sgie.madrid.org

- AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7a:8b:17:f8:47:2d:5d:07:32:82:cd:eb was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID

Organization: AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID
State / Province: Madrid
Locality: Madrid
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7a:8b:17:f8:47:2d:5d:07:32:82:cd:eb
Serial Number (int): 37925325081481025957654613483
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 72:0c:e0:f3:21:92:06:a3:bb:a6:31:d6:7a:c9:a7:6f:7c:e3:5c:4b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 0f:cc:ee:66:33:c4:7a:d4:2e:23:96:13:46:2b:28:51:86:f8:2e:19
Fingerprint (sha256): 09:a5:ce:a2:98:7f:7c:cc:b7:84:bb:df:28:87:9f:e6:da:9d:8f:a2:bd:94:96:83:88:fb:f0:5e:c7:20:9b:7a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate sgie.madrid.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sgie.madrid.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sgie.madrid.org

Other certificates including the domain name madrid.org

(limited to 100 certificates)
estadisticas.madrid.org
h12oenigmapre.salud.madrid.org
formacion.madrid.org
gestionesytramites.madrid.org
HTAJCARRUSEL.salud.madrid.org
jusmadrid.madrid.org
agfaeihupacsp.salud.madrid.org
*.precompartimoss.madrid.org
pvoz-serviber.val.madrid.org


educa.madrid.org
subversion01.madrid.org
desarrollo.madrid.org

C4-CPD1-SUBSCRIBER-1.MADRID.ORG
grabadorllamadas1.madrid.org
*.educa.madrid.org
hflrrgis004.salud.madrid.org
intranet.madrid.org
raices.madrid.org
sgie.madrid.org
*.educa2.madrid.org
ar.madrid.org
sts.madrid.org
efidelius.desa.madrid.org
grabadorllamadas1.madrid.org
ar.madrid.org
nx02atlasval.madrid.org
citrix.madrid.org
*.remotos.madrid.org
nx02integrapre.madrid.org
servicioreps.madrid.org
PVOZ_INTEGRACION.VAL.MADRID.ORG
INSTRUCCIONESPREVIAS.SALUD.MADRID.ORG
gestiona.madrid.org
FINVESTIGACION.MADRID.ORG
PVOZ-INFORMES.VAL.MADRID.ORG
icmqcmsap2.madrid.org
PVOZ-SERVIBER.MADRID.ORG
pvoz-serviber.madrid.org
correoweb.madrid.org
valintranet.madrid.org
sso.sgie.madrid.org
pasarela.salud.madrid.org
*.educa.madrid.org
mail.madrid.org
sctewspruebas.madrid.org
hryciscv.salud.madrid.org

formacion.madrid.org
sedejudicial.madrid.org
SSO.SGIE.MADRID.ORG
desjusmadrid.madrid.org
c11-cpd2-sivt-sub.madrid.org
nexefpiq01.madrid.org
*.centrosdeformacion.empleo.madrid.org
network-login.madrid.org
desarrollo.madrid.org
PVOZ-INTEGRACION.VAL.MADRID.ORG
*.educa.madrid.org
certpasarela.salud.madrid.org
pvoz-informes.val.madrid.org
ctfinvestigacion.madrid.org
jusvalwebservices.madrid.org
imap.educa.madrid.org
endoviewhcsc.salud.madrid.org
dosis.salud.madrid.org
agfaeivnacsp.salud.madrid.org
c5-huph-subscriber-1.madrid.org
valraices.madrid.org
nexefpiq01.madrid.org
aulvirtual.educa.madrid.org

jusmadrid.madrid.org
C5-HUPH-SUBSCRIBER-1.MADRID.ORG
nx02integrapro.madrid.org
sts.madrid.org
aulavirtual2.educa.madrid.org
pasarela.salud.madrid.org
subversion01.madrid.org
C4-HGUGM-PUBLISHER.MADRID.ORG
hflrsaps004.salud.madrid.org
prodsanidad1.madrid.org
gdmm.madrid.org
sie.madrid.org
gdmm-consola.madrid.org
nexefahqs01.madrid.org
nexefposcvs01.madrid.org
jusmadrid.madrid.org
estadisticas.madrid.org

wowza01.madrid.org
gestionesytramites.madrid.org
faxvirtual.madrid.org
*.madrid.org
EDOCWEB.MADRID.ORG
edocweb.madrid.org
nexefahds01.madrid.org

Certificate

The complete raw certificate details for sgie.madrid.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6PVTNentndkWTC1vGB
rWXvFlj4GMJd6K9soLIlireKfZvYyurPXE8XkDaP+bg+P5AhahPg+BcoKclA8HE+
gT9fgBeS63xdOr0vOyIeN5S0aq/w3Gm5MQktAxt4GKgyiHyp5cAMsM9BYTKsx0+i
1YWxYHXcVZrfkljAE0HJnzbKCKop2eeDtBXbAFW+EWqeXMacL9QaiyaWfQ6ZgxI1
euUzJ3qxY2PVW9BnaD3BCsU29T5PvYVm2tzjPCjl0WYfZESXikPcco5q3wP10TXJ
EOtb3apIvLidE45u+41Q9z5I8+sLe+Vr1Sw62C/nLzjL8z2GO8THlwKS4vv7XR/c
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37925325081481025957654613483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 13:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-22 13:06:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sgie.madrid.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21017967634018562071325268756169896130674981680105398424043467046614739967367532672651044726133896990909274645977092811997041919049286808343069708706148666768280069121432213262843794761110473984195337507761771412219386135899322315340837349545323136467813232322198180832009805546540306211431593378352229475293722256430920541895388677285387817609395759927546197007922349244530280132089524702587785818490679454457458189262814371718240831385428527523279106985254299331893870216481350022234993916628918210216148741892293056338430588547748844316211734351341326874760457361821584793144381744532560489466843748840410923916337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgie.madrid.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							720ce0f3219206a3bba631d67ac9a76f7ce35c4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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