elecciones.madrid.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:15:78:df:d0:f3:0b:8c:9c:8c:59:0b:3c:ae:a5:fa was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elecciones.madrid.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:15:78:df:d0:f3:0b:8c:9c:8c:59:0b:3c:ae:a5:fa
Serial Number (int): 13403769813577774547497468197268792826
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:c8:46:50:0a:3d:18:7e:c8:f2:ba:10:47:98:d6:b4:d8:57:15:67
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c0:76:2c:38:8f:cc:d3:a9:11:4b:d8:f9:0b:f2:5a:46:05:e0:1c:0d
Fingerprint (sha256): 3d:7c:81:d1:4b:77:45:64:d1:b2:cd:35:a5:23:53:09:2c:aa:4c:45:aa:ec:0e:af:a8:8f:85:7c:3a:c0:d6:b4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate elecciones.madrid.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elecciones.madrid.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elecciones.madrid.org
impulsaaunemprendedor.madrid.org
srvimagenes.madrid.org
www.emprendelo.org
dominios.madrid.org
www.madrid112.org
bvale.sanidadmadrid.org

Other certificates including the domain name madrid.org

(limited to 100 certificates)
estadisticas.madrid.org
gestionesytramites.madrid.org
jusmadrid.madrid.org
agfaeihupacsp.salud.madrid.org
*.precompartimoss.madrid.org
pvoz-serviber.val.madrid.org


educa.madrid.org
desarrollo.madrid.org

C4-CPD1-SUBSCRIBER-1.MADRID.ORG
grabadorllamadas1.madrid.org
*.educa.madrid.org
hflrrgis004.salud.madrid.org
intranet.madrid.org
raices.madrid.org
sgie.madrid.org
*.educa2.madrid.org
sts.madrid.org
ar.madrid.org
nx02atlasval.madrid.org
*.remotos.madrid.org
PVOZ_INTEGRACION.VAL.MADRID.ORG
INSTRUCCIONESPREVIAS.SALUD.MADRID.ORG
gestiona.madrid.org
FINVESTIGACION.MADRID.ORG
PVOZ-INFORMES.VAL.MADRID.ORG
icmqcmsap2.madrid.org
PVOZ-SERVIBER.MADRID.ORG
pvoz-serviber.madrid.org
correoweb.madrid.org
valintranet.madrid.org
sso.sgie.madrid.org
pasarela.salud.madrid.org
*.educa.madrid.org
mail.madrid.org
sctewspruebas.madrid.org
hryciscv.salud.madrid.org

formacion.madrid.org
sedejudicial.madrid.org
SSO.SGIE.MADRID.ORG
c11-cpd2-sivt-sub.madrid.org
nexefpiq01.madrid.org
*.centrosdeformacion.empleo.madrid.org
network-login.madrid.org
desarrollo.madrid.org
PVOZ-INTEGRACION.VAL.MADRID.ORG
*.educa.madrid.org
certpasarela.salud.madrid.org
pvoz-informes.val.madrid.org
ctfinvestigacion.madrid.org
jusvalwebservices.madrid.org
imap.educa.madrid.org
dosis.salud.madrid.org
agfaeivnacsp.salud.madrid.org
c5-huph-subscriber-1.madrid.org
valraices.madrid.org
nexefpiq01.madrid.org
aulvirtual.educa.madrid.org

jusmadrid.madrid.org
C5-HUPH-SUBSCRIBER-1.MADRID.ORG
sts.madrid.org
aulavirtual2.educa.madrid.org
pasarela.salud.madrid.org
subversion01.madrid.org
C4-HGUGM-PUBLISHER.MADRID.ORG
hflrsaps004.salud.madrid.org
prodsanidad1.madrid.org
gdmm.madrid.org
sie.madrid.org
gdmm-consola.madrid.org
nexefahqs01.madrid.org
nexefposcvs01.madrid.org
estadisticas.madrid.org

wowza01.madrid.org
gestionesytramites.madrid.org
faxvirtual.madrid.org
*.madrid.org
EDOCWEB.MADRID.ORG
edocweb.madrid.org
nexefahds01.madrid.org

gestiona4.madrid.org
rrhhsanidad.madrid.org
*.compartimoss.madrid.org
agfaeivnaxero.salud.madrid.org
participa.madrid.org

c10-hulp-publisher-ms.madrid.org
correoweb.educa.madrid.org
PVOZ_SERVIBER.DESA.MADRID.ORG
estadisticas.madrid.org
crmedes.madrid.org
PVOZ-SERVIBER.VAL.MADRID.ORG
correoweb.madrid.org
c5-cpd2-subscriber-1.madrid.org

Certificate

The complete raw certificate details for elecciones.madrid.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirnJk1X2Ln3fpG5nlAe9
DbtbI0ipb08/0Rd4D04K3FLYVJpGQWidDGZybIYtxUL+gx0ZHcnNkvcMCen27xzQ
DNEsQdhcafBY7pKHPJw2DsAFlu5gGgChEtEoks/ogcGbTBSix92JLG1w3Wxhx+tU
2I98DpNam69e7kRQF6qg0E8grtG0kW+Dn39EMmQ6HgMsgBh+LqRhLMBOvumXL9CR
y7mu+qA8o/XxB63BAfJVj6uCbBfMlIiwXvSpw8YMTzyC+Y+i7n8kzxmnO4rbLndX
mpnSgIgNL4GZtyNcPyCrhLr8+bIJiGv8KRP+bZbHIPc54TEnzabK4CZingHPmpck
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13403769813577774547497468197268792826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elecciones.madrid.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17512501268978130153640936724465761166607434381424297920559451753988328657048300018501756020703139408796709454367255411208017023502191518293921463952815251877536105803172545979933420307347855897887622405612521581965921002364014265339957437496965239221118859684592379499875455376907769040131718975041288595369783581693896368548367214655508790047075435586534092158118130153256371163937859721282256686190552261547805555396739413206666896014557000800623932914786061292990776601370325531739851937140010224060952413025944569450955841203552113437496654075907507003614821550177730794242573524358112289456366642202459420173439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bc846500a3d187ec8f2ba104798d6b4d8571567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elecciones.madrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impulsaaunemprendedor.madrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvimagenes.madrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emprendelo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominios.madrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid112.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvale.sanidadmadrid.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f56f046f00000040300483046022100d3a1878a96dc426e7905ba067e36617a114beed2651884b349d6a4805aea5c0a022100ae7c0a015ff2129e80a921e86781a6a5b1a7b3ebe882c8d79f3f0ab4535367840076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f56f047b60000040300473045022028ca78602c523b43ce46eaa15e4f0befcadf437d004ea6ee7db4510cf20ecca00221008a585c879998881e72d650777fcf5472b061df1653e507071a40cb28504770fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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