ar.madrid.org

- AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7b:5a:cf:1d:ff:b9:4c:ca:5f:df:40:5f was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID

Organization: AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID
State / Province: Madrid
Locality: Madrid
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7b:5a:cf:1d:ff:b9:4c:ca:5f:df:40:5f
Serial Number (int): 38176437615035136015446523999
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 6b:86:44:91:d4:b9:d5:dd:ba:bf:11:12:1c:23:c1:8b:81:bb:5f:3b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 5a:c4:3e:db:b1:9e:05:3d:ec:a5:b7:e2:16:0d:6a:0e:ef:95:d4:89
Fingerprint (sha256): 09:f5:a7:52:c2:5a:49:a4:db:cd:3b:e2:b8:cd:81:95:81:f8:76:2b:86:79:23:48:7f:68:aa:ed:7b:19:e3:92

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate ar.madrid.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ar.madrid.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.madrid.org
ar.sanidadmadrid.org
*.ar.sanidadmadrid.org
*.ar.madrid.org

Other certificates including the domain name madrid.org

(limited to 100 certificates)
estadisticas.madrid.org
h12oenigmapre.salud.madrid.org
formacion.madrid.org
gestionesytramites.madrid.org
HTAJCARRUSEL.salud.madrid.org
jusmadrid.madrid.org
agfaeihupacsp.salud.madrid.org
*.precompartimoss.madrid.org
pvoz-serviber.val.madrid.org


educa.madrid.org
subversion01.madrid.org
desarrollo.madrid.org

C4-CPD1-SUBSCRIBER-1.MADRID.ORG
grabadorllamadas1.madrid.org
*.educa.madrid.org
hflrrgis004.salud.madrid.org
intranet.madrid.org
raices.madrid.org
sgie.madrid.org
*.educa2.madrid.org
ar.madrid.org
sts.madrid.org
efidelius.desa.madrid.org
grabadorllamadas1.madrid.org
ar.madrid.org
nx02atlasval.madrid.org
citrix.madrid.org
*.remotos.madrid.org
nx02integrapre.madrid.org
servicioreps.madrid.org
PVOZ_INTEGRACION.VAL.MADRID.ORG
INSTRUCCIONESPREVIAS.SALUD.MADRID.ORG
gestiona.madrid.org
FINVESTIGACION.MADRID.ORG
PVOZ-INFORMES.VAL.MADRID.ORG
icmqcmsap2.madrid.org
PVOZ-SERVIBER.MADRID.ORG
pvoz-serviber.madrid.org
correoweb.madrid.org
valintranet.madrid.org
sso.sgie.madrid.org
pasarela.salud.madrid.org
*.educa.madrid.org
mail.madrid.org
sctewspruebas.madrid.org
hryciscv.salud.madrid.org

formacion.madrid.org
sedejudicial.madrid.org
SSO.SGIE.MADRID.ORG
desjusmadrid.madrid.org
c11-cpd2-sivt-sub.madrid.org
nexefpiq01.madrid.org
*.centrosdeformacion.empleo.madrid.org
network-login.madrid.org
desarrollo.madrid.org
PVOZ-INTEGRACION.VAL.MADRID.ORG
*.educa.madrid.org
certpasarela.salud.madrid.org
pvoz-informes.val.madrid.org
ctfinvestigacion.madrid.org
jusvalwebservices.madrid.org
imap.educa.madrid.org
endoviewhcsc.salud.madrid.org
dosis.salud.madrid.org
agfaeivnacsp.salud.madrid.org
c5-huph-subscriber-1.madrid.org
essrrhh.madrid.org
valraices.madrid.org
nexefpiq01.madrid.org
aulvirtual.educa.madrid.org

jusmadrid.madrid.org
C5-HUPH-SUBSCRIBER-1.MADRID.ORG
nx02integrapro.madrid.org
sts.madrid.org
aulavirtual2.educa.madrid.org
pasarela.salud.madrid.org
subversion01.madrid.org
C4-HGUGM-PUBLISHER.MADRID.ORG
hflrsaps004.salud.madrid.org
prodsanidad1.madrid.org
gdmm.madrid.org
sie.madrid.org
gdmm-consola.madrid.org
nexefahqs01.madrid.org
nexefposcvs01.madrid.org
jusmadrid.madrid.org
estadisticas.madrid.org

wowza01.madrid.org
gestionesytramites.madrid.org
faxvirtual.madrid.org
*.madrid.org
EDOCWEB.MADRID.ORG
edocweb.madrid.org
nexefahds01.madrid.org

Certificate

The complete raw certificate details for ar.madrid.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFaFqWxdu0KvzcuLY0kI
dyEA1D8cVXlD66CCjI2o+JUX/i6kefWoI3RzjXYNkirIanM3i/gHIj7kG7Z+J3Dk
QGi8C+zXWpz1UEJDkMj+qaON3kbAG6czElBeolpZ/JYDiI5nh9enWWf3D2bZn9MM
733Fwx9SXDQcCWqkiQCdm5/8KirXq/HDXnI7dnq+xP96VprR3mUiY8o04mnLY1ZH
wd/Owh5MPXw7W95EeXlJUT5gYOxLiPG2bLhs2HfrK68awC+t4Wd7xoKVU0yp88g0
YsRYCv3UK3dGzpJLoohLrn0sXqHKoZW4X27TtuDXkRgHMJeAldacEFVDLYJosg2B
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38176437615035136015446523999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 11:36:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-07 11:36:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ar.madrid.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22260607319815484288869731114437646435084749426701699330481418398046830909413655346415586806089870574592779814474051058506712376624496454784305902121916825114594727322029223359032740133371312078671329583208103617408603140481674613311795054406215228596510549229470266009404764704258041083716779040543536515918527556332538808996294518294355541289332256842998504203312548371263011728136657806618086190669162221289113085658668996322292600346325213391129204162432462010333677579181205691935406934615316071515194312748594719020277562725172793198541610890723428494934469745104541273775011929085212526775896265258999919509773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.madrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.sanidadmadrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ar.sanidadmadrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ar.madrid.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b864491d4b9d5ddbabf11121c23c18b81bb5f3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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