*.caser.es

- Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 60:ea:09:40:3c:20:92:7a:8d:5d:87:97:3a:6a:2e:27 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • AttributeValue in subject RelativeDistinguishedName sequence SHOULD NOT have leading whitespace (lint.AWSLabs certlint)

Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A.

Organization: Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A.
State / Province: MADRID
Locality: MADRID
Country: ES

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 60:ea:09:40:3c:20:92:7a:8d:5d:87:97:3a:6a:2e:27
Serial Number (int): 128821072691146385183497130673640713767
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 16:1d:21:09:6a:06:77:b5:03:fe:ae:87:87:42:ec:2c:ff:ca:41:96
Fingerprint (sha256): 0a:6e:ea:11:cd:2c:ec:5d:f9:3f:8c:b0:f5:dc:e8:ab:f5:fe:b1:01:52:3c:20:c6:0b:b7:4a:b2:ec:e8:2e:57

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate *.caser.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.caser.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.caser.es

Other certificates including the domain name caser.es

(limited to 100 certificates)
cyberplus.allianz.es
cyberplus.allianz.es
ahorrobot.caser.es
incapsula.com
cajacantabria.segurosdesalud.caser.es
incapsula.com
incapsula.com
www.caser.es
image.em.shopmo.com
*.caser.es
incapsula.com
san-3-s11.tlsprovisioning.exacttarget.com
imperva.com
magazine.caser.es
cyberplus.allianz.es
laventanadigitalbancaseguros.caser.es
wm.caser.es
www.appduplex.com
imperva.com
ayudadigital.caser.es
incapsula.com
*.caser.es
alpha.nwzer.com
incubadora.caser.es
www.caser.es
incapsula.com
image.em.shopmo.com
CASER.ES
*.caser.es
imperva.com
lanzadera.caser.es
wmseg.caser.es
incapsula.com
incapsula.com
incapsula.com
agentesycorredores.caser.es
cyberplus.allianz.es
www.pcset.hashito.biz
incapsula.com
*.segurosdesalud.caser.es
image.em.shopmo.com
incapsula.com
imperva.com
ssl.caser.es
incapsula.com
incapsula.com
incubadora.caser.es
ssl.caser.es
*.caser.es
incapsula.com
misalud.caser.es
ssl.caser.es
image.em.shopmo.com
cyberplus.allianz.es
imperva.com
laventanadigitalbancaseguros.caser.es
incapsula.com
cyberplus.allianz.es
laventanadigitalbancaseguros.caser.es
ahorrobot.caser.es
webcolaboradores.caser.es
wm.caser.es
laventanadigitalbancaseguros.caser.es
smtcajach.caser.es
incubadora.caser.es
incapsula.com
cbuscodeandcoffee.com
cyberplus.allianz.es
wmi18n.caser.es
unfoldingstories.app
cyberplus.allianz.es
www.caser.es
agentesycorredores.caser.es
image.em.shopmo.com
image.em.shopmo.com
incapsula.com
image.em.shopmo.com
www.caser.es
cyberplus.allianz.es
incapsula.com
cyberplus.allianz.es
cyberplus.allianz.es
bitacora-sherlock.caser.es
incapsula.com
incapsula.com
cyberplus.allianz.es
incapsula.com
smetrics.caser.es
san-3-s11.tlsprovisioning.exacttarget.com
ssl.caser.es
wm.caser.es
wmseg.caser.es
incapsula.com
incapsula.com
image.em.shopmo.com
agentesycorredores.caser.es
incapsula.com
*.caser.es
laventanadigitalbancaseguros.caser.es
gobiernocorporativo.caser.es

Certificate

The complete raw certificate details for *.caser.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeitSDawm92upd8K6M2S
sRpHP+APgldKSQ6pnxVwwxPgIDA5TgofM3hIL3YFpatBllryD/7Q4HqEMI4ATX0q
aeUshYgVBLxET3I7NxfDtWH2bAwyVDGad/BLCRpwFK05Lo1Swwwb9EV1HQ4B9jBA
Q7jEYepFn102RSDWEda50Is1Z+qIfADBjfNibJcxddBtbBeb9Kzxy0Zn2uck0gyC
mz4DDsVw5WN2Stnh428SFBPBhAd/bu54BugkIz5pVgmKOV8wRUJBgpKeKnyUwgff
XNqASnOHmYRyuK3cInVmJhk55Tnqrux9BIN9KugPlE/1nfm0DfZdIjSvVizKgePM
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128821072691146385183497130673640713767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString ' MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String ' MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.caser.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25488636545571163589222660385969447807738704326979627366628056861107259682692429008730192093121545406373966723545979709608214255362931363388605122234780235874403116426568385775486177974790910218749280516609132868183425705643296326612241963478420687340558665196484197427714657208767052567968235213657405260064155655796557305074109045203279275164337955447074896082040837845345092232202450810381147750328999058691218340235694615146772423261068155637776945241811116165691283475090167986329628857899898109624414541615302642232507845154687249753964111443216880174807319110217270629350806555039027247858627608664532326796527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caser.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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