essrrhh.madrid.org

- AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 75:3c:e0:74:0d:7a:e6:72:88:f6:4f:3d was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID

Organization: AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID
State / Province: Madrid
Locality: Madrid
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 75:3c:e0:74:0d:7a:e6:72:88:f6:4f:3d
Serial Number (int): 36283341649160068191367876413
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a5:4d:31:63:5f:58:1b:6d:de:dd:b0:df:32:78:c7:c5:63:45:da:2a
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 9b:fc:ff:1b:03:e6:06:85:b7:7b:0b:cb:bf:33:4c:8b:72:1e:5a:31
Fingerprint (sha256): 20:13:2b:b0:e6:87:05:ba:11:ae:fe:15:c7:5f:ad:ae:70:02:17:87:b2:0f:8c:c4:6a:9b:46:9f:64:cc:9a:38

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate essrrhh.madrid.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for essrrhh.madrid.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

essrrhh.madrid.org

Other certificates including the domain name madrid.org

(limited to 100 certificates)
estadisticas.madrid.org
h12oenigmapre.salud.madrid.org
formacion.madrid.org
gestionesytramites.madrid.org
HTAJCARRUSEL.salud.madrid.org
jusmadrid.madrid.org
agfaeihupacsp.salud.madrid.org
*.precompartimoss.madrid.org
pvoz-serviber.val.madrid.org


educa.madrid.org
subversion01.madrid.org
desarrollo.madrid.org

C4-CPD1-SUBSCRIBER-1.MADRID.ORG
grabadorllamadas1.madrid.org
*.educa.madrid.org
hflrrgis004.salud.madrid.org
intranet.madrid.org
raices.madrid.org
sgie.madrid.org
*.educa2.madrid.org
ar.madrid.org
sts.madrid.org
efidelius.desa.madrid.org
grabadorllamadas1.madrid.org
ar.madrid.org
nx02atlasval.madrid.org
citrix.madrid.org
*.remotos.madrid.org
nx02integrapre.madrid.org
servicioreps.madrid.org
PVOZ_INTEGRACION.VAL.MADRID.ORG
INSTRUCCIONESPREVIAS.SALUD.MADRID.ORG
gestiona.madrid.org
FINVESTIGACION.MADRID.ORG
PVOZ-INFORMES.VAL.MADRID.ORG
icmqcmsap2.madrid.org
PVOZ-SERVIBER.MADRID.ORG
pvoz-serviber.madrid.org
correoweb.madrid.org
valintranet.madrid.org
sso.sgie.madrid.org
pasarela.salud.madrid.org
*.educa.madrid.org
mail.madrid.org
sctewspruebas.madrid.org
hryciscv.salud.madrid.org

formacion.madrid.org
sedejudicial.madrid.org
SSO.SGIE.MADRID.ORG
desjusmadrid.madrid.org
c11-cpd2-sivt-sub.madrid.org
nexefpiq01.madrid.org
*.centrosdeformacion.empleo.madrid.org
network-login.madrid.org
desarrollo.madrid.org
PVOZ-INTEGRACION.VAL.MADRID.ORG
*.educa.madrid.org
certpasarela.salud.madrid.org
pvoz-informes.val.madrid.org
ctfinvestigacion.madrid.org
jusvalwebservices.madrid.org
imap.educa.madrid.org
endoviewhcsc.salud.madrid.org
dosis.salud.madrid.org
agfaeivnacsp.salud.madrid.org
c5-huph-subscriber-1.madrid.org
essrrhh.madrid.org
valraices.madrid.org
nexefpiq01.madrid.org
aulvirtual.educa.madrid.org

jusmadrid.madrid.org
C5-HUPH-SUBSCRIBER-1.MADRID.ORG
nx02integrapro.madrid.org
sts.madrid.org
aulavirtual2.educa.madrid.org
pasarela.salud.madrid.org
subversion01.madrid.org
C4-HGUGM-PUBLISHER.MADRID.ORG
hflrsaps004.salud.madrid.org
prodsanidad1.madrid.org
gdmm.madrid.org
sie.madrid.org
gdmm-consola.madrid.org
nexefahqs01.madrid.org
nexefposcvs01.madrid.org
jusmadrid.madrid.org
estadisticas.madrid.org

wowza01.madrid.org
gestionesytramites.madrid.org
faxvirtual.madrid.org
*.madrid.org
EDOCWEB.MADRID.ORG
edocweb.madrid.org
nexefahds01.madrid.org

Certificate

The complete raw certificate details for essrrhh.madrid.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4rlS57IFpy57d9cO5Oq
fajyNvxX0YFkHuIu9fIr7fmrWsxVrAI3gyvnlonPVLZ8zoa6g/LhWjYz6a4bMCT4
Z6B1/Ji19Ek2dH+SYyacpmYzc7/LgPW0b+suQ+0VohCfKK9qmzwl3spFnNZFlty7
Lrw7uQ/ME+RblxBhdGQOrTBvyNf03m5Fn/OtieaRj0D9KepUGXkioIFZe5NhZalY
vO7IoryzhiXJvUvz3cksKHOspOzvWBaPYs6OhImA1WMGvrnPE6KqE3pQB6jrCe1Y
e5rOoRsMLctELXHdiS/yt42xkHfF+Lvl/4GDCEOQZnbGOLNGqTftGQKGGEq242Gm
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36283341649160068191367876413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 10:36:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-07 10:36:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AGENCIA PARA LA ADMINISTRACION DIGITAL DE LA COMUNIDAD DE MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'essrrhh.madrid.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24180008263583856343360220663308785924365252396238351619527167608977508469106629302252293676419450300083546508157761438009901091299024208279957129861010501460496099858972897427255883162046811827200454842142891020571034489846132602924400392181592562886468661588322734497352394117373987318492332617160519868317667823992761768381373970125219274333082531918865592163604076958316113468459355837400337229484916369717590022778639490605630640019333074744985190813183679537868753435978589988923488048115390105128307828248345042160951554170442887598390342692051635405166441060411707747584780520152867934311653222604574407370463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essrrhh.madrid.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a54d31635f581b6ddeddb0df3278c7c56345da2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ef00c9e5edc6758cd5342f3ad97690c9272ecdaec97909c5b21dfea8af2c1c0cf78a6d1bcf11536dd66f5eee34d93248548a48de0be99a0a56d14d0de264946683c612dc15ba2c0b4016eef2f1d7cf6e349aa465c40c5bbf61f1c65ae056645cf00e0d395ee453301fb4aeee0a92e5f3022ac69c89e42f5462e183ffddb5ec50393bc15b0fe70b7307a3c4a3281facb7d41fbca3b795ea060c91ef506ebd9123b7250e1b9acf74def38a5f859e2dcf9cc9fbb3a6abec43800dfe3d40787a783ad41ce15b7ce6e66194f797fbee0d0cd265970c66b0ac82fcbfdfa6a0149344e85fd20d6ab5d969951cfaed7e308dc84644b8ba286cc595dc8f8be7cc927580a