85:AA:FA:BE:ED:36:B9:87:7A:A9:34:E2:01:7C:69:DF:B2:47:31:6E:6F:CB:20:BC:0E:84:1D:7F:E0:52:09:E8:2E:68:B8:53:C0:A8:57:11:DF:0E:58:E1:80:F2:FA:12:16:ED:3B:21 :15:B5:8C:B8:B9:CE:EF:4C:25:3A:4D:8C:02:EE:E6:08:F9:AF:96:2B:E6:CD:FB:41:2B:EF:34:A7:02:03:01:00:01 CRL Distribution Points ldap://ldap-pki.ssb.net/cn=ROOT%20CA%20%20Validazione%20Temporale,ou=Servizi%20di%20PKI,ou=Certification%20Authority,o=SSB% 20S.p.A.,c=IT?certificateRevocationList Certificate Policies Policy OID: 1.3.76.4.3.1.5.1 CPS pointer: http://ca.ssb.net Issuer Alternative Name [email protected] Subject Alternative Name [email protected] ldap://ldap-pki.ssb.net/cn=ROOT%20CA%20%20Validazione%20Temporale,ou=Servizi%20di%20PKI,ou=Certification%20Authority,o=SSB% 20S.p.A.,c=IT?cACertificate Subject Key Identifier 70:1F:A1:D7:29:46:35:BA:A8:2D:04:B7:7B:C7:D5:93:89:DF:CC:A2 Basic Constraints IsCA: true - Path length: 1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D0:02:5E:6E:FD:76:B8:72:72:83:AF:0D:9A:C8:4D:62:08:8F:DC:7C:88:55:12:60:47:0A:81:30:F0:5 5:21:16 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2002-12-31T23:01:01Z 25.2.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] https://portal.actalis.it/Info/qcsp-english [ en ] Actalis S.p.A. [ it ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 360 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] Scheme Territory Agenzia per l'Italia Digitale IT 25.2.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=ROOT CA - Validazione Temporale,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: ROOT CA - Validazione Temporale Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 154 X509 Certificate -----BEGIN CERTIFICATE----MIIGOzCCBSOgAwIBAgICAJowDQYJKoZIhvcNAQEFBQAwgYcxCzAJBgNVBAYTAklUMRMwEQYDVQQK EwpTU0IgUy5wLkEuMSAwHgYDVQQLExdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEXMBUGA1UECxMO U2Vydml6aSBkaSBQS0kxKDAmBgNVBAMTH1JPT1QgQ0EgLSBWYWxpZGF6aW9uZSBUZW1wb3JhbGUw HhcNMDEwNTEwMTIwNTAwWhcNMDkwNTEwMjM1OTAwWjCBhzELMAkGA1UEBhMCSVQxEzARBgNVBAoT ClNTQiBTLnAuQS4xIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5T ZXJ2aXppIGRpIFBLSTEoMCYGA1UEAxMfUk9PVCBDQSAtIFZhbGlkYXppb25lIFRlbXBvcmFsZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYjvIzvIuZXbZLvOpG62A93E2Vmn3OFudjH +hZstCL+jv+aI27f6weGtz7VMrTdMvym8HH+vKtW0FQQQRO8Tfzi18HdXdimtfwnIiKnvh6ecaLG csbV1GvyXvshy9JFjPPmHPnNEoTnDtRF8jNaPh9wKmGxDWqwh4UMs5mr/LMAJ99jy0J3oVagVOzi P8iapTE9jX3Vx9wzGxFslSVA9cRZyCB8qrXLtTqxSGo+ePdvhar6vu02uYd6qTTiAXxp37JHMW5v yyC8DoQdf+BSCeguaLhTwKhXEd8OWOGA8voSFu07IRW1jLi5zu9MJTpNjALu5gj5r5Yr5s37QSvv NKcCAwEAAaOCAq0wggKpMIG6BgNVHR8EgbIwga8wgayggamggaaGgaNsZGFwOi8vbGRhcC1wa2ku c3NiLm5ldC9jbj1ST09UJTIwQ0ElMjAtJTIwVmFsaWRhemlvbmUlMjBUZW1wb3JhbGUsb3U9U2Vy dml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24lMjBBdXRob3JpdHksbz1TU0IlMjBTLnAu QS4sYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MDUGA1UdIAQuMCwwKgYHK0wEAwEFATAf MB0GCCsGAQUFBwIBFhFodHRwOi8vY2Euc3NiLm5ldDCBtgYDVR0SBIGuMIGrgQ9pbmZvLWNhQHNz Yi5uZXSGgZdsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1ST09UJTIwQ0ElMjAtJTIwVmFsaWRh emlvbmUlMjBUZW1wb3JhbGUsb3U9U2Vydml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24l MjBBdXRob3JpdHksbz1TU0IlMjBTLnAuQS4sYz1JVD9jQUNlcnRpZmljYXRlMIG2BgNVHREEga4w gauBD2luZm8tY2FAc3NiLm5ldIaBl2xkYXA6Ly9sZGFwLXBraS5zc2IubmV0L2NuPVJPT1QlMjBD QSUyMC0lMjBWYWxpZGF6aW9uZSUyMFRlbXBvcmFsZSxvdT1TZXJ2aXppJTIwZGklMjBQS0ksb3U9 Q2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvPVNTQiUyMFMucC5BLixjPUlUP2NBQ2VydGlmaWNh dGUwHQYDVR0OBBYEFHAfodcpRjW6qC0Et3vH1ZOJ38yiMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYD VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQCeqD0bC44Wf4bv9NRyyWNTHHQ5/aEJBEgA inorfcAnhp0GtNiSv7ELyMDtEgLXLTOBGEXK31zYWlC/oFniuPbL/d/ddsidoP9akJYmQ8D27XxO ECs2aR/aO/gnautc4XA8pvnNw+9kYkHGo4watNKKaRJXiJ7b9LBUSKp0p40eWXMbs6M6NMe1oJd+ qTdbLmdFGlycRmbvtoTxcleQXoDvAyvCGLhVhYW5QBFQgjZPvaQCS72UQFHPxuL97sxuLzbd8p88 CqAxI8muwhbXWRRVw9vcP1MEgfbS2f1rkSM5HoSwL4iEkoxbI387sPSWf9IlfqUXncEkrfjaRIXR DSZO -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ROOT CA - Validazione Temporale Issuer OU: Servizi di PKI ITALIA (ITALY) - Trusted List ID: ID100001 Page 361 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer OU: Certification Authority Issuer O: SSB S.p.A. Issuer C: IT Subject CN: ROOT CA - Validazione Temporale Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Valid from: Thu May 10 14:05:00 CEST 2001 Valid to: Mon May 11 01:59:00 CEST 2009 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C6:23:BC:8C:EF:22:E6:57:6D:92:EF:3A:91:BA:D8:0F:77:13:65:66:9F:73:85:B9:D8:C7:FA:16:6C:B4:22:FE:8E:FF:9 A:23:6E:DF:EB:07:86:B7:3E:D5:32:B4:DD:32:FC:A6:F0:71:FE:BC:AB:56:D0:54:10:41:13:BC:4D:FC:E2:D7:C1:DD:5D:D8:A6:B5:FC:27:22:22:A7:BE:1E:9E:71:A2:C6:72:C6:D5:D4:6B:F2:5E:FB:21:CB:D2:45:8C:F3:E6: 1C:F9:CD:12:84:E7:0E:D4:45:F2:33:5A:3E:1F:70:2A:61:B1:0D:6A:B0:87:85:0C:B3:99:AB:FC:B3:00:27:DF:63:CB:42:77:A1:56:A0:54:EC:E2:3F:C8:9A:A5:31:3D:8D:7D:D5:C7:DC:33:1B:11:6C:95:25:40:F5:C4:59:C8:20: 7C:AA:B5:CB:B5:3A:B1:48:6A:3E:78:F7:6F:85:AA:FA:BE:ED:36:B9:87:7A:A9:34:E2:01:7C:69:DF:B2:47:31:6E:6F:CB:20:BC:0E:84:1D:7F:E0:52:09:E8:2E:68:B8:53:C0:A8:57:11:DF:0E:58:E1:80:F2:FA:12:16:ED:3B:21 :15:B5:8C:B8:B9:CE:EF:4C:25:3A:4D:8C:02:EE:E6:08:F9:AF:96:2B:E6:CD:FB:41:2B:EF:34:A7:02:03:01:00:01 CRL Distribution Points ldap://ldap-pki.ssb.net/cn=ROOT%20CA%20%20Validazione%20Temporale,ou=Servizi%20di%20PKI,ou=Certification%20Authority,o=SSB% 20S.p.A.,c=IT?certificateRevocationList Certificate Policies Policy OID: 1.3.76.4.3.1.5.1 CPS pointer: http://ca.ssb.net Issuer Alternative Name [email protected] Subject Alternative Name [email protected] ldap://ldap-pki.ssb.net/cn=ROOT%20CA%20%20Validazione%20Temporale,ou=Servizi%20di%20PKI,ou=Certification%20Authority,o=SSB% 20S.p.A.,c=IT?cACertificate Subject Key Identifier 70:1F:A1:D7:29:46:35:BA:A8:2D:04:B7:7B:C7:D5:93:89:DF:CC:A2 Basic Constraints IsCA: true - Path length: 1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D0:02:5E:6E:FD:76:B8:72:72:83:AF:0D:9A:C8:4D:62:08:8F:DC:7C:88:55:12:60:47:0A:81:30:F0:5 5:21:16 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2002-12-31T23:00:01Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 362 ETSI 2014 - TSL HR - PDF/A-1b generator 25.2.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/TSA/TSS-QC Service Name Name [ en ] CN=ROOT CA - Validazione Temporale,OU=Servizi di PKI,OU=Certification Authority,O=SSB S.p.A.,C=IT Service digital identities X509SubjectName Subject CN: ROOT CA - Validazione Temporale Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Certificate fields details Version: 3 Serial Number: 154 X509 Certificate -----BEGIN CERTIFICATE----MIIGOzCCBSOgAwIBAgICAJowDQYJKoZIhvcNAQEFBQAwgYcxCzAJBgNVBAYTAklUMRMwEQYDVQQK EwpTU0IgUy5wLkEuMSAwHgYDVQQLExdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEXMBUGA1UECxMO U2Vydml6aSBkaSBQS0kxKDAmBgNVBAMTH1JPT1QgQ0EgLSBWYWxpZGF6aW9uZSBUZW1wb3JhbGUw HhcNMDEwNTEwMTIwNTAwWhcNMDkwNTEwMjM1OTAwWjCBhzELMAkGA1UEBhMCSVQxEzARBgNVBAoT ClNTQiBTLnAuQS4xIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRcwFQYDVQQLEw5T ZXJ2aXppIGRpIFBLSTEoMCYGA1UEAxMfUk9PVCBDQSAtIFZhbGlkYXppb25lIFRlbXBvcmFsZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYjvIzvIuZXbZLvOpG62A93E2Vmn3OFudjH +hZstCL+jv+aI27f6weGtz7VMrTdMvym8HH+vKtW0FQQQRO8Tfzi18HdXdimtfwnIiKnvh6ecaLG csbV1GvyXvshy9JFjPPmHPnNEoTnDtRF8jNaPh9wKmGxDWqwh4UMs5mr/LMAJ99jy0J3oVagVOzi P8iapTE9jX3Vx9wzGxFslSVA9cRZyCB8qrXLtTqxSGo+ePdvhar6vu02uYd6qTTiAXxp37JHMW5v yyC8DoQdf+BSCeguaLhTwKhXEd8OWOGA8voSFu07IRW1jLi5zu9MJTpNjALu5gj5r5Yr5s37QSvv NKcCAwEAAaOCAq0wggKpMIG6BgNVHR8EgbIwga8wgayggamggaaGgaNsZGFwOi8vbGRhcC1wa2ku c3NiLm5ldC9jbj1ST09UJTIwQ0ElMjAtJTIwVmFsaWRhemlvbmUlMjBUZW1wb3JhbGUsb3U9U2Vy dml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24lMjBBdXRob3JpdHksbz1TU0IlMjBTLnAu QS4sYz1JVD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0MDUGA1UdIAQuMCwwKgYHK0wEAwEFATAf MB0GCCsGAQUFBwIBFhFodHRwOi8vY2Euc3NiLm5ldDCBtgYDVR0SBIGuMIGrgQ9pbmZvLWNhQHNz Yi5uZXSGgZdsZGFwOi8vbGRhcC1wa2kuc3NiLm5ldC9jbj1ST09UJTIwQ0ElMjAtJTIwVmFsaWRh emlvbmUlMjBUZW1wb3JhbGUsb3U9U2Vydml6aSUyMGRpJTIwUEtJLG91PUNlcnRpZmljYXRpb24l MjBBdXRob3JpdHksbz1TU0IlMjBTLnAuQS4sYz1JVD9jQUNlcnRpZmljYXRlMIG2BgNVHREEga4w gauBD2luZm8tY2FAc3NiLm5ldIaBl2xkYXA6Ly9sZGFwLXBraS5zc2IubmV0L2NuPVJPT1QlMjBD QSUyMC0lMjBWYWxpZGF6aW9uZSUyMFRlbXBvcmFsZSxvdT1TZXJ2aXppJTIwZGklMjBQS0ksb3U9 Q2VydGlmaWNhdGlvbiUyMEF1dGhvcml0eSxvPVNTQiUyMFMucC5BLixjPUlUP2NBQ2VydGlmaWNh dGUwHQYDVR0OBBYEFHAfodcpRjW6qC0Et3vH1ZOJ38yiMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYD VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQCeqD0bC44Wf4bv9NRyyWNTHHQ5/aEJBEgA inorfcAnhp0GtNiSv7ELyMDtEgLXLTOBGEXK31zYWlC/oFniuPbL/d/ddsidoP9akJYmQ8D27XxO ECs2aR/aO/gnautc4XA8pvnNw+9kYkHGo4watNKKaRJXiJ7b9LBUSKp0p40eWXMbs6M6NMe1oJd+ qTdbLmdFGlycRmbvtoTxcleQXoDvAyvCGLhVhYW5QBFQgjZPvaQCS72UQFHPxuL97sxuLzbd8p88 CqAxI8muwhbXWRRVw9vcP1MEgfbS2f1rkSM5HoSwL4iEkoxbI387sPSWf9IlfqUXncEkrfjaRIXR DSZO -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer CN: ROOT CA - Validazione Temporale Issuer OU: Servizi di PKI Issuer OU: Certification Authority Issuer O: SSB S.p.A. Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 363 ETSI 2014 - TSL HR - PDF/A-1b generator Subject CN: ROOT CA - Validazione Temporale Subject OU: Servizi di PKI Subject OU: Certification Authority Subject O: SSB S.p.A. Subject C: IT Valid from: Thu May 10 14:05:00 CEST 2001 Valid to: Mon May 11 01:59:00 CEST 2009 Public Key: 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:C6:23:BC:8C:EF:22:E6:57:6D:92:EF:3A:91:BA:D8:0F:77:13:65:66:9F:73:85:B9:D8:C7:FA:16:6C:B4:22:FE:8E:FF:9 A:23:6E:DF:EB:07:86:B7:3E:D5:32:B4:DD:32:FC:A6:F0:71:FE:BC:AB:56:D0:54:10:41:13:BC:4D:FC:E2:D7:C1:DD:5D:D8:A6:B5:FC:27:22:22:A7:BE:1E:9E:71:A2:C6:72:C6:D5:D4:6B:F2:5E:FB:21:CB:D2:45:8C:F3:E6: 1C:F9:CD:12:84:E7:0E:D4:45:F2:33:5A:3E:1F:70:2A:61:B1:0D:6A:B0:87:85:0C:B3:99:AB:FC:B3:00:27:DF:63:CB:42:77:A1:56:A0:54:EC:E2:3F:C8:9A:A5:31:3D:8D:7D:D5:C7:DC:33:1B:11:6C:95:25:40:F5:C4:59:C8:20: 7C:AA:B5:CB:B5:3A:B1:48:6A:3E:78:F7:6F:85:AA:FA:BE:ED:36:B9:87:7A:A9:34:E2:01:7C:69:DF:B2:47:31:6E:6F:CB:20:BC:0E:84:1D:7F:E0:52:09:E8:2E:68:B8:53:C0:A8:57:11:DF:0E:58:E1:80:F2:FA:12:16:ED:3B:21 :15:B5:8C:B8:B9:CE:EF:4C:25:3A:4D:8C:02:EE:E6:08:F9:AF:96:2B:E6:CD:FB:41:2B:EF:34:A7:02:03:01:00:01 CRL Distribution Points ldap://ldap-pki.ssb.net/cn=ROOT%20CA%20%20Validazione%20Temporale,ou=Servizi%20di%20PKI,ou=Certification%20Authority,o=SSB% 20S.p.A.,c=IT?certificateRevocationList Certificate Policies Policy OID: 1.3.76.4.3.1.5.1 CPS pointer: http://ca.ssb.net Issuer Alternative Name [email protected] Subject Alternative Name [email protected] ldap://ldap-pki.ssb.net/cn=ROOT%20CA%20%20Validazione%20Temporale,ou=Servizi%20di%20PKI,ou=Certification%20Authority,o=SSB% 20S.p.A.,c=IT?cACertificate Subject Key Identifier 70:1F:A1:D7:29:46:35:BA:A8:2D:04:B7:7B:C7:D5:93:89:DF:CC:A2 Basic Constraints IsCA: true - Path length: 1 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: D0:02:5E:6E:FD:76:B8:72:72:83:AF:0D:9A:C8:4D:62:08:8F:DC:7C:88:55:12:60:47:0A:81:30:F0:5 5:21:16 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-05-10T14:05:00Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 364 ETSI 2014 - TSL HR - PDF/A-1b generator 26 - TSP: Trustitalia S.p.A. TSP Name Name [ en ] Trustitalia S.p.A. Name [ it ] Trustitalia S.p.A. Name [ en ] Trustitalia Name [ it ] Trustitalia Name [ en ] VATIT- 01214540559 Name [ it ] VATIT- 01214540559 Street Address [ en ] piazzale bosco 3a Locality [ en ] terni Postal Code [ en ] 05100 Country Name [ en ] IT TSP Trade Name PostalAddress ElectronicAddress URI https://firmadigitale.trustitalia.it URI mailto:[email protected] TSP Information URI URI [ en ] https://firmadigitale.trustitalia.it 26.1 - Service : C=IT,CN=TI Firma Digitale CA,O=Trust Italia S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. Service Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 365 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] C=IT,CN=TI Firma Digitale CA,O=Trust Italia S.p.A. Service digital identities Certificate fields details Version: 3 Serial Number: 138043150560751857608360749770309030079 X509 Certificate -----BEGIN CERTIFICATE----MIIDLzCCApigAwIBAgIQZ9oky1/ojB6uX2z7WjLQvzANBgkqhkiG9w0BAQUFADBKMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMR0wGwYDVQQDExRUSSBGaXJtYSBEaWdpdGFsZSBDQTELMAkG A1UEBhMCSVQwHhcNMDEwNjE2MDAwMDAwWhcNMDQwNjE1MjM1OTU5WjBKMRwwGgYDVQQKExNUcnVz dCBJdGFsaWEgUy5wLkEuMR0wGwYDVQQDExRUSSBGaXJtYSBEaWdpdGFsZSBDQTELMAkGA1UEBhMC SVQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKC9CjrHTS0MNSYsGtZ7n96LIXuSCw5jKuz3 nGheoA6gSM72v7vYbmXETBCXWI9wXVTQiUF/6WBgMFUZLyiJSkngkQzaeCAniSwcM3mO8CCbyB/O 55EeX1kVle8h3Q+23/0fNT3YLV4jJBkCQV0SyvxcFPF84yBT3Ls3Aw3l/suLAgMBAAGjggEUMIIB EDASBgNVHRMBAf8ECDAGAQH/AgEAMFEGA1UdIARKMEgwRgYHKwYBBAHFMTA7MDkGCCsGAQUFBwIB Fi1odHRwczovL2Zpcm1hZGlnaXRhbGUudHJ1c3RpdGFsaWEuaXQvcnBhLmh0bWwwMAYDVR0fBCkw JzAloCOgIYYfaHR0cDovL29uc2l0ZWNybC50cnVzdGl0YWxpYS5pdDAiBgNVHRIEGzAZpBcwFTET MBEGA1UEAxMKUHJpdmF0ZTEtNjAOBgNVHQ8BAf8EBAMCAQYwIgYDVR0RBBswGaQXMBUxEzARBgNV BAMTClByaXZhdGUxLTYwHQYDVR0OBBYEFBbKPJyrBufzifKouaM5BwvylWQHMA0GCSqGSIb3DQEB BQUAA4GBAEEPnHi2h5KfA2QY73ub2jad9Yd7YqVq7wAxwx/bJkB8Qt+UDW6NwIHGpZGVYtusJVOy qw3G2yCqfSmvEZCtVPjgl3gqvdvficKbd3zR6MJimMdt6vWQTnZylteHgtASBI8C1+0VjWbGYpc/ A+ctCaEsl5gwXFWsbvMzekBtg8sM -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT Issuer CN: TI Firma Digitale CA Issuer O: Trust Italia S.p.A. Subject C: IT Subject CN: TI Firma Digitale CA Subject O: Trust Italia S.p.A. Valid from: Sat Jun 16 02:00:00 CEST 2001 Valid to: Wed Jun 16 01:59:59 CEST 2004 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:A0:BD:0A:3A:C7:4D:2D:0C:35:26:2C:1A:D6:7B:9F:DE:8B:21:7B:92:0B:0E:63:2A:EC:F7:9C:68:5E:A0:0E:A0:48:CE:F6:BF:BB :D8:6E:65:C4:4C:10:97:58:8F:70:5D:54:D0:89:41:7F:E9:60:60:30:55:19:2F:28:89:4A:49:E0:91:0C:DA:78:20:27:89:2C:1C:33:79:8E:F0:20:9B:C8:1F:CE:E7:91:1E:5F:59:15:95:EF:21:DD:0F:B6:DF:FD:1F:35:3D:D8:2D:5E:2 3:24:19:02:41:5D:12:CA:FC:5C:14:F1:7C:E3:20:53:DC:BB:37:03:0D:E5:FE:CB:8B:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it Subject Key Identifier 16:CA:3C:9C:AB:06:E7:F3:89:F2:A8:B9:A3:39:07:0B:F2:95:64:07 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 366 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: 10:29:72:2D:DF:44:B0:A7:8E:45:50:FD:78:AF:4F:4C:52:8E:25:94:FB:C4:9B:B7:5A:1C:15:82:B3: B5:00:58 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2008-02-20T00:00:01Z 26.1.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.pec.it/en/information.html [ en ] Aruba Posta Elettronica Certificata S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Scheme Territory IT 26.1.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] C=IT,CN=TI Firma Digitale CA,O=Trust Italia S.p.A. Service digital identities X509SubjectName Subject C: IT Subject CN: TI Firma Digitale CA Subject O: Trust Italia S.p.A. Certificate fields details ITALIA (ITALY) - Trusted List ID: ID100001 Page 367 ETSI 2014 - TSL HR - PDF/A-1b generator Version: 3 Serial Number: 138043150560751857608360749770309030079 X509 Certificate -----BEGIN CERTIFICATE----MIIDLzCCApigAwIBAgIQZ9oky1/ojB6uX2z7WjLQvzANBgkqhkiG9w0BAQUFADBKMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMR0wGwYDVQQDExRUSSBGaXJtYSBEaWdpdGFsZSBDQTELMAkG A1UEBhMCSVQwHhcNMDEwNjE2MDAwMDAwWhcNMDQwNjE1MjM1OTU5WjBKMRwwGgYDVQQKExNUcnVz dCBJdGFsaWEgUy5wLkEuMR0wGwYDVQQDExRUSSBGaXJtYSBEaWdpdGFsZSBDQTELMAkGA1UEBhMC SVQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKC9CjrHTS0MNSYsGtZ7n96LIXuSCw5jKuz3 nGheoA6gSM72v7vYbmXETBCXWI9wXVTQiUF/6WBgMFUZLyiJSkngkQzaeCAniSwcM3mO8CCbyB/O 55EeX1kVle8h3Q+23/0fNT3YLV4jJBkCQV0SyvxcFPF84yBT3Ls3Aw3l/suLAgMBAAGjggEUMIIB EDASBgNVHRMBAf8ECDAGAQH/AgEAMFEGA1UdIARKMEgwRgYHKwYBBAHFMTA7MDkGCCsGAQUFBwIB Fi1odHRwczovL2Zpcm1hZGlnaXRhbGUudHJ1c3RpdGFsaWEuaXQvcnBhLmh0bWwwMAYDVR0fBCkw JzAloCOgIYYfaHR0cDovL29uc2l0ZWNybC50cnVzdGl0YWxpYS5pdDAiBgNVHRIEGzAZpBcwFTET MBEGA1UEAxMKUHJpdmF0ZTEtNjAOBgNVHQ8BAf8EBAMCAQYwIgYDVR0RBBswGaQXMBUxEzARBgNV BAMTClByaXZhdGUxLTYwHQYDVR0OBBYEFBbKPJyrBufzifKouaM5BwvylWQHMA0GCSqGSIb3DQEB BQUAA4GBAEEPnHi2h5KfA2QY73ub2jad9Yd7YqVq7wAxwx/bJkB8Qt+UDW6NwIHGpZGVYtusJVOy qw3G2yCqfSmvEZCtVPjgl3gqvdvficKbd3zR6MJimMdt6vWQTnZylteHgtASBI8C1+0VjWbGYpc/ A+ctCaEsl5gwXFWsbvMzekBtg8sM -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT Issuer CN: TI Firma Digitale CA Issuer O: Trust Italia S.p.A. Subject C: IT Subject CN: TI Firma Digitale CA Subject O: Trust Italia S.p.A. Valid from: Sat Jun 16 02:00:00 CEST 2001 Valid to: Wed Jun 16 01:59:59 CEST 2004 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:A0:BD:0A:3A:C7:4D:2D:0C:35:26:2C:1A:D6:7B:9F:DE:8B:21:7B:92:0B:0E:63:2A:EC:F7:9C:68:5E:A0:0E:A0:48:CE:F6:BF:BB :D8:6E:65:C4:4C:10:97:58:8F:70:5D:54:D0:89:41:7F:E9:60:60:30:55:19:2F:28:89:4A:49:E0:91:0C:DA:78:20:27:89:2C:1C:33:79:8E:F0:20:9B:C8:1F:CE:E7:91:1E:5F:59:15:95:EF:21:DD:0F:B6:DF:FD:1F:35:3D:D8:2D:5E:2 3:24:19:02:41:5D:12:CA:FC:5C:14:F1:7C:E3:20:53:DC:BB:37:03:0D:E5:FE:CB:8B:02:03:01:00:01 Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it Subject Key Identifier 16:CA:3C:9C:AB:06:E7:F3:89:F2:A8:B9:A3:39:07:0B:F2:95:64:07 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 10:29:72:2D:DF:44:B0:A7:8E:45:50:FD:78:AF:4F:4C:52:8E:25:94:FB:C4:9B:B7:5A:1C:15:82:B3: B5:00:58 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2008-02-19T23:00:01Z ITALIA (ITALY) - Trusted List ID: ID100001 Page 368 ETSI 2014 - TSL HR - PDF/A-1b generator 26.1.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] C=IT,CN=TI Firma Digitale CA,O=Trust Italia S.p.A. Service digital identities X509SubjectName Subject C: IT Subject CN: TI Firma Digitale CA Subject O: Trust Italia S.p.A. Certificate fields details Version: 3 Serial Number: 138043150560751857608360749770309030079 X509 Certificate -----BEGIN CERTIFICATE----MIIDLzCCApigAwIBAgIQZ9oky1/ojB6uX2z7WjLQvzANBgkqhkiG9w0BAQUFADBKMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMR0wGwYDVQQDExRUSSBGaXJtYSBEaWdpdGFsZSBDQTELMAkG A1UEBhMCSVQwHhcNMDEwNjE2MDAwMDAwWhcNMDQwNjE1MjM1OTU5WjBKMRwwGgYDVQQKExNUcnVz dCBJdGFsaWEgUy5wLkEuMR0wGwYDVQQDExRUSSBGaXJtYSBEaWdpdGFsZSBDQTELMAkGA1UEBhMC SVQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKC9CjrHTS0MNSYsGtZ7n96LIXuSCw5jKuz3 nGheoA6gSM72v7vYbmXETBCXWI9wXVTQiUF/6WBgMFUZLyiJSkngkQzaeCAniSwcM3mO8CCbyB/O 55EeX1kVle8h3Q+23/0fNT3YLV4jJBkCQV0SyvxcFPF84yBT3Ls3Aw3l/suLAgMBAAGjggEUMIIB EDASBgNVHRMBAf8ECDAGAQH/AgEAMFEGA1UdIARKMEgwRgYHKwYBBAHFMTA7MDkGCCsGAQUFBwIB Fi1odHRwczovL2Zpcm1hZGlnaXRhbGUudHJ1c3RpdGFsaWEuaXQvcnBhLmh0bWwwMAYDVR0fBCkw JzAloCOgIYYfaHR0cDovL29uc2l0ZWNybC50cnVzdGl0YWxpYS5pdDAiBgNVHRIEGzAZpBcwFTET MBEGA1UEAxMKUHJpdmF0ZTEtNjAOBgNVHQ8BAf8EBAMCAQYwIgYDVR0RBBswGaQXMBUxEzARBgNV BAMTClByaXZhdGUxLTYwHQYDVR0OBBYEFBbKPJyrBufzifKouaM5BwvylWQHMA0GCSqGSIb3DQEB BQUAA4GBAEEPnHi2h5KfA2QY73ub2jad9Yd7YqVq7wAxwx/bJkB8Qt+UDW6NwIHGpZGVYtusJVOy qw3G2yCqfSmvEZCtVPjgl3gqvdvficKbd3zR6MJimMdt6vWQTnZylteHgtASBI8C1+0VjWbGYpc/ A+ctCaEsl5gwXFWsbvMzekBtg8sM -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT Issuer CN: TI Firma Digitale CA Issuer O: Trust Italia S.p.A. Subject C: IT Subject CN: TI Firma Digitale CA Subject O: Trust Italia S.p.A. Valid from: Sat Jun 16 02:00:00 CEST 2001 Valid to: Wed Jun 16 01:59:59 CEST 2004 Public Key: ITALIA (ITALY) - Trusted List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age 369 ETSI 2014 - TSL HR - PDF/A-1b generator Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it Subject Key Identifier 16:CA:3C:9C:AB:06:E7:F3:89:F2:A8:B9:A3:39:07:0B:F2:95:64:07 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 10:29:72:2D:DF:44:B0:A7:8E:45:50:FD:78:AF:4F:4C:52:8E:25:94:FB:C4:9B:B7:5A:1C:15:82:B3: B5:00:58 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2001-06-16T02:00:00Z 26.2 - Service : C=IT,CN=TI Firma Digitale CA - G2,O=Trust Italia S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] C=IT,CN=TI Firma Digitale CA - G2,O=Trust Italia S.p.A. Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 35897985162083497871155648653266911809 X509 Certificate -----BEGIN CERTIFICATE----MIIDnTCCAwagAwIBAgIQGwGzUSEPuepE/LMkHJoCQTANBgkqhkiG9w0BAQUFADBPMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMSIwIAYDVQQDExlUSSBGaXJtYSBEaWdpdGFsZSBDQSAtIEcy MQswCQYDVQQGEwJJVDAeFw0wMzA1MjYwMDAwMDBaFw0xMTA1MjUyMzU5NTlaME8xHDAaBgNVBAoT E1RydXN0IEl0YWxpYSBTLnAuQS4xIjAgBgNVBAMTGVRJIEZpcm1hIERpZ2l0YWxlIENBIC0gRzIx CzAJBgNVBAYTAklUMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBPuYQtxpPx+zq/m9Tq0o+ 7DjcIpnMLfgg8xSKrBIeX6/QZiPohFkp6fDSlg1i/QYP/lrVP9bkkfpqI0rrsHuYa/ZLnaz5tFBq TkSvxgd7Jx9tS8YS4UPD6e+QV9SAgAzxDFsM2HLb/oCjbKnM+Uv6+NFrBOKhX522JfUePdO3qQID AQABo4IBeDCCAXQwHQYDVR0OBBYEFCq/1oXKYI3z8wkplgJSr3qZt+4lMDYGCCsGAQUFBwEBBCow KDAmBggrBgEFBQcwAYYaaHR0cDovL29jc3AudHJ1c3RpdGFsaWEuaXQwEgYDVR0TAQH/BAgwBgEB /wIBADBRBgNVHSAESjBIMEYGBysGAQQBxTEwOzA5BggrBgEFBQcCARYtaHR0cHM6Ly9maXJtYWRp Z2l0YWxlLnRydXN0aXRhbGlhLml0L3JwYS5odG1sMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9v bnNpdGVjcmwudHJ1c3RpdGFsaWEuaXQvVHJ1c3RJdGFsaWFTcEFUcnVzdEl0YWxpYUZEL0xhdGVz dENSTC5jcmwwIwYDVR0SBBwwGqQYMBYxFDASBgNVBAMTC1ByaXZhdGUxLTIxMA4GA1UdDwEB/wQE AwIBBjAjBgNVHREEHDAapBgwFjEUMBIGA1UEAxMLUHJpdmF0ZTEtMjEwDQYJKoZIhvcNAQEFBQAD gYEAhHoyzwrnjGMPqueA1kJT8Iynme+F5Uvgw++3YbHeK4QoyF49FudHD8KHbpC4NOvOOSq7XPJ/ qjpDAkM7AYbO1nhgc1cKkqHj/wNXZ7EmMQ84m3LuRyPbBj6e7hqmafV9JcbDymGMzFLCt589ftmk m0vqRcRY0+h29nj1wH2gLdg= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT ITALIA (ITALY) - Trusted List ID: ID100001 Page 370 ETSI 2014 - TSL HR - PDF/A-1b generator Issuer CN: TI Firma Digitale CA - G2 Issuer O: Trust Italia S.p.A. Subject C: IT Subject CN: TI Firma Digitale CA - G2 Subject O: Trust Italia S.p.A. Valid from: Mon May 26 02:00:00 CEST 2003 Valid to: Thu May 26 01:59:59 CEST 2011 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:C1:3E:E6:10:B7:1A:4F:C7:EC:EA:FE:6F:53:AB:4A:3E:EC:38:DC:22:99:CC:2D:F8:20:F3:14:8A:AC:12:1E:5F:AF:D0:66:23:E8:8 4:59:29:E9:F0:D2:96:0D:62:FD:06:0F:FE:5A:D5:3F:D6:E4:91:FA:6A:23:4A:EB:B0:7B:98:6B:F6:4B:9D:AC:F9:B4:50:6A:4E:44:AF:C6:07:7B:27:1F:6D:4B:C6:12:E1:43:C3:E9:EF:90:57:D4:80:80:0C:F1:0C:5B:0C:D8:72:D B:FE:80:A3:6C:A9:CC:F9:4B:FA:F8:D1:6B:04:E2:A1:5F:9D:B6:25:F5:1E:3D:D3:B7:A9:02:03:01:00:01 Subject Key Identifier 2A:BF:D6:85:CA:60:8D:F3:F3:09:29:96:02:52:AF:7A:99:B7:EE:25 Authority Info Access http://ocsp.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it/TrustItaliaSpATrustItaliaFD/LatestCRL.crl Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6A:38:F9:07:A0:B9:EB:B5:5B:C7:B2:25:0A:F8:DD:F5:FA:A9:74:9B:77:98:3F:38:57:10:27:C3:CE :39:8F:B7 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2008-02-19T23:01:01Z 26.2.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.pec.it/en/information.html TSP Name ITALIA (ITALY) - Trusted List ID: ID100001 Page 371 ETSI 2014 - TSL HR - PDF/A-1b generator Name [ en ] Aruba Posta Elettronica Certificata S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale Scheme Operator Name Scheme Territory IT 26.2.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] C=IT,CN=TI Firma Digitale CA - G2,O=Trust Italia S.p.A. Service digital identities X509SubjectName Subject C: IT Subject CN: TI Firma Digitale CA - G2 Subject O: Trust Italia S.p.A. Certificate fields details Version: 3 Serial Number: 35897985162083497871155648653266911809 X509 Certificate -----BEGIN CERTIFICATE----MIIDnTCCAwagAwIBAgIQGwGzUSEPuepE/LMkHJoCQTANBgkqhkiG9w0BAQUFADBPMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMSIwIAYDVQQDExlUSSBGaXJtYSBEaWdpdGFsZSBDQSAtIEcy MQswCQYDVQQGEwJJVDAeFw0wMzA1MjYwMDAwMDBaFw0xMTA1MjUyMzU5NTlaME8xHDAaBgNVBAoT E1RydXN0IEl0YWxpYSBTLnAuQS4xIjAgBgNVBAMTGVRJIEZpcm1hIERpZ2l0YWxlIENBIC0gRzIx CzAJBgNVBAYTAklUMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBPuYQtxpPx+zq/m9Tq0o+ 7DjcIpnMLfgg8xSKrBIeX6/QZiPohFkp6fDSlg1i/QYP/lrVP9bkkfpqI0rrsHuYa/ZLnaz5tFBq TkSvxgd7Jx9tS8YS4UPD6e+QV9SAgAzxDFsM2HLb/oCjbKnM+Uv6+NFrBOKhX522JfUePdO3qQID AQABo4IBeDCCAXQwHQYDVR0OBBYEFCq/1oXKYI3z8wkplgJSr3qZt+4lMDYGCCsGAQUFBwEBBCow KDAmBggrBgEFBQcwAYYaaHR0cDovL29jc3AudHJ1c3RpdGFsaWEuaXQwEgYDVR0TAQH/BAgwBgEB /wIBADBRBgNVHSAESjBIMEYGBysGAQQBxTEwOzA5BggrBgEFBQcCARYtaHR0cHM6Ly9maXJtYWRp Z2l0YWxlLnRydXN0aXRhbGlhLml0L3JwYS5odG1sMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9v bnNpdGVjcmwudHJ1c3RpdGFsaWEuaXQvVHJ1c3RJdGFsaWFTcEFUcnVzdEl0YWxpYUZEL0xhdGVz dENSTC5jcmwwIwYDVR0SBBwwGqQYMBYxFDASBgNVBAMTC1ByaXZhdGUxLTIxMA4GA1UdDwEB/wQE AwIBBjAjBgNVHREEHDAapBgwFjEUMBIGA1UEAxMLUHJpdmF0ZTEtMjEwDQYJKoZIhvcNAQEFBQAD gYEAhHoyzwrnjGMPqueA1kJT8Iynme+F5Uvgw++3YbHeK4QoyF49FudHD8KHbpC4NOvOOSq7XPJ/ qjpDAkM7AYbO1nhgc1cKkqHj/wNXZ7EmMQ84m3LuRyPbBj6e7hqmafV9JcbDymGMzFLCt589ftmk m0vqRcRY0+h29nj1wH2gLdg= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT Issuer CN: TI Firma Digitale CA - G2 Issuer O: Trust Italia S.p.A. ITALIA (ITALY) - Trusted List ID: ID100001 Page 372 ETSI 2014 - TSL HR - PDF/A-1b generator Subject C: IT Subject CN: TI Firma Digitale CA - G2 Subject O: Trust Italia S.p.A. Valid from: Mon May 26 02:00:00 CEST 2003 Valid to: Thu May 26 01:59:59 CEST 2011 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:C1:3E:E6:10:B7:1A:4F:C7:EC:EA:FE:6F:53:AB:4A:3E:EC:38:DC:22:99:CC:2D:F8:20:F3:14:8A:AC:12:1E:5F:AF:D0:66:23:E8:8 4:59:29:E9:F0:D2:96:0D:62:FD:06:0F:FE:5A:D5:3F:D6:E4:91:FA:6A:23:4A:EB:B0:7B:98:6B:F6:4B:9D:AC:F9:B4:50:6A:4E:44:AF:C6:07:7B:27:1F:6D:4B:C6:12:E1:43:C3:E9:EF:90:57:D4:80:80:0C:F1:0C:5B:0C:D8:72:D B:FE:80:A3:6C:A9:CC:F9:4B:FA:F8:D1:6B:04:E2:A1:5F:9D:B6:25:F5:1E:3D:D3:B7:A9:02:03:01:00:01 Subject Key Identifier 2A:BF:D6:85:CA:60:8D:F3:F3:09:29:96:02:52:AF:7A:99:B7:EE:25 Authority Info Access http://ocsp.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it/TrustItaliaSpATrustItaliaFD/LatestCRL.crl Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: 6A:38:F9:07:A0:B9:EB:B5:5B:C7:B2:25:0A:F8:DD:F5:FA:A9:74:9B:77:98:3F:38:57:10:27:C3:CE :39:8F:B7 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accreditationceased Status Starting Time 2008-02-19T23:00:01Z 26.2.3 - History instance n.2 - Status: accredited Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] C=IT,CN=TI Firma Digitale CA - G2,O=Trust Italia S.p.A. Service digital identities X509SubjectName Subject C: IT Subject CN: TI Firma Digitale CA - G2 ITALIA (ITALY) - Trusted List ID: ID100001 Page 373 ETSI 2014 - TSL HR - PDF/A-1b generator Subject O: Trust Italia S.p.A. Certificate fields details Version: 3 Serial Number: 35897985162083497871155648653266911809 X509 Certificate -----BEGIN CERTIFICATE----MIIDnTCCAwagAwIBAgIQGwGzUSEPuepE/LMkHJoCQTANBgkqhkiG9w0BAQUFADBPMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMSIwIAYDVQQDExlUSSBGaXJtYSBEaWdpdGFsZSBDQSAtIEcy MQswCQYDVQQGEwJJVDAeFw0wMzA1MjYwMDAwMDBaFw0xMTA1MjUyMzU5NTlaME8xHDAaBgNVBAoT E1RydXN0IEl0YWxpYSBTLnAuQS4xIjAgBgNVBAMTGVRJIEZpcm1hIERpZ2l0YWxlIENBIC0gRzIx CzAJBgNVBAYTAklUMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBPuYQtxpPx+zq/m9Tq0o+ 7DjcIpnMLfgg8xSKrBIeX6/QZiPohFkp6fDSlg1i/QYP/lrVP9bkkfpqI0rrsHuYa/ZLnaz5tFBq TkSvxgd7Jx9tS8YS4UPD6e+QV9SAgAzxDFsM2HLb/oCjbKnM+Uv6+NFrBOKhX522JfUePdO3qQID AQABo4IBeDCCAXQwHQYDVR0OBBYEFCq/1oXKYI3z8wkplgJSr3qZt+4lMDYGCCsGAQUFBwEBBCow KDAmBggrBgEFBQcwAYYaaHR0cDovL29jc3AudHJ1c3RpdGFsaWEuaXQwEgYDVR0TAQH/BAgwBgEB /wIBADBRBgNVHSAESjBIMEYGBysGAQQBxTEwOzA5BggrBgEFBQcCARYtaHR0cHM6Ly9maXJtYWRp Z2l0YWxlLnRydXN0aXRhbGlhLml0L3JwYS5odG1sMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9v bnNpdGVjcmwudHJ1c3RpdGFsaWEuaXQvVHJ1c3RJdGFsaWFTcEFUcnVzdEl0YWxpYUZEL0xhdGVz dENSTC5jcmwwIwYDVR0SBBwwGqQYMBYxFDASBgNVBAMTC1ByaXZhdGUxLTIxMA4GA1UdDwEB/wQE AwIBBjAjBgNVHREEHDAapBgwFjEUMBIGA1UEAxMLUHJpdmF0ZTEtMjEwDQYJKoZIhvcNAQEFBQAD gYEAhHoyzwrnjGMPqueA1kJT8Iynme+F5Uvgw++3YbHeK4QoyF49FudHD8KHbpC4NOvOOSq7XPJ/ qjpDAkM7AYbO1nhgc1cKkqHj/wNXZ7EmMQ84m3LuRyPbBj6e7hqmafV9JcbDymGMzFLCt589ftmk m0vqRcRY0+h29nj1wH2gLdg= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT Issuer CN: TI Firma Digitale CA - G2 Issuer O: Trust Italia S.p.A. Subject C: IT Subject CN: TI Firma Digitale CA - G2 Subject O: Trust Italia S.p.A. Valid from: Mon May 26 02:00:00 CEST 2003 Valid to: Thu May 26 01:59:59 CEST 2011 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:C1:3E:E6:10:B7:1A:4F:C7:EC:EA:FE:6F:53:AB:4A:3E:EC:38:DC:22:99:CC:2D:F8:20:F3:14:8A:AC:12:1E:5F:AF:D0:66:23:E8:8 4:59:29:E9:F0:D2:96:0D:62:FD:06:0F:FE:5A:D5:3F:D6:E4:91:FA:6A:23:4A:EB:B0:7B:98:6B:F6:4B:9D:AC:F9:B4:50:6A:4E:44:AF:C6:07:7B:27:1F:6D:4B:C6:12:E1:43:C3:E9:EF:90:57:D4:80:80:0C:F1:0C:5B:0C:D8:72:D B:FE:80:A3:6C:A9:CC:F9:4B:FA:F8:D1:6B:04:E2:A1:5F:9D:B6:25:F5:1E:3D:D3:B7:A9:02:03:01:00:01 Subject Key Identifier 2A:BF:D6:85:CA:60:8D:F3:F3:09:29:96:02:52:AF:7A:99:B7:EE:25 Authority Info Access http://ocsp.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it/TrustItaliaSpATrustItaliaFD/LatestCRL.crl Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 ITALIA (ITALY) - Trusted List ID: ID100001 Page 374 ETSI 2014 - TSL HR - PDF/A-1b generator Thumbprint: 6A:38:F9:07:A0:B9:EB:B5:5B:C7:B2:25:0A:F8:DD:F5:FA:A9:74:9B:77:98:3F:38:57:10:27:C3:CE :39:8F:B7 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/accredited Status Starting Time 2003-05-26T02:00:00Z 26.3 - Service : C=IT,CN=TI Firma Digitale CA - G3,O=Trust Italia S.p.A. Service Type Identifier Service type description http://uri.etsi.org/TrstSvc/Svctype/CA/QC [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. [it] Un servizio di generazione di certificato, per creare e firmare certificati qualificati basati sull'identità e altri attributi verificati dai servizi di registrazione pertinenti. [ en ] C=IT,CN=TI Firma Digitale CA - G3,O=Trust Italia S.p.A. Service Name Name Service digital identities Certificate fields details Version: 3 Serial Number: 2174933484462853419829527664505360211 X509 Certificate -----BEGIN CERTIFICATE----MIIDqTCCAxKgAwIBAgIQAaLgf/UkEvES4J0EP/+PUzANBgkqhkiG9w0BAQUFADBPMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMSIwIAYDVQQDExlUSSBGaXJtYSBEaWdpdGFsZSBDQSAtIEcz MQswCQYDVQQGEwJJVDAeFw0wNDA2MjgwMDAwMDBaFw0wOTA2MjcyMzU5NTlaME8xHDAaBgNVBAoT E1RydXN0IEl0YWxpYSBTLnAuQS4xIjAgBgNVBAMTGVRJIEZpcm1hIERpZ2l0YWxlIENBIC0gRzMx CzAJBgNVBAYTAklUMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEJU1iDXf6IxQwrEIE8xPV s4v275j1l/c7ieC2mvC8zTvkGtWaCeeErlpa59fcL2jSIynl8bd+Ds87qZpmlbIGk9/cT45g/1fN QE+uWKZEhazgczaIY6scYB8Ppzx1IF4kosXNaNOQo5I98YEWEe3mwnT9Ck6KxLoHOeDD/VoXHQID AQABo4IBhDCCAYAwNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC50cnVz dGl0YWxpYS5pdDASBgNVHRMBAf8ECDAGAQH/AgEAMFEGA1UdIARKMEgwRgYHKwYBBAHFMTA7MDkG CCsGAQUFBwIBFi1odHRwczovL2Zpcm1hZGlnaXRhbGUudHJ1c3RpdGFsaWEuaXQvcnBhLmh0bWww ZgYDVR0fBF8wXTBboFmgV4ZVaHR0cDovL29uc2l0ZWNybC50cnVzdGl0YWxpYS5pdC9UcnVzdEl0 YWxpYVNwQVNlcnZpemlkaUNlcnRpZmljYXppb25lRkQvTGF0ZXN0Q1JMLmNybDAjBgNVHRIEHDAa pBgwFjEUMBIGA1UEAxMLUHJpdmF0ZTEtMjMwDgYDVR0PAQH/BAQDAgEGMCMGA1UdEQQcMBqkGDAW MRQwEgYDVQQDEwtQcml2YXRlMS0yMzAdBgNVHQ4EFgQU9EXPQDNgMquQ2RSI7YLfi4mCjTUwDQYJ KoZIhvcNAQEFBQADgYEAdohh7y6Wzl/CVAbVn2k0mI1Xmf38Z2q+Whl83nNqPa9wHOf3ouYEk0Kp R+fT6MsBYXRQE4l58jz3ShI/5O4sMeIKkMmERYLqSbRiM5sNTshXU60D3+06XS7QQbYWcHANqYid xEf4kRiASXJcxeMd7BhsZtQaJBGfPV/qUdP/Mns= -----END CERTIFICATE----- Signature algorithm: SHA1withRSA Issuer C: IT Issuer CN: TI Firma Digitale CA - G3 Issuer O: Trust Italia S.p.A. Subject C: IT Subject CN: TI Firma Digitale CA - G3 Subject O: Trust Italia S.p.A. Valid from: Mon Jun 28 02:00:00 CEST 2004 ITALIA (ITALY) - Trusted List ID: ID100001 Page 375 ETSI 2014 - TSL HR - PDF/A-1b generator Valid to: Sun Jun 28 01:59:59 CEST 2009 Public Key: 30:81:9F:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:81:8D:00:30:81:89:02:81:81:00:C4:25:4D:62:0D:77:FA:23:14:30:AC:42:04:F3:13:D5:B3:8B:F6:EF:98:F5:97:F7:3B:89:E0:B6:9A:F0:BC:CD:3B:E4:1A:D5:9A:09 :E7:84:AE:5A:5A:E7:D7:DC:2F:68:D2:23:29:E5:F1:B7:7E:0E:CF:3B:A9:9A:66:95:B2:06:93:DF:DC:4F:8E:60:FF:57:CD:40:4F:AE:58:A6:44:85:AC:E0:73:36:88:63:AB:1C:60:1F:0F:A7:3C:75:20:5E:24:A2:C5:CD:68:D3:90 :A3:92:3D:F1:81:16:11:ED:E6:C2:74:FD:0A:4E:8A:C4:BA:07:39:E0:C3:FD:5A:17:1D:02:03:01:00:01 Authority Info Access http://ocsp.trustitalia.it Basic Constraints IsCA: true - Path length: 0 Certificate Policies Policy OID: 1.3.6.1.4.1.8881 CPS pointer: https://firmadigitale.trustitalia.it/rpa.html CRL Distribution Points http://onsitecrl.trustitalia.it/TrustItaliaSpAServizidiCertificazioneFD/LatestCRL.crl Subject Key Identifier F4:45:CF:40:33:60:32:AB:90:D9:14:88:ED:82:DF:8B:89:82:8D:35 Key Usage: keyCertSign - cRLSign Thumbprint algorithm: SHA-256 Thumbprint: A3:F0:AE:89:1C:9E:72:4A:DE:A1:69:DC:BB:0F:AD:FE:11:A2:03:7A:5E:A9:70:ED:02:63:93:8E: F2:45:03:E8 Service Status http://uri.etsi.org/TrstSvc/TrustedList/Svcstatus/undersupervision Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. [it] Il servizio specificato in "Service digital identity" fornita dal fornitore di servizi di fiducia identificato in "TSP name" è attualmente sotto sorveglianza, per il rispetto delle disposizioni previste dalla normativa europea applicabile, lo Stato membro identificato nel "Scheme territory" in cui è stabilito il prestatore di servizi di fiducia. Status Starting Time 2008-02-19T23:01:01Z 26.3.1 - Extension (critical): TakenOverBy TakenOverBy URI [ en ] http://www.pec.it/en/information.html [ en ] Aruba Posta Elettronica Certificata S.p.A. Name [ it ] Agenzia per l'Italia Digitale Name [ en ] Agenzia per l'Italia Digitale TSP Name Name Scheme Operator Name Scheme Territory ITALIA (ITALY) - Trusted List ID: ID100001 IT Page 376 ETSI 2014 - TSL HR - PDF/A-1b generator 26.3.2 - History instance n.1 - Status: accreditationceased Service Type Identifier http://uri.etsi.org/TrstSvc/Svctype/CA/QC Service Name Name [ en ] C=IT,CN=TI Firma Digitale CA - G3,O=Trust Italia S.p.A. Service digital identities X509SubjectName Subject C: IT Subject CN: TI Firma Digitale CA - G3 Subject O: Trust Italia S.p.A. Certificate fields details Version: 3 Serial Number: 2174933484462853419829527664505360211 X509 Certificate -----BEGIN CERTIFICATE----MIIDqTCCAxKgAwIBAgIQAaLgf/UkEvES4J0EP/+PUzANBgkqhkiG9w0BAQUFADBPMRwwGgYDVQQK ExNUcnVzdCBJdGFsaWEgUy5wLkEuMSIwIAYDVQQDExlUSSBGaXJtYSBEaWdpdGFsZSBDQSAtIEcz MQswCQYDVQQGEwJJVDAeFw0wNDA2MjgwMDAwMDBaFw0wOTA2MjcyMzU5NTlaME8xHDAaBgNVBAoT E1RydXN0IEl0YWxpYSBTLnAuQS4xIjAgBgNVBAMTGVRJIEZpcm1hIERpZ2l0YWxlIENBIC0gRzMx CzAJBgNVBAYTAklUMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEJU1iDXf6IxQwrEIE8xPV s4v275j1l/c7ieC2mvC8zTvkGtWaCeeErlpa59fcL2jSIynl8bd+Ds87qZpmlbIGk9/cT45g/1