dev-apiidentity-tf.laliga.es

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:db:55:7d:96:bc:56:5c:e1:e9:c1:e6:23:91:b7:c8 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev-apiidentity-tf.laliga.es

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:55:7d:96:bc:56:5c:e1:e9:c1:e6:23:91:b7:c8
Serial Number (int): 6455758950145852781477689333193488328
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ac:ae:b9:96:c3:2f:5b:e8:05:3f:ec:dd:a3:78:1c:a3:f5:12:ce:cc
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 82:4d:99:d2:10:d3:ed:10:7c:ab:12:54:75:ec:ef:d2:d9:0f:b4:aa
Fingerprint (sha256): 15:e0:01:6b:39:6f:c8:59:11:a9:71:12:11:ee:e3:f3:65:8b:41:d3:38:4c:d9:af:42:cb:a5:7f:4e:61:84:3e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev-apiidentity-tf.laliga.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-apiidentity-tf.laliga.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-apiidentity-tf.laliga.es

Other certificates including the domain name laliga.es

(limited to 100 certificates)
help.vitalcareinc.com
service.augustusmartin.co.uk
servicedesk.raibal.ae
*.laliga.es
*.laliga.es
captiveportal.laliga.es
sts.laliga.es
project.senhorpc.com
customer1-sdpondemand.manageengine.com
captiveportal.laliga.es
ithelp.mjevansgroup.co.uk
customer1-sdpondemand.manageengine.com
projects.nybe.be
customer1-sdpondemand.manageengine.com
projects.nybe.be
customer1-sdpondemand.manageengine.com
cert00039-azurecdn.akamaized.net
projects.accountsprojects.uk
*.laliga.es
helpdesk.rebuildmanufacturing.com
service.augustusmartin.co.uk
help.vitalcareinc.com
*.laliga.es
support.caseshield.com
dev-apiidentity-tf.laliga.es
helpdesk.cscfl.com
task.aasmaasecurities.com
helpdesk.cscfl.com
zoho.fourmedia.do
service.augustusmartin.co.uk
project.senhorpc.com
cert00039-azurecdn.akamaized.net
projects.publisherpro.app
service.augustusmartin.co.uk
*.laliga.es
projects.avsolutions.no
projects.borner.co
customer1-sdpondemand.manageengine.com
helpdesk.ebusco.com
pm.smes.ae
cert00039-azurecdn.akamaized.net
task.aasmaasecurities.com
project.thecodingmachine.com
project.thecodingmachine.com
servicedesk.raibal.ae
customer1-sdpondemand.manageengine.com
helpdesk.bettybarclay.com
golypaz.fundacion.laliga.es
mesa4.aylsoluciones.pw
projetos.consultoriaegn.com.br
projects.qnetix.io
*.laliga.es
supporthibiscus.datakraf.com
helpdesk.cscfl.com
servicedesk.mvhomes.org.uk
*.laliga.es
projects.publisherpro.app
support.cantabrialabs.com
servicedesk.raibal.ae
helpdesk.atlanticitservices.com
customer1-sdpondemand.manageengine.com
mas.aleaticalabs.com
helpdesk.groupe-r.ch
supporthibiscus.datakraf.com
projects.inspirext.com
viso.finosec.com
projects.lensenergie.nl
service.augustusmartin.co.uk
support.essenmed.com
support.oprisk.hu
support.essenmed.com
customer1-sdpondemand.manageengine.com
pms.nulou.net
login.laliga.es
servicedesk.zenantech.com
projects.expertsolutionsindia.in
projects.publisherpro.app
service.augustusmartin.co.uk
project.pagination.com
projects.purple-banana.nl
customer1-sdpondemand.manageengine.com
project.senhorpc.com
datflz-ts.laliga.es
customer1-sdpondemand.manageengine.com
golypaz.fundacion.laliga.es
helpdesk.nutramaxlabs.com
*.laliga.es
service.augustusmartin.co.uk
servicedesk.mvhomes.org.uk
sarcetravel.laliga.es
golypaz.fundacion.laliga.es
customer1-sdpondemand.manageengine.com
customer1-sdpondemand.manageengine.com
support.caseshield.com
helpdesk.jhs.com
servicedesk.zenantech.com
supporthibiscus.datakraf.com
helpdesk.region10pihp.org
*.laliga.es
sarcetravel.laliga.es

Certificate

The complete raw certificate details for dev-apiidentity-tf.laliga.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuQP0zhteOy8PqQSqfCS
pF83R35HrvSYyYhHAsnGHpb+bNgSe1Yvrg9kQWCSlhAMEvVhfRbtR6BdUHlpzXT6
NjD79rXNCb+X21HSXf8Mrt2gfASDFf3V/JNIL7nDDxgi34OLmZooieXlMZolvjhK
8d9x4mb67IyBVu/ZWZX0HMraedHyuhkVoNrEIYm3eaa4vw4DrW/lcFcWJQsaz+EP
IfdXRvuqZrKbimoMA/GwTb89STGUP04eEELjKrbYp1TpEuBChK83NlSQ3aAzy24R
WU/Jupy4fAZnAiTxZ3Si+vZkXJT7yGi+UwE6MXkpF1HPo5ePZG6/7zYYmBiwjuQv
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6455758950145852781477689333193488328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-apiidentity-tf.laliga.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24097739416871216963580627413406804704378638673256754776275915298048529742980859177292237532961997755092940066228049814326333138016594347851980916856769737495035879341785174405409533245845520685103435993335957676239429099152671863674351832447845999975321559871039411094803055905621264323580998650632840064021289958344639183413267960531715096056840984978109535575157663299960619319121077475581434923087166634856900543387176117342734023552332703519134277339116687128975992308977779165490756651838489766889470935081263774143300891357495620091450296244109700281229029403602145225911579442767725092195462675146401630138317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acaeb996c32f5be8053fecdda3781ca3f512cecc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-apiidentity-tf.laliga.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0061c0e6bb4c17552d4c54d8280adc0ee4c1a6e47efe0f003fc950b0379c0782c0bb73a84cfa7e0dc75eb00a000052ba4bfa1589a8789562d892fb3f3e2bbf942fafc82ebafd777ca4b05c0928c1d86291cf5524e34fac47987ce1dd524d490c2c4dd5cc4e84548dc45065446132b5d52a594583dfe154690823fbf6bcb7c405e9a3efe549c0f76b400a7570fbd3387284077d37dccbc49c37f52a273aa0437c464a8ba55bbe278a71ba5a7743bdc71fc173c3a2fcd5536f054ffac0de75d0e453090b89346c8fe9e95454717d7a1511c4dda8cdd901cefef3520d7b8439e23886b3b16bc5b4a9786b0165603e1ccfcb7ccf377e5ec493b8d3e88eeb0c878f9cee489830056e235b2de29de328333b5999ac128723a13f17a0b64f93d9b6625cb9ca56343ed323492797fcc880da5ff417c4c3c1bd962bb851919c8c105337cfc67f6999c517b6a6d49a3e86b2c1c0f2d781dd83dbf44f074f688b0305c5aab5865384f1e7a0c1d7998a1804a6b23dbb7ab9d0c9e95806c3d323b335fa68224c1b7205d7521abee9278931b21250e2e2ae2115b60b1ed77a840b90d39a57bbc90818e944a30082450ce61c5a49fd170a756f959e918bd55864a2ec667f274c7c254e1a15ed7b75b908a9e44466a1138fd173844e2acb6559c5bc1b41131fac9686f33ee88ad24e3a730ac7040d97baa2cd10d22252e7b80de6a6b7715505123c4b