preproduccio.sirh.extranet.gencat.cat

- Generalitat de Catalunya -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 93:a1:2c:25:98:49:cd:36:8f:de:4e:c3:bb:59:d5:90 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Generalitat de Catalunya

Organization: Generalitat de Catalunya
State / Province: Barcelona
Country: ES

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 93:a1:2c:25:98:49:cd:36:8f:de:4e:c3:bb:59:d5:90
Serial Number (int): 196233370579202256435628489038724978064
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e4:95:f3:5c:48:70:4e:5a:95:0a:b6:16:4b:8a:c4:55:dc:19:71:0b
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 6d:ee:64:24:af:d7:dd:d8:39:1f:5e:67:81:fb:10:58:4d:46:f2:d4
Fingerprint (sha256): 02:01:c0:46:80:d2:74:fb:b7:1b:15:29:9a:1d:8c:31:c8:32:46:21:b1:90:4f:05:af:0d:c3:a0:b8:84:35:d5

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate preproduccio.sirh.extranet.gencat.cat

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preproduccio.sirh.extranet.gencat.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preproduccio.sirh.extranet.gencat.cat
www.preproduccio.sirh.extranet.gencat.cat

Other certificates including the domain name gencat.cat

(limited to 100 certificates)
preproduccio.core2.simdcat.gencat.cat
preproduccio.gia.oficinadetreball.gencat.cat
sirh.extranet.gencat.cat
ckm.salut.gencat.cat
integracio.admin-seu.atc.intranet.gencat.cat
silvcmgmoi.ics.intranet.gencat.cat
preproduccio.omi.monitoratge.ctti.extranet.gencat.cat
aplicacions.governacio.extranet.gencat.cat
economiacooperativa.gencat.cat
podl2.ithinkupc.com
preproduccio.dretssocials.gencat.cat
preproduccio.salapremsa.gencat.cat
sivic.salut.gencat.cat
connectat.voluntariat.gencat.cat
atenea-externs2.upcnet.es
preproduccio.centraltelefonica.serveiocupacio.gencat.cat
dadesculturals.gencat.cat
gestiowifi.ctti.intranet.gencat.cat
preproduccio.bdi.oficinadetreball.extranet.gencat.cat
preproduccio.jocdelsdrets.gencat.cat
primersinterventors.sem.gencat.cat
epmsi.siep.justicia.intranet.gencat.cat
eformularis.intranet.gencat.cat
tramitador.intranet.gencat.cat
preproduccio.citasalut.gencat.cat
seu2.atc.gencat.cat
preproduccio.etc2.ics.intranet.gencat.cat
preproduccio.store10.simdcat.gencat.cat
jmsmc.vistes.justicia.intranet.gencat.cat
preproduccio.portal.gestorapi.gencat.cat
qualitat.solucions.gencat.cat
tls.automattic.com
cas.dtes.extranet.gencat.cat
entorn.bustiaetica.gencat.cat
pre.bus.salut.gencat.cat
consorciautomocio.empresa.gencat.cat
preproduccio.conciliacions.gencat.cat
atenea-externs2.upcnet.es
extranetdgp.gencat.cat
*.accio.gencat.cat
externet.gencat.cat
serveiscentrals.justicia.intranet.gencat.cat
conta.gencat.cat
preproduccio.enquestes.emc.extranet.gencat.cat
preproduccio.convocatories.dgp.interior.gencat.cat
acc.bus.salut.gencat.cat
pre.bus.salut.gencat.cat
preproduccio.infocentres.esocial.gencat.cat
ecap.ics.gencat.cat
accesuniversitat.gencat.cat
icip.cat
preproduccio.reli.intranet.gencat.cat
convocatories.dgp.interior.gencat.cat
webservices.tsnu.sem.gencat.cat
treball.gencat.cat
preproduccio.sirh.extranet.gencat.cat
preproduccio.serveis.visor.hes.catsalut.gencat.cat
atenea-externs2.upcnet.es
preproduccio.culturapp.cultura.gencat.cat
preproduccio.administracio-emp.empresa.extranet.gencat.cat
siljxmgas01.ics.intranet.gencat.cat
preproduccio.appsalut.gencat.cat
appsalut.gencat.cat
gestio.contractaciopublica.gencat.cat
sslcertificate1.queue-it.net
guc.actic.gencat.cat
preproduccio.revistes.cultura.gencat.cat
bi4.gencat.cat
qualitat.solucions.gencat.cat
cepselots.cultura.gencat.cat
servicedesk.weareavidity.com
pln.salut.intranet.gencat.cat
pre.hccc.salut.gencat.cat
cadgp.dgp.interior.gencat.cat
preproduccio.esocial.gencat.cat
llibreria.gencat.cat
espai.educacio.gencat.cat
servicedesk.vretigas.it
gaudi.atc.intranet.gencat.cat
biblioteques.sponsorwifi.intranet.gencat.cat
podl2.ithinkupc.com
preproduccio.mitjansdecomunicacio.gencat.cat
pre.tramitador.intranet.gencat.cat
preproduccio.aplicacions.agricultura.gencat.cat
tls.automattic.com
tls.automattic.com
formaciooberta.eapc.gencat.cat
preproduccio.oficinadetreball.gencat.cat
atenea-externs.upcnet.es
dadjus.justicia.gencat.cat
preproduccio.cadi.aplicacions.economia.gencat.cat
s5.salut.extranet.gencat.cat
gespro.dtes.gencat.cat
ws.transit.intranet.gencat.cat
qualitat.solucions.gencat.cat
formacio.aplicacions.ensenyament.gencat.cat
mail.gencat.cat
preproduccio.pgme-intra.dgp.interior.intranet.gencat.cat
idp1-gicar.gencat.cat
integracio.presidencia.intranet.gencat.cat

Certificate

The complete raw certificate details for preproduccio.sirh.extranet.gencat.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIRAJOhLCWYSc02j95Ow7tZ1ZAwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yNDA1MTAwMDAwMDBaFw0yNTA1MTAyMzU5NTlaMHQxCzAJBgNV
BAYTAkVTMRIwEAYDVQQIEwlCYXJjZWxvbmExITAfBgNVBAoTGEdlbmVyYWxpdGF0
IGRlIENhdGFsdW55YTEuMCwGA1UEAxMlcHJlcHJvZHVjY2lvLnNpcmguZXh0cmFu
ZXQuZ2VuY2F0LmNhdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN7s
To4umkJX8RYuZOERMNKJtNegg4cRUT+wieysy0IWl1SmArtHiG6bgorURXHwOAhu
YjrEFskkOAUBw6XdvA/UluzdbjoHLcMvdk9vVZvJobbMUybHCuYeYmf5GmfNni87
5aF2VXH6sREtRqBzIq5KEIx0F0AtSI9DU3JcWoFUfp/nP9iLFeBI/iQFtK7CtzFW
+FE5mxHqfQgszQ3yLGrU+mXsazxDU6udWBmvHBQN7Uc2PTFt4OAqYpp3UTDKn1zn
tsYvTj5GEhXDPa/9YSxMxyOfvk+JRqmthXxJno73yBpnShPH88UvA3FPaGSD8UGZ
8sa634TbwaHR0lJXKpECAwEAAaOCA5MwggOPMB8GA1UdIwQYMBaAFBfZ1iUnZ/kx
wklD2TA2RIxsqU/rMB0GA1UdDgQWBBTklfNcSHBOWpUKthZLisRV3BlxCzAOBgNV
HQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcC
ARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEw
T6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXph
dGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4w
fDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNB
T3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEF
BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wWwYDVR0RBFQwUoIlcHJlcHJv
ZHVjY2lvLnNpcmguZXh0cmFuZXQuZ2VuY2F0LmNhdIIpd3d3LnByZXByb2R1Y2Np
by5zaXJoLmV4dHJhbmV0LmdlbmNhdC5jYXQwggF8BgorBgEEAdZ5AgQCBIIBbASC
AWgBZgB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABj2FfQSYA
AAQDAEcwRQIhAKEQuHoufvGiOqj00VV3YGVfVSv6ovnrQ641OiMtraSHAiAEJO0E
WOJctz3GVPs0hXEOeQetNjUufbLenzykpAOAqQB1AKLjCuRF772tm3447Udnd1PX
gluElNcrXhssxLlQpEfnAAABj2FfQQcAAAQDAEYwRAIgK06YziA7vuNLnZEwoD/n
JhNtgTn7hfK5Oc0A3zCGPpsCIFoX/ELelOUYmSkH1UTL1i6lq/jH9bbKKLGvEuQP
xm1RAHUATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGPYV9BBQAA
BAMARjBEAiA5KfGFjBLMNLgpOX1Brt/6XRsk+4xrTmeb/AUO1hUL+gIgaiGPXAtK
JL+fTL4uDJ9e1lKJuHaucxTxzJckUfMGjBUwDQYJKoZIhvcNAQELBQADggEBAJv0
Xq0/BejsGG7XvFQ1mDdNXUf6TigfG/VzGxGS1hRaIfwtvOJiUYlzXNP3oBqgYSKl
RfvSCMPiJNtNDEzKV4MfIFp9CFFC4NczpWjTUdkD5usvn/73ZV5mU/bFqTshY8S9
kJUKzoNYTLtAcnfqcBVr6la0v7SSr6q56xuqtmtzsv5Dons6MLGzWnLqDr05nOq1
SPsM02Hvp7/GbpDtnRLgS22Vj9hC9fBvulj1AI3BeugBD6iM01FECc9bNyq7W3tF
xEZS938OgyfDIRgzhkwVVl8yH8gOm7/WKYxXxISxluNcng//b4SlNJsiwkXg5mks
BC5bGSwry4yorpcZPKw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uxOji6aQlfxFi5k4REw
0om016CDhxFRP7CJ7KzLQhaXVKYCu0eIbpuCitRFcfA4CG5iOsQWySQ4BQHDpd28
D9SW7N1uOgctwy92T29Vm8mhtsxTJscK5h5iZ/kaZ82eLzvloXZVcfqxES1GoHMi
rkoQjHQXQC1Ij0NTclxagVR+n+c/2IsV4Ej+JAW0rsK3MVb4UTmbEep9CCzNDfIs
atT6ZexrPENTq51YGa8cFA3tRzY9MW3g4CpimndRMMqfXOe2xi9OPkYSFcM9r/1h
LEzHI5++T4lGqa2FfEmejvfIGmdKE8fzxS8DcU9oZIPxQZnyxrrfhNvBodHSUlcq
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 196233370579202256435628489038724978064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Generalitat de Catalunya'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preproduccio.sirh.extranet.gencat.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28141430956694665797282924537864608633162336321676837743543407729883503276904823358012088630020861490487503076315569190338257107060651433496765361547826343315360363066756467033079375967515796529107637634287432799514289254172659756954224431242354027640269239844798389906653706591159320654221650506685183774099294568583023685305825312909949645785444769449474326813682480375891347148775450928567110394755790147055712383108453241830693602005597891719061028540231518663664277742993974065298151282647384920286837812770773408943752031329064875149511634555460656956402996227385543281970510659947992404501179109475940824459921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e495f35c48704e5a950ab6164b8ac455dc19710b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preproduccio.sirh.extranet.gencat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preproduccio.sirh.extranet.gencat.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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