barandiaran.inika.net

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 42:77:33:c7:f0:d6:1a:b1:18:19:e0:9c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=barandiaran.inika.net,OU=Domain Control Validated,C=ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 42:77:33:c7:f0:d6:1a:b1:18:19:e0:9c
Serial Number (int): 20570117349689699989766922396
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 82:41:62:fe:5a:78:c9:be:da:90:23:1f:cf:6b:5f:c6:56:b6:8a:60
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 66:fe:ab:23:b1:c7:9e:5c:13:32:7c:a3:9e:26:8f:04:b9:b2:4f:55
Fingerprint (sha256): 0a:6a:e8:1c:01:69:57:21:f3:bf:8e:1a:3f:c0:a5:48:02:b2:9a:cb:99:71:23:87:c9:73:40:c4:81:5b:23:26

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate barandiaran.inika.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barandiaran.inika.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barandiaran.inika.net

Other certificates including the domain name inika.net

(limited to 100 certificates)
astigarragakoherrieskola.inika.net
arantzazu.inika.net
sni164756.cloudflaressl.com
alkartasuna.inika.net
egape.inika.net
lourdes.inika.net
ondarroa.inika.net
elizalde.inika.net
azkoitiabhi.inika.net
errenteriamusikal.inika.net
ceparantzazukoama.inika.net
iesarantzazukoama.inika.net
sanmartindeaguirre.inika.net
karmeloetxegarai.inika.net
talaia.inika.net
urretxu.inika.net
gainzuri.inika.net
usandizagapenaflorida.inika.net
arrasateherrieskola.inika.net
arantzazu.inika.net
murumendi.inika.net
iparragirre.inika.net
amorsestao.inika.net
lasarte.inika.net
doinua.inika.net
ms.inika.net
adurza.inika.net
zuhaizti.inika.net
cepaitorikastola.inika.net
iesarantzazukoama.inika.net
help.inika.net
inika.net
koldomitxelena.inika.net
murumendi.inika.net
ninojesus.inika.net
murumendi.inika.net
gainzuri.inika.net
altzagaikastola.inika.net
losherran.inika.net
samaniegolaguardia.inika.net
gabrielaresti.inika.net
bekobenta.inika.net
urdanetalhi.inika.net
ipintza.inika.net
koldomitxelena.inika.net
samaniego.inika.net
bizarainikastola.inika.net
elizalde.inika.net
amorebieta.inika.net
sanadrian.inika.net
arrasate.inika.net
urritxe.inika.net
errenteriamusikal.inika.net
frayjuan.inika.net
angelganivet.inika.net
angelafiguera.inika.net
kurtzebarri.inika.net
idiomas.inika.net
eibar.inika.net
angelganivet.inika.net
ceinpro.inika.net
gorapenberriak.inika.net
urkizu.inika.net
gainzuri.inika.net
alkartasuna.inika.net
iesarantzazukoama.inika.net
cepcristobalgamon.inika.net
centerpoint.inika.net
arantzazu.inika.net
barandiaran.inika.net
kirolene.inika.net
iraurgi.inika.net
antigua.inika.net
ikasbide.inika.net
azkorri.inika.net
sanprudencio.inika.net
urkide.inika.net
mendaro.inika.net
sni164756.cloudflaressl.com
joxemielbarandiaran.inika.net
cepaitorikastola.inika.net
munoa.inika.net
ikasbide.inika.net
ellacuria.inika.net
cristobalgamon.inika.net
iparragirre.inika.net
ondarroa.inika.net
gernika.inika.net
tokialai.inika.net
karmeloikastola.inika.net
ekialdea.inika.net
sanignacio.inika.net
joxemielbarandiaran.inika.net
ikasbide.inika.net
ceptalaia.inika.net
samaniego.inika.net
idiomas.inika.net
elorrio.inika.net
bekobenta.inika.net
lezo.inika.net

Certificate

The complete raw certificate details for barandiaran.inika.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+fKiD4jyvms4QT7j7l4
AUthiNnFTMA+vmY1kzz3Ro7ww1HnO4KriTZkOzRIAmsbYBJNmPZmQzQ5H0B/ElsS
BH7DanthPTMR736HXqNvEWYcdryfEWE+3W0Rt6IqWLievtk0s0tm4RgRyscQP7Yw
UT0rucmrEJx4BMWN5zYhTjhUfRdoeGDazkK+nw63bzGUgb4IaLA5l2jIDsOj4BIq
zB60+ThFjhMVM9pU948Jx2PAMY9A7p27NKtV0qWBeG2Wcz/nSA9aCO1XqlmQPPLo
Y3/YO8xINIMPLy7RsqwfE9kpQGKl7YaeHxbV1aLIeX6JWsFnUnc4mlBYlHGUQnhF
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20570117349689699989766922396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-10 07:52:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 07:27:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barandiaran.inika.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20691144181328394153687795284706917655378133085844611698375625989798070055645459871787302377398176880830717771503213766658310052215916164679134465396317076413525482843605093738295853771746042293456383042430320500268793444687627478946643397884074363358827207980284211182379855962948265800363304183977314224375381378636647200564060855962366939139469146958684262355676269876036443632933750797933621681005900711637578388253493375511348449483165264944916853678088357786447949607876237242799971947612960242620691930640944158750607423856703403152559095943525795148253874376861230560443438126068115381470703591310666289923583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barandiaran.inika.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							824162fe5a78c9beda90231fcf6b5fc656b68a60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00622b0c3080b84be676ca14597dbea89012e768eb7951d43eca9db5a72aa922fdccac08bf3c86f794976ce9744ca5c6bce38b5ee5d94605a3a0d3397c309d2781a0515de01278411d957a3179171c7909af527e96d0ff44f3542185eba80040639e8c4878054fd9ca553005e6e66630f1494ed4e3bf5bbfab8e8c3d43549c3550005183b72d8ccd808dd7a8725e7dfcfdb264a4e975286d9b3953e9c0ef698f53ef82e4e74350f754a1baa0f4ec0cfd4b73a03ecf46cd250d71a6b0f465ede2ea96ff187afdc13d26fa005db5923fd6fecfd435d11762eed8b3a8175bf706530e46888b28427123b3fccf98d7373dbe34a38187d962b9fa56e37c593aa75ac388