axude-ws.dev.sara.xunta.es

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 09:0e:d8:88:80:80:e7:bd:02:df:5d:b8 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 09:0e:d8:88:80:80:e7:bd:02:df:5d:b8
Serial Number (int): 2803312599043859927690862008
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: c2:eb:f4:14:a5:5a:03:bc:af:34:bc:ad:df:d8:3a:1b:3c:ed:fc:9e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 37:60:c5:15:13:b0:5e:bf:fe:33:ea:d7:b9:9d:c3:99:72:a5:05:1a
Fingerprint (sha256): 19:21:fc:87:b8:3d:71:a3:a7:37:31:a9:2e:c3:57:ae:31:b2:70:b8:5f:0e:68:43:b1:c9:8d:b6:84:f5:b0:48

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate axude-ws.dev.sara.xunta.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for axude-ws.dev.sara.xunta.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

axude-ws.dev.sara.xunta.es
axude-ws.stg.sara.xunta.es

Other certificates including the domain name xunta.es

(limited to 100 certificates)
*.EDU.XUNTA.ES
www.edu.xunta.es
sede.xunta.es
correoweb.xunta.gal
cdtic.xunta.es
resultados2024.xunta.gal
CORREO.EDU.XUNTA.ES
*.dev.xunta.es
*.oleiros.sara.xunta.es
*.edu.xunta.es
imap.edu.xunta.es
axude-ws.dev.sara.xunta.es
resultados2020.xunta.gal
www.extranet.edu.xunta.es
*.xunta.es
*.redsara.ourense.sara.xunta.es
egap.xunta.gal
*.edu.xunta.es
smtp.edu.xunta.gal
SEDE.XUNTA.ES
correoweb.xunta.gal
adviser-notifica-des-depo.sara.xunta.es
WWW.CMG.XUNTA.ES
autoprovision.xunta.es
www.xunta.es
emprego.xunta.es
xunta.es
bega-elbe2.edu.xunta.es
pop.edu.xunta.es
egap.xunta.gal
correoweb.xunta.gal
*.edu.xunta.es
sara.xunta.es
*.stg.xunta.es
auth.edu.xunta.es
edu.xunta.es
*.cmati.xunta.es
*.ourense.sara.xunta.es
www.extranet.edu.xunta.es
carpeta-pre.pontevedra.sara.xunta.es
smtp.edu.xunta.es
pre-nidec-dacoruna.sara.xunta.es
*.CDTICVIRTUAL.XUNTA.ES
rpvxg.xunta.es
senfios.xunta.gal
des-cir-depo.sara.xunta.es
xunta.es
smtp.edu.xunta.es
cir-dacoruna.sara.xunta.es
*.EDU.XUNTA.ES
emprego.xunta.es
EGAP.XUNTA.ES
www.extranet.edu.xunta.es
keys.xunta.es
smtp.edu.xunta.es
imap.edu.xunta.gal
KEYS.XUNTA.ES
www.candidaturas.xunta.gal
CORREO.EDU.XUNTA.ES
descargas2024.xunta.gal
emprego.xunta.es
notifica.pontevedra.sara.xunta.es
*.edu.xunta.es

candidaturas.xunta.es
egap.xunta.gal
csvstorage-pre.pontevedra.sara.xunta.es
*.stg.sara.xunta.gal
correoweb.xunta.es
nidec-dacoruna.sara.xunta.es

egap.xunta.gal
EGAP.XUNTA.ES
*.xunta.es
csvstorage.pontevedra.sara.xunta.es
rpvri.xunta.es
*.dev.xunta.es
EMPREGO.XUNTA.ES
*.edu.xunta.es
rpvri.xunta.es
adviser-notifica-depo.sara.xunta.es
www.extranet.edu.xunta.es
xunta.es
EGAP.XUNTA.ES
autoprovision.xunta.es
www.edu.xunta.es
*.XUNTA.ES
www.formacion.edu.xunta.es
www.formacion.edu.xunta.es
cir-depo.sara.xunta.es
emprego.xunta.es
carpeta.pontevedra.sara.xunta.es
xunta.es
orzamentos.xunta.gal
*.edu.xunta.es
keys.xunta.es
emprego.xunta.gal
sara.xunta.es

axg.dev.sara.xunta.es

Certificate

The complete raw certificate details for axude-ws.dev.sara.xunta.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MiWw81jryMLnZUSh3dp
9OziYf8sQTr8AqsX6zqqBmwdXrZabPtVcG6acYTF1v2AtkpffNIacbkvVEA/1JK0
XMKa+sJZFBIpWZoLZyvfBoKQCvkGmhNbHCV3lAMMMvTKwp6C8bi55wsU7mhJZqIv
s6m7RA7/6a+teSmwDOqSMJLNk6nS1MXJLjifdae6JPizmHbPzg+D9X3Iuenfvx8Y
sj/fXO/EHqk8mCk1RhGEwpxDClYmttLxhTQaUAt18jWRyPBVYCSgSrG217/K3wqt
1q92lMYREfI0/SuKQ8rS4611hbZmLh4EQsZwLoL3v6pZfzF5KmNyuSNvFqiYkXsb
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2803312599043859927690862008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 12:06:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-30 12:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'axude-ws.dev.sara.xunta.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31406013717180087533125270443754231929440943848447034628236334274873912902135099519393864031172246280338384100591706712391864042221188200513646979315173331357271873490121301015862547332502699484124402019319407808985205806404268433229840363901195196488765516327302400152109057579150982228427536153563502585534864061764936223891935209890002845160807426123557824581116475360638028845911100457883678523998197366435246194552257366325805617096875479548178755892543653511553716891247352170115450725697416689892853947837317662050988910777429395428158572609918747742140261176815138220691056449853409281730622250942249209371527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axude-ws.dev.sara.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axude-ws.stg.sara.xunta.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2ebf414a55a03bcaf34bcaddfd83a1b3cedfc9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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