correo.amsystem.es

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 30:2f:15:18:3a:b4:20:83:f3:38:93:4d:4a:c0:5f:e3 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=correo.amsystem.es

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:2f:15:18:3a:b4:20:83:f3:38:93:4d:4a:c0:5f:e3
Serial Number (int): 64047409600272566592292169990432382947
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 39:71:ea:42:31:7e:04:8a:ac:25:de:b0:95:2b:03:96:cf:ff:76:89
Fingerprint (sha256): 07:c7:4b:d4:8a:25:c8:46:76:ad:f8:64:6e:5a:88:b7:dd:9b:6c:21:77:44:bb:5b:b3:f0:59:07:14:cf:fd:5f

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate correo.amsystem.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for correo.amsystem.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

correo.amsystem.es

Other certificates including the domain name amsystem.es

(limited to 100 certificates)
correo.amsystem.es
*.amsystem.es
amsystem.es
cmi.amsystem.es
correo.amsystem.es
amsystem.es
cmi.amsystem.es
www.amsystem.es
*.amsystem.es
cmi.amsystem.es
*.amsystem.es
cmi.amsystem.es
amsystem.es
correo.amsystem.es
cmi.amsystem.es
cmi.amsystem.es
*.amsystem.es
*.amsystem.es
cmi.amsystem.es
*.amsystem.es
cmi.amsystem.es
cmi.amsystem.es
www.amsystem.es
correo.amsystem.es
*.amsystem.es
*.amsystem.es
*.amsystem.es
*.amsystem.es
*.amsystem.es
*.amsystem.es
correo.amsystem.es
correo.amsystem.es
cmi.amsystem.es

Certificate

The complete raw certificate details for correo.amsystem.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIQMC8VGDq0IIPzOJNNSsBf4zANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS
UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDQyMTAwMDAwMFoXDTIwMDYxOTIzNTk1
OVowHTEbMBkGA1UEAwwSY29ycmVvLmFtc3lzdGVtLmVzMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAsZySVfI7wsLO4ygdZKdSFz5qFFbccnmyEPkNe8mj
tuOLdwHLrbdMbbYMtMomOnRdtC8Gd0wJ+emRN/X+f/qwHZZzyJb7fQ9gVoHzPpK0
uKZqYwq2ugq4Pn6wMB4GJ3s77/uqSGzf6sz0SSGteOe3OWLWAri+2Sgsy2deO3I8
Pso8T7Ty6VDiVz3xyil5jURumvVTtrmiZlK6VNjPLS/f4QwYeLGN+aYKwcqKPCAF
B4OCvBZFTZNmqgWY4mYz9Xd2g+41eVD+JT2rsh/rr+/wugYoU7NvoDc5OWe43U6F
wIEZ8YAKlQOfeXV8EFaQ8qTvUvo0yLnFEFRw7s5I/GgzrQIDAQABo4IDbjCCA2ow
HQYDVR0RBBYwFIISY29ycmVvLmFtc3lzdGVtLmVzMAkGA1UdEwQCMAAwKwYDVR0f
BCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYDVR0gBGgw
ZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wu
Y29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNv
bS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUF
BwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAmBggrBgEF
BQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggH1BgorBgEEAdZ5AgQC
BIIB5QSCAeEB3wB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAAB
W49WHmwAAAQDAEYwRAIgWqkaClaQQAr4SVnLcQscQJrX57mdYRobThyFIoz08SEC
IGjGvvJmLNp11HMqKntHTOeTwqrkwnX+D48o55W9dR+kAHYApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFbj1YetQAABAMARzBFAiEA3HsjcOhgP1/n
ptcJ5pWwe7swCTp0r7cKPPi2oWkEEqsCIBqvBS6KTL3WWQc9I41d5gIdO93wdw9C
XdKVwHUbEKIrAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFb
j1YgfQAABAMASDBGAiEA/suIDAz3hLofE1EA7TcAG5ZkBrl1nxjRHr9DTZOQgmwC
IQC9L5RX2OmAhmiLCoquweArQZnrcQzbmyl37HNckRhPpQB1ALx44d/F9jxoRkkz
TaEPoV8JeWkgCcCBtPP2kX8+2bilAAABW49WH2IAAAQDAEYwRAIgEYJA6Y9iyTfI
UWytEsWVUBzw7PcJ5Jx3FXPnMoopf8UCIBCPAhXBfaupHcqSdQQXpruDAb+iveip
tMrhz4a1hB/+MA0GCSqGSIb3DQEBCwUAA4IBAQAiiI06Y23I0BiLbdzAEswxZGtT
eEKt618Q+GqH831GVOpz/+KvaphnRdoEDRdRTmB822bAqx7+pNeR/GToPRF2gVxY
w8d7pu3F7dFf4TIWP+j30gGLRStakfqtlm6oLXF+jyT+QE7vtvScvb/1sYdenRj4
QjTsGp2tKm9IBgM0eUvcWlCmz1FLFMzmn0ZlguVkqqOctGw2r8ODRUJ5UbnyrcCh
BoZkarAx7ZQPDSLjEAD+5rat7K7Pz0YbbMZzZ74Vf+o54ur60WfrYAKeN2mXiCSE
HgTQp2j3DsslqR0ba2jH1uegF0aWiAJnqhS1Uc/L+56Wv97n8isDItOOdnxW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZySVfI7wsLO4ygdZKdS
Fz5qFFbccnmyEPkNe8mjtuOLdwHLrbdMbbYMtMomOnRdtC8Gd0wJ+emRN/X+f/qw
HZZzyJb7fQ9gVoHzPpK0uKZqYwq2ugq4Pn6wMB4GJ3s77/uqSGzf6sz0SSGteOe3
OWLWAri+2Sgsy2deO3I8Pso8T7Ty6VDiVz3xyil5jURumvVTtrmiZlK6VNjPLS/f
4QwYeLGN+aYKwcqKPCAFB4OCvBZFTZNmqgWY4mYz9Xd2g+41eVD+JT2rsh/rr+/w
ugYoU7NvoDc5OWe43U6FwIEZ8YAKlQOfeXV8EFaQ8qTvUvo0yLnFEFRw7s5I/Ggz
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64047409600272566592292169990432382947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'correo.amsystem.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22421388324349315660352237611201668890918236431710762749138496876273013540985348954101013249310961414146103217178599945880706339597715861997040573394029484228337399659630218420046335672988265173224152839363535076563229176909319820537458412363435839235256535120721981104414150504635246339633021903668512187215628463879341893523616837798761021555958001133656071752953365366905667484903283603972513610735353774636634747009701626722568654805498417491307859242051936503053246088804859665283440831183744814000352903795078989806950295093883861578828876244823718692264892892883492279703127818583761810877313910954166132945837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correo.amsystem.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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