mail.biobarica.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:26:6c:96:33:20:b4:5a:b6:4e:2b:c2:ab:5b:cc:38:75 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.biobarica.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:26:6c:96:33:20:b4:5a:b6:4e:2b:c2:ab:5b:cc:38:75
Serial Number (int): 331145817492385871905733501167297152956533
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:e8:36:5e:8a:b6:01:b9:66:4d:d6:b2:ef:e3:15:11:a9:90:65:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:6c:04:81:aa:92:03:6c:96:b1:d5:9c:13:19:33:7a:52:e0:0c:31
Fingerprint (sha256): 3d:49:1d:49:00:5b:fe:fa:c5:1c:9a:ec:ea:71:28:aa:f8:29:90:ed:81:64:8b:c9:1b:f6:93:cc:ba:c9:a3:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.biobarica.es

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.biobarica.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clinica-sant-jordi.biobarica.es
mail.biobarica.es
sant-andreu-barcelona.biobarica.es
sevilla.biobarica.es
starmedicaqueretaro.biobarica.es
www.infantaluisa.biobarica.es
www.sant-andreu-barcelona.biobarica.es
www.sevilla.biobarica.es
www.starmedicaqueretaro.biobarica.es

Other certificates including the domain name biobarica.es

(limited to 100 certificates)
sni.cloudflaressl.com
sni23249.cloudflaressl.com
clinicasantaelena.biobarica.es
sni23249.cloudflaressl.com
centro1.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
mail.biobarica.es
sni23249.cloudflaressl.com
biobarica.es
sni23249.cloudflaressl.com
clinicasantaelena.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
clinicasantaelena.biobarica.es
hospitaldelfos.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
biobarica.es
biobarica.es
sni23249.cloudflaressl.com
dem4.biobarica.es
sni23249.cloudflaressl.com
starmedicaqueretaro.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
biobarica.es
sni23249.cloudflaressl.com
sni.cloudflaressl.com
biobarica.es
sni23249.cloudflaressl.com
biobarica.es
centro1.biobarica.es
sni23249.cloudflaressl.com
centro1.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
hospitalnisa.biobarica.es
sni23249.cloudflaressl.com
clinicasantaelena.biobarica.es
clinicaremei.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
clinicaremei.biobarica.es
clinicasantaelena.biobarica.es
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
sni23249.cloudflaressl.com
clinicasantaelena.biobarica.es
clinicaremei.biobarica.es
sni23249.cloudflaressl.com
biobarica.es
sni23249.cloudflaressl.com
clinica-sant-jordi.biobarica.es
sni23249.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for mail.biobarica.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WDN0In+fVrdzMjcJtRj
18MfcD7f/DscDtV6qBZHGa/0udyNkJhD/zyHlZ2AoOvCql2Mwv+NqhO1LruvbRW1
/pbR7TGJNcc7vjhMMo+HCLrsdKtxwApcqZ/gD99nz6DQb1XVJgncB+X8cQAhQBZg
wAFbkIylXQ+69dVVeNJeidxNEmZljDCyjhhH3dV3bJfTgEu/wNKwRajzYrQT6imv
o8zvAPU071KCKAAVTzlChIg0IP+aMIfCiE9At5KBTifw2tqQT4bG9VX5ywUlTbxV
uG6ZwverhEgf/sKIIWyeaPksHfnN/GnZ3j8NHrOmUqOmElWEyuWOD056DtBMjxkT
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331145817492385871905733501167297152956533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 07:24:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 07:24:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.biobarica.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26936494771213433097295401113234326213550450688161613563909208531277248990417949415364286258081399346001202390405390155596410196619044812722256159468364448641568062017631026932458288832480616259740397016361808549828679436951135974863270883477109879684051735384369238363881882994982218158760295532293433485598376706062481382529921896461293725331535626320714586040094087779644695264663421884601598595107906857229523691634729292574378380308330928057604481175314055002339204509732756131839361314406358071687619902919601806957488870567766391055461149255236617726429955998601007944344065448090812407881965270729716254970687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3be8365e8ab601b9664dd6b2efe31511a9906540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (283 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinica-sant-jordi.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sant-andreu-barcelona.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevilla.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starmedicaqueretaro.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infantaluisa.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sant-andreu-barcelona.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sevilla.biobarica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starmedicaqueretaro.biobarica.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001644aa52701000004030046304402200226db1f25b264e07012c5240f2ad99ba2b2480cd19e44a7e93200f949e6dc7a0220401de5b31ad8bd414e1eaf1dd9dbe624f3a83f29c0819065acbb584cd77c54ba007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001644aa5271c0000040300463044022074c98f5738caed5f60a5175be27ba0b7fd8d41b4ab538839c2b7e1a00d419d86022054a83e599d9decb9ac30db3f902c6040dcc44bd74272d4a4fb1522f8ae0a8dc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00820148e3eac74010070ef435ca93c728265ac63759c827466c3e04e143135aebc93dd0008d0f5383a0828b15b5c601e05e6dfbde422b5ab2337cb6521db76e8e7b78e386dcdc451e11c86ccb26a1182d27c2fe0721fdec137b2d9a177c8424ab955fa7740355a1b984b86bc2969e1d27577bd353373385b7662ebf88fdb1e8b0461a46f9bcd8e9fe810a2db2a93e7b491784ea07236a6f93c89499a4fb5e018bd76fbf9e502d9fd41accc7b97a5ef0d09adab73ba3017d11287569efccd8c7cd7637312bfaf5d081659e9efdee24b264147111041a92b00b32bd157b4d17ccf3f8a8d6ab2ca4be231ad5fce0a13d95f0f06a83d0073eacba3774718b4924a10c