preproduccio.administracio-emp.empresa.extranet.gencat.cat

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:c4:3a:3a:9d:ff:26:34:c3:37:67:56:7c:9f:e1:af was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=preproduccio.administracio-emp.empresa.extranet.gencat.cat

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:c4:3a:3a:9d:ff:26:34:c3:37:67:56:7c:9f:e1:af
Serial Number (int): 8994239182870362126007761699359154607
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 26:f0:35:8b:4a:01:f2:3b:67:dd:0d:94:8f:e4:25:86:e3:2a:b0:ed
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 4c:e6:17:3c:26:52:06:7b:02:5c:28:0f:6a:79:ee:87:a5:70:b7:c2
Fingerprint (sha256): 02:3a:fa:ca:04:3e:17:87:75:69:de:69:de:b6:37:63:7b:1e:41:63:b1:36:0f:52:a9:da:96:32:70:df:19:f8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate preproduccio.administracio-emp.empresa.extranet.gencat.cat

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preproduccio.administracio-emp.empresa.extranet.gencat.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preproduccio.administracio-emp.empresa.extranet.gencat.cat

Other certificates including the domain name gencat.cat

(limited to 100 certificates)
preproduccio.core2.simdcat.gencat.cat
preproduccio.gia.oficinadetreball.gencat.cat
sirh.extranet.gencat.cat
ckm.salut.gencat.cat
integracio.admin-seu.atc.intranet.gencat.cat
silvcmgmoi.ics.intranet.gencat.cat
preproduccio.omi.monitoratge.ctti.extranet.gencat.cat
aplicacions.governacio.extranet.gencat.cat
economiacooperativa.gencat.cat
podl2.ithinkupc.com
preproduccio.dretssocials.gencat.cat
preproduccio.salapremsa.gencat.cat
sivic.salut.gencat.cat
connectat.voluntariat.gencat.cat
atenea-externs2.upcnet.es
preproduccio.centraltelefonica.serveiocupacio.gencat.cat
dadesculturals.gencat.cat
gestiowifi.ctti.intranet.gencat.cat
preproduccio.bdi.oficinadetreball.extranet.gencat.cat
preproduccio.jocdelsdrets.gencat.cat
primersinterventors.sem.gencat.cat
epmsi.siep.justicia.intranet.gencat.cat
eformularis.intranet.gencat.cat
tramitador.intranet.gencat.cat
preproduccio.citasalut.gencat.cat
seu2.atc.gencat.cat
preproduccio.etc2.ics.intranet.gencat.cat
preproduccio.store10.simdcat.gencat.cat
jmsmc.vistes.justicia.intranet.gencat.cat
preproduccio.portal.gestorapi.gencat.cat
qualitat.solucions.gencat.cat
tls.automattic.com
cas.dtes.extranet.gencat.cat
entorn.bustiaetica.gencat.cat
pre.bus.salut.gencat.cat
consorciautomocio.empresa.gencat.cat
preproduccio.conciliacions.gencat.cat
atenea-externs2.upcnet.es
extranetdgp.gencat.cat
*.accio.gencat.cat
externet.gencat.cat
serveiscentrals.justicia.intranet.gencat.cat
conta.gencat.cat
preproduccio.enquestes.emc.extranet.gencat.cat
preproduccio.convocatories.dgp.interior.gencat.cat
acc.bus.salut.gencat.cat
pre.bus.salut.gencat.cat
preproduccio.infocentres.esocial.gencat.cat
ecap.ics.gencat.cat
accesuniversitat.gencat.cat
icip.cat
preproduccio.reli.intranet.gencat.cat
convocatories.dgp.interior.gencat.cat
webservices.tsnu.sem.gencat.cat
treball.gencat.cat
preproduccio.sirh.extranet.gencat.cat
preproduccio.serveis.visor.hes.catsalut.gencat.cat
atenea-externs2.upcnet.es
preproduccio.culturapp.cultura.gencat.cat
preproduccio.administracio-emp.empresa.extranet.gencat.cat
siljxmgas01.ics.intranet.gencat.cat
preproduccio.appsalut.gencat.cat
appsalut.gencat.cat
gestio.contractaciopublica.gencat.cat
sslcertificate1.queue-it.net
guc.actic.gencat.cat
preproduccio.revistes.cultura.gencat.cat
bi4.gencat.cat
qualitat.solucions.gencat.cat
cepselots.cultura.gencat.cat
servicedesk.weareavidity.com
pln.salut.intranet.gencat.cat
pre.hccc.salut.gencat.cat
cadgp.dgp.interior.gencat.cat
preproduccio.esocial.gencat.cat
llibreria.gencat.cat
espai.educacio.gencat.cat
servicedesk.vretigas.it
gaudi.atc.intranet.gencat.cat
biblioteques.sponsorwifi.intranet.gencat.cat
podl2.ithinkupc.com
preproduccio.mitjansdecomunicacio.gencat.cat
pre.tramitador.intranet.gencat.cat
preproduccio.aplicacions.agricultura.gencat.cat
tls.automattic.com
tls.automattic.com
formaciooberta.eapc.gencat.cat
preproduccio.oficinadetreball.gencat.cat
atenea-externs.upcnet.es
dadjus.justicia.gencat.cat
preproduccio.cadi.aplicacions.economia.gencat.cat
s5.salut.extranet.gencat.cat
gespro.dtes.gencat.cat
ws.transit.intranet.gencat.cat
qualitat.solucions.gencat.cat
formacio.aplicacions.ensenyament.gencat.cat
mail.gencat.cat
preproduccio.pgme-intra.dgp.interior.intranet.gencat.cat
idp1-gicar.gencat.cat
integracio.presidencia.intranet.gencat.cat

Certificate

The complete raw certificate details for preproduccio.administracio-emp.empresa.extranet.gencat.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou0HJVPpaBDXiLVhFD2M
7MjR4Bspr7kqN6v8mRk9cY8cDyXAN1nrBvBrWGua3JBobh1F0koeDkUjsXu0si7Q
0Cgi9RfEVa7A96p/RujILB3vCvFiMyGvj4UgdgtGb+yoZhPG4VqvbUBZI/0IK4ot
xKfgTky0SY9TYWjQ27shalXeG7GHZyGzbGQpS0+cjBPZSI896ngKabiQEJ0S1p+Q
dcIFREff1BCJ/C6Ar0DLOtQn9Bu+6JnW6uFJppuvs/gpRSQAz8WC7IhvEZ900z8W
upcGl3ibfhIetIxoCv8NGt1AbXSAK3mlQWwusWBZZVk+Bn29O/1fAuV2oX5EURWs
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8994239182870362126007761699359154607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preproduccio.administracio-emp.empresa.extranet.gencat.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20567488224845276585983495386823382084789554357189132635689977519430808543496421123607331311129050336604742081722762431378044013913158781828898201317077126826038282718614577284614099202759513297376861191883732228947084752145828180865188273405689027376823578465012931395208239651692164245595925780365148903122689372272179403024598773244976120179806835329280144107748370608684774387983400034927053191168759429336632023611690597218501472478438018211057837303791487930544163373687191125374657263884947958259707127907226475035330788494763975293070075549452025482690665267027919111883767804324863084171936026932127867448541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26f0358b4a01f23b67dd0d948fe42586e32ab0ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preproduccio.administracio-emp.empresa.extranet.gencat.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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