xunta.es

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 71:d0:a0:04:52:fd:d6:50:f6:d1:45:fd was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 71:d0:a0:04:52:fd:d6:50:f6:d1:45:fd
Serial Number (int): 35224018338696242595756066301
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 21:c9:8f:26:93:d9:64:ef:f1:2f:94:7e:24:54:a5:58:aa:ed:5f:69
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): d1:ab:24:14:09:ce:c7:86:ba:6b:6f:95:df:7a:78:10:16:22:83:56
Fingerprint (sha256): 3d:29:d0:ff:40:8a:2e:dc:75:d7:32:5e:4a:df:bb:46:49:ae:91:89:cd:16:14:15:3a:df:b4:d1:a7:1d:79:5f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate xunta.es

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xunta.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xunta.es
xunta.gal
*.xunta.es
*.xunta.gal

Other certificates including the domain name xunta.es

(limited to 100 certificates)
*.EDU.XUNTA.ES
www.edu.xunta.es
sede.xunta.es
correoweb.xunta.gal
cdtic.xunta.es
resultados2024.xunta.gal
CORREO.EDU.XUNTA.ES
*.dev.xunta.es
*.oleiros.sara.xunta.es
*.edu.xunta.es
imap.edu.xunta.es
axude-ws.dev.sara.xunta.es
resultados2020.xunta.gal
www.extranet.edu.xunta.es
*.xunta.es
*.redsara.ourense.sara.xunta.es
egap.xunta.gal
*.edu.xunta.es
smtp.edu.xunta.gal
SEDE.XUNTA.ES
correoweb.xunta.gal
adviser-notifica-des-depo.sara.xunta.es
WWW.CMG.XUNTA.ES
autoprovision.xunta.es
www.xunta.es
emprego.xunta.es
xunta.es
bega-elbe2.edu.xunta.es
pop.edu.xunta.es
egap.xunta.gal
correoweb.xunta.gal
*.edu.xunta.es
sara.xunta.es
*.stg.xunta.es
auth.edu.xunta.es
edu.xunta.es
*.cmati.xunta.es
*.ourense.sara.xunta.es
www.extranet.edu.xunta.es
carpeta-pre.pontevedra.sara.xunta.es
smtp.edu.xunta.es
pre-nidec-dacoruna.sara.xunta.es
*.CDTICVIRTUAL.XUNTA.ES
rpvxg.xunta.es
senfios.xunta.gal
des-cir-depo.sara.xunta.es
xunta.es
smtp.edu.xunta.es
cir-dacoruna.sara.xunta.es
*.EDU.XUNTA.ES
emprego.xunta.es
EGAP.XUNTA.ES
www.extranet.edu.xunta.es
keys.xunta.es
smtp.edu.xunta.es
imap.edu.xunta.gal
KEYS.XUNTA.ES
www.candidaturas.xunta.gal
CORREO.EDU.XUNTA.ES
descargas2024.xunta.gal
emprego.xunta.es
notifica.pontevedra.sara.xunta.es
*.edu.xunta.es

candidaturas.xunta.es
egap.xunta.gal
csvstorage-pre.pontevedra.sara.xunta.es
*.stg.sara.xunta.gal
correoweb.xunta.es
nidec-dacoruna.sara.xunta.es

egap.xunta.gal
EGAP.XUNTA.ES
*.xunta.es
csvstorage.pontevedra.sara.xunta.es
rpvri.xunta.es
*.dev.xunta.es
EMPREGO.XUNTA.ES
*.edu.xunta.es
rpvri.xunta.es
adviser-notifica-depo.sara.xunta.es
www.extranet.edu.xunta.es
xunta.es
EGAP.XUNTA.ES
autoprovision.xunta.es
www.edu.xunta.es
*.XUNTA.ES
www.formacion.edu.xunta.es
www.formacion.edu.xunta.es
cir-depo.sara.xunta.es
emprego.xunta.es
carpeta.pontevedra.sara.xunta.es
xunta.es
orzamentos.xunta.gal
*.edu.xunta.es
keys.xunta.es
emprego.xunta.gal
sara.xunta.es

axg.dev.sara.xunta.es

Certificate

The complete raw certificate details for xunta.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA311J2IeALgkPACjKQdv/
j9/49zlLzgdudFs4MGQrk1ETcAiirOhdRRAWQeJWybVcDFxWhkGh5BxyCSZNW+l7
fqg/ieqNT+2euhDX9S1cF4AQynzSnMoqyzpJYPxi/4UzxrppZ622plWnIi8j68jV
tesL02n1K+HJScmB8fGD/2Dh5yIQciZ0OwSMAz0USMHVtOJCkUXqGJAsjdIvEboU
F+qIZ7AqYWQPRQbu4HyCFL4XvP8i6gRNsN6B94ApWQjBkRjYu+VAmkoI6SZuegIY
e8JPogUSPCNC0QlhOsZX6jvexPWA2XQiAkmvCALyfwu9TMqTTnBhPy3NtnkJDp5L
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35224018338696242595756066301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 10:56:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 10:56:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xunta.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28197144261695471432835166819682055967094856883409619260045414158206238497106598378892527161153246111550412100650178311433385446788042674246786018785996818580440882312487955364112121774983088846932647942172605787809685035469304410318322593191538616085522251286903666873563163327995653380514615974690992596830493745998010855812494793996516267443771460107493403811679094351480606070837102837947645197392626009655787160257178125448077886102714029686673025703000545561207028627420285659886048161596947554203585906485337806910745936999392496328328457919216895444019796193042683637463868023950219706357351906841349580540773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xunta.gal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21c98f2693d964eff12f947e2454a558aaed5f69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000214e753bdccc069817688d4f2a6b5a005292654ecad8c8c258b1fce11e3d5b75314351c2ee21ba51f472a3eb2123d8ef04ebb0135f5beeaa88b5001b6c4ccdeb70c727d56b3acd45e1e920b9cf2aa8dc1ca93ecf1e0f84a4b966ac7e43975e16214b1d61b061b835fe95bce6ce85d8aa40472e356dc52e22e3c969ba2d97e860a20676b395e273f7912dbf7a58080e5d6f6351d5ce28b42e2f996c611d4bd01cd6eeb76881417cee195ebba01c77265ad56dba90a35c721438ca5c4d6545f22e25a77676137f52d9c1c412bb8ae6b88bc10583a0e0e91946bb35ec077edd8733e355e84a3c0c57c1a4333750a10b0c22bac6d09e2c519c3d38b8f126c107e05