crm.dipsalut.cat

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:07:08:6e:bb:9c:09:9a:6f:60:be:03:31:45:08:51 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm.dipsalut.cat

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:07:08:6e:bb:9c:09:9a:6f:60:be:03:31:45:08:51
Serial Number (int): 11999569072511027046548470522433570897
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:e5:ef:b5:a9:2c:fb:eb:7f:52:f9:31:fe:a4:22:4d:59:5d:e5:b5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 7e:f1:0d:b3:e9:3c:a6:be:56:bd:80:3f:8f:ef:b6:75:09:e6:cb:a5
Fingerprint (sha256): 09:21:7a:1a:6e:c1:8c:2f:28:2e:eb:30:a5:59:71:7b:fd:d4:79:ce:cc:a1:56:21:0b:62:78:04:68:16:13:13

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate crm.dipsalut.cat

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.dipsalut.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.dipsalut.cat

Other certificates including the domain name dipsalut.cat

(limited to 100 certificates)
crm.dipsalut.cat
www.dipsalut.cat
crm.dipsalut.cat
randomprompt.com
registre.dipsalut.cat
joytasker.com
www.upliftnow.net
docu.dipsalut.cat
www.dipsalut.cat
aplicacions.dipsalut.cat
www.dipsalut.cat
transparencia.dipsalut.cat
www.rhynocare.ca
www.ladietadeldottmagrolino.play-bay.com
docs.dipsalut.cat
registre.dipsalut.cat
aplicacions.dipsalut.cat
docs.dipsalut.cat
platform.censminoristes.dipsalut.cat
simsap.dipsalut.cat
console.sagantosu-fan-token.jasmy.co.jp
crm.dipsalut.cat
test.tetel.in
seu.dipsalut.cat
alfresco.dipsalut.cat
seu.dipsalut.cat
seu.dipsalut.cat
ssid.yidindji.country
www.dipsalut.cat
transparencia.dipsalut.cat
test.tetel.in
*.dipsalut.cat
www.cpanel.lmserp.com
transparencia.dipsalut.cat
alfresco.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
sgi.dipsalut.cat
seu.dipsalut.cat
transparencia.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
transparencia.dipsalut.cat
www.hachede.tv
transparencia.dipsalut.cat
www.dipsalut.cat
www.dipsalut.cat
sgi.dipsalut.cat
alfresco.dipsalut.cat
seu.dipsalut.cat
docu.dipsalut.cat
seu.dipsalut.cat
simsap.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docs.dipsalut.cat
aplicacions.dipsalut.cat
hipchat.dipsalut.cat
transparencia.dipsalut.cat
docs.dipsalut.cat
docs.dipsalut.cat
docs.dipsalut.cat
registre.dipsalut.cat
www.dipsalut.cat
api-uat.freetrade.io
*.dipsalut.cat
www.global-visaconsultant.com
seu.dipsalut.cat
seu.dipsalut.cat
aplicacions.dipsalut.cat
docs.dipsalut.cat
crm.dipsalut.cat
www.dipsalut.cat
crm.dipsalut.cat
simsap.dipsalut.cat
simsap.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docs.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docu.dipsalut.cat
alfresco.dipsalut.cat
docu.dipsalut.cat
www.dipsalut.cat

Certificate

The complete raw certificate details for crm.dipsalut.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xrv2cL9Qh5hPXu2BXeA
+nMvNxUFRQg49begcHb8+jjGYkeb96UlPe4+lSC9faN47VcXiOkaN73AF8G+Ob05
YAqbhnDY5I+s1YkbXuXVX7GB3yvcXz1FHYlnKVRbbtx2yFe+DPyAV+oHh5tbf0j3
I6z28pcmxMuxEruPTD84GXnvn3N7yrjD6pXobmdw0V5IFzjudP3MCcE6IX72iBZG
mrJNttPpk+x3TKAwNRuY95HVS3vwbx6bgyE4VrtkQFC8Z3E89XCz/eYvQCgUsybs
bhgtO2IpdW4D2J1r7Tqlc9BLBnm5cbO/qKPtsEkqoJKuQUFLqpn/mM/xtwcXif/+
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11999569072511027046548470522433570897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.dipsalut.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27154518656310789416514169825089822565702664840365871916192233606094659478335778299377510950715159638616401198280701047379157073178178665627539263100242083888811412827442239896644104487162972523081890540289068446610299569166940923077843468749450352725462602592032870294671704137295784613179608305701958312265097973984949586271448611802866588588737384527857167724112449503418408026029779719532854138767699825550456685292183812810648272868509145288955144975167450240281781620294901323535957357807557483395086194451112532898560791500760330138061697255952426083170981132378538508710897805152966580513433412958881107148387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fe5efb5a92cfbeb7f52f931fea4224d595de5b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.dipsalut.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016eb7604af50000040300473045022013c0aef0de0f10618530b96ade66fe0fec4968cea961ca8ca34476904fca6edc02210099fb6678389535e590b339f2b9eba6531a29113e19a6091774e466fd0fda44000076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eb7604a9c000004030047304502205d345a0164aeb3b440e3e5045fdf6e6bbfcefafd4c7be6e661aaf80cb68ea38a022100d14b4d2639b5dd57d64967d576a1af0319b83ca0b18de5825b5f7d272e83eaf8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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