egap.xunta.gal

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 15:9d:5f:7b:b7:e0:84:49:32:de:2c:37 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 15:9d:5f:7b:b7:e0:84:49:32:de:2c:37
Serial Number (int): 6689437466942872459864321079
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: e6:37:4a:05:f2:60:35:2e:fa:02:57:6f:1b:03:ab:e2:47:bd:07:c4
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 9f:9b:24:e5:c1:5f:31:e5:43:b4:df:d8:a5:12:ef:ad:9b:f2:7e:ff
Fingerprint (sha256): 27:ca:f0:bd:84:4e:8c:29:b2:05:f5:20:9b:e9:59:98:bc:2f:fb:c8:97:83:bc:b9:ae:4b:f3:9e:f4:0c:5f:54

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate egap.xunta.gal

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egap.xunta.gal

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egap.xunta.gal
egap.xunta.es
www.egap.xunta.es
www.egap.xunta.gal

Other certificates including the domain name xunta.gal

(limited to 100 certificates)
adfs.xunta.gal
correoweb.xunta.gal
*.dev.xunta.es
www.xunta.gal
resultados2020.xunta.gal
videoconferencia.xunta.gal
www.edu.xunta.gal
sede.xunta.gal
egap.xunta.gal
micollab-02.xunta.gal
www.xunta.gal
autoprovision.xunta.es
videoconferencia.xunta.gal
candidaturas.xunta.gal
xunta.es
www.edu.xunta.gal
*.xunta.gal
egap.xunta.gal
correoweb.xunta.gal
edu.xunta.es
igvs.xunta.gal
smtp.edu.xunta.es
cntg.xunta.gal
www.xunta.gal
xunta.es
sede.xunta.gal
mmdm.xunta.gal
smtp.edu.xunta.es
luciaccn.xunta.gal
micollab-01.xunta.gal
micollab-03.xunta.gal
videoconferencia.xunta.gal
smtp.edu.xunta.es
imap.edu.xunta.gal
www.candidaturas.xunta.gal
*.xunta.gal
asiste.xunta.gal
*.edu.xunta.es

egap.xunta.gal
*.xunta.gal
correoweb.xunta.es
egap.xunta.gal
micollab-02.xunta.gal
sede.xunta.gal
videoconferencia.xunta.gal


egap.xunta.gal
rpvri.xunta.es
micollab-01.xunta.gal
*.edu.xunta.es
rpvri.xunta.es
*.xunta.gal
autoprovision.xunta.es
www.xunta.gal
videoconferencia.xunta.gal
xunta.es
sede.xunta.gal
emprego.xunta.gal
keys.xunta.es

radiusedu.xunta.gal
mdm.xunta.gal
*.xunta.gal
*.cdticvirtual.xunta.gal
*.xunta.gal
streaming.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
*.edu.xunta.es
www.edu.xunta.gal

Certificate

The complete raw certificate details for egap.xunta.gal in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWiebTR02RoAhsuGkE8c
ZRcqEDYiT40nj/z7CN1QaiErCSjU9FKf69DyfsnPvUY0x8UsAMyEYP+VvABTjEXk
MhL6apux3fI5TQNZ6sm61hWNGP3FtfJZIqBtRpfjQYGlGswLllPqOftOtJSyauNh
cBhG2cIVM/qKLi7FEAH4PJxqT9l4I6XQn8gpEziMAmLgF/mc+JDHKzETacQBPnIy
GPmvBrzFPP5SF+BwBh38PsTSX68XtlEFW5lGu/GM9soAIwYye1V7WoAFVYdsN7Jd
8I1Zzi7WBdc8em+Tsu0v1jercgefNYTgdaQd+ybznNpZfeNgqbmP/mxK4H5N1hg7
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6689437466942872459864321079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 11:01:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 11:01:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egap.xunta.gal'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18861096919534839046642636895981665055351285312605337009602006665429078678694206153229141419240982394684970032854032336593276205311922432153406876271466990075627602673360940541005117117998749136879600677149569107519283671484076490460035913440233247996572077079421453922185135142969975528304689277775852517087151458789126730802791573248258954142540651517076375286551828496121428314733409276752246385385023592141615059191564024593682691651193792395730591225911553621185761109598698950943919451676926261526592292496685195508600287257059783887859303408586182512386880960084062124202937845386216785703997958506338064022503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egap.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egap.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egap.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egap.xunta.gal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6374a05f260352efa02576f1b03abe247bd07c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001806fd4dfba000004030046304402202c67796a617c37d5cbd8a909f0f0db21e00dc7ce211e0ea00db92ff2e9b42fdf022032c15ef1c15764d0420bae1e72d7bfccfb7d3d4eb778d330aba0c55f2a9b68dc0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001806fd4df9f0000040300463044022011a190ddbe3f3e11b54c3e1b80a286922dcffbf5078f181457bc7e5ff4b13c08022019cb8cdf89f6e23c9b693a4e70e3bd98d97192aa1012e201dff101b45067b2e10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001806fd4dfc70000040300473045022100eefe5ff9510aaadec31eae069bb7a06fb785761cee536fc0adde4a86f11b2c1202206380baa510e288b4c478f40337604f8f592f5fd469e439879563a353cea7d99f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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