xmpp.iib.uam.es

- Universidad Autónoma de Madrid -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:40:ab:75:32:bb:23:f1:a7:47:64:19:f1:44:c3:95 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad Autónoma de Madrid

Organization: Universidad Autónoma de Madrid
Organization unit: Instituto de Investigaciones Biomedicas
Locality: Madrid
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:ab:75:32:bb:23:f1:a7:47:64:19:f1:44:c3:95
Serial Number (int): 5652696559523620424292297714562286485
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f6:ab:b9:e9:e6:4e:55:20:db:47:e0:54:dd:93:c2:85:6c:16:2f:bc
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ef:4b:3f:8f:40:6e:f9:63:31:9c:10:2f:72:f4:7d:fa:d8:9f:ba:97
Fingerprint (sha256): 0e:bd:7c:38:de:ca:7f:d0:c7:ad:0d:b4:b7:83:a2:17:4b:82:88:6d:ec:72:aa:a0:e0:17:2d:cc:74:58:25:44

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate xmpp.iib.uam.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xmpp.iib.uam.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xmpp.iib.uam.es

Other certificates including the domain name uam.es

(limited to 100 certificates)
iib.uam.es
biblioguias.uam.es
escribano.ti.uam.es
crm.ii.uam.es
bun.uam.es
masterbc.eps.uam.es
prosa.mat.uam.es
grid002.ft.uam.es
vpn.uam.es
cedemas.biomol.uam.es
draco.ti.uam.es
mail.fpcm.es
ub.cbm.uam.es
vega.ii.uam.es
biblioagenda.uam.es
www.ifimac.uam.es
ondemand.iic.uam.es
camus.ii.uam.es
masterbc.eps.uam.es
clondc1.ft.uam.es
e-valuam.ii.uam.es
atocha.da.uam.es
vpnssl.iib.uam.es
griddc02.ft.uam.es
www.ccc.uam.es
pool73.ft.uam.es
gridbdiisite.ft.uam.es
e-valuam.ii.uam.es
griddc03.ft.uam.es
pool69.ft.uam.es
www.ccc.uam.es
www2.iib.uam.es
asterix1.ccc.uam.es
pool48.ft.uam.es
ce3jtest.ft.uam.es
talento.iic.uam.es
*.ti.uam.es
symposium.events
biblioagenda.uam.es
portman.fg.uam.es
pool67.ft.uam.es
plasphot.fmc.uam.es
mon1jtest.ft.uam.es
backup.cmam.uam.es
bun.uam.es
sorollats1.ti.uam.es
ford.fg.uam.es
trinity.ti.uam.es
multihydro-ipmi.ft.uam.es
intranet.cmam.uam.es
clonpool1.ft.uam.es
pool48.ft.uam.es
xmpp.iib.uam.es
*.uam.es
asterix.ccc.uam.es
vpn.uam.es
pool48.ft.uam.es
grid013.ft.uam.es
moodle.uam.es
www.fmc.uam.es
listas-correo.uam.es
encode.eps.uam.es
lims.sidi.uam.es
lims.sidi.uam.es
unitsims.ft.uam.es
cervera.ccc.uam.es
encode.eps.uam.es
imap.iib.uam.es
biblioagenda.uam.es
sede-pre.uam.es
impresion.estudiante.uam.es
formacioncontinuaonline.uam.es
www.iib.uam.es
correo.uam.es
portman.fg.uam.es
pool40.ft.uam.es
tfg.eps.uam.es
eventos.uam.es
batman.ti.uam.es
dep.ftmc.uam.es
vpn.uam.es
activos.uam.es
portman.fg.uam.es
mensajeria.uam.es
webmail.iib.uam.es
potato.ii.uam.es
pool57.ft.uam.es
*.uam.es
gridftp01.ft.uam.es
biblioagenda.uam.es
*.ti.uam.es
chicago.cmam.uam.es
grid013.ft.uam.es
secretaria-virtual.uam.es
smtp.iib.uam.es
elmos.ti.uam.es
chita.ti.uam.es
abierta.uam.es
aida.ii.uam.es
pc-virtual.estudiante.uam.es

Certificate

The complete raw certificate details for xmpp.iib.uam.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN/qV0OewrZZslNBb2Wl
wKX0IQASQ9/W4BXOjxQYMFZyOr6ZVPY9/lYFuz/Stbh3opvO1x4gac0WVWds0qJk
QsMFGLl6oCritfMvtzgf2u6bnodb0jFmco5nsG+Ib0Qg4QUWEZlZlYVyqGaK4vnj
hJS6lvDcrq5HC18SPtWUM4Kpw5NkQ+lxBYpfa5lY9lYPlka8rJ4RLefE2TbfVI8a
4ykMkS66MsXZB9P78hhJ23WIg6Nllsg7IVAKX1dtE4a38yD0wPRUm3fLnevGTC0D
K408Bacui1he86TeeROxmEYqlc7yXVJfQiWF/fVUtRC2jXArhYiZm4vcTo3Dc5xD
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5652696559523620424292297714562286485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-06 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universidad Autónoma de Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instituto de Investigaciones Biomedicas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xmpp.iib.uam.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20308545590663377791021383180593050904450339888752512455832743697438410667892221744949586583695114586660139733489994459568188953454286008292377697962950594826794086014555927067721343385497096283200679841185090454946301191631009710850222966136421650651850961426881903986023954398005650534832346632161624181720013178624092848969064938099570969577957510056123476427993061631090044096477075110743571953709470427068064056003848763611151095496342218535857103877961312857840831566279689396198597969400003446748272162170125667884395418167022381965555922781038993404324254361251666690198961237758965229431465390657836588745601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6abb9e9e64e5520db47e054dd93c2856c162fbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmpp.iib.uam.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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