correoweb.xunta.gal

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 43:9a:2f:a2:fc:a5:ad:de:15:e5:2b:0d was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 43:9a:2f:a2:fc:a5:ad:de:15:e5:2b:0d
Serial Number (int): 20921895192053155549814270733
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: eb:97:86:9e:29:5d:84:ec:a6:d6:57:59:f5:c6:c9:d2:95:b8:94:ff
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 22:df:cb:b8:ec:82:ba:f7:69:bd:2e:5e:79:b8:16:6a:0d:e5:9d:9d
Fingerprint (sha256): 46:25:63:16:c1:2b:b7:d5:74:46:31:e4:81:57:19:19:27:97:41:5e:59:c2:d2:3c:d8:e4:62:72:49:21:db:f3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate correoweb.xunta.gal

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for correoweb.xunta.gal

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

correoweb.xunta.gal
correoweb.xunta.es
autodiscover.xunta.es
descargascorreoweb.xunta.gal
autodiscover.xunta.gal

Other certificates including the domain name xunta.gal

(limited to 100 certificates)
adfs.xunta.gal
correoweb.xunta.gal
*.dev.xunta.es
www.xunta.gal
resultados2020.xunta.gal
videoconferencia.xunta.gal
www.edu.xunta.gal
sede.xunta.gal
egap.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
micollab-02.xunta.gal
www.xunta.gal
autoprovision.xunta.es
videoconferencia.xunta.gal
candidaturas.xunta.gal
xunta.es
www.edu.xunta.gal
*.xunta.gal
egap.xunta.gal
correoweb.xunta.gal
asiste.xunta.gal
edu.xunta.es
igvs.xunta.gal
smtp.edu.xunta.es
cntg.xunta.gal
www.xunta.gal
xunta.es
sede.xunta.gal
mmdm.xunta.gal
smtp.edu.xunta.es
luciaccn.xunta.gal
micollab-01.xunta.gal
micollab-03.xunta.gal
videoconferencia.xunta.gal
smtp.edu.xunta.es
imap.edu.xunta.gal
www.candidaturas.xunta.gal
*.xunta.gal
asiste.xunta.gal
*.edu.xunta.es

egap.xunta.gal
*.xunta.gal
correoweb.xunta.es
egap.xunta.gal
micollab-02.xunta.gal
sede.xunta.gal
videoconferencia.xunta.gal


egap.xunta.gal
rpvri.xunta.es
micollab-01.xunta.gal
*.edu.xunta.es
rpvri.xunta.es
*.xunta.gal
autoprovision.xunta.es
www.xunta.gal
videoconferencia.xunta.gal
xunta.es
sede.xunta.gal
emprego.xunta.gal
merlin.xunta.gal
keys.xunta.es

radiusedu.xunta.gal
mdm.xunta.gal
*.xunta.gal
*.cdticvirtual.xunta.gal
*.xunta.gal
streaming.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
*.edu.xunta.es
www.edu.xunta.gal

Certificate

The complete raw certificate details for correoweb.xunta.gal in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ILxKrs5RFYo0gzXEXsu
EhU6xUxLdnVRXtC674kQs0g5plKTwIPWbOCANh6R9AMlBf0ad0w7W/9MZDixavu5
KoJ6ipqE3RJplXXdgw5ShbSc0A2fJGqcCjMqo2bh5Fo/S7hggI+yoQlo5LIGjCJY
YS4NdYWnr2Q9pql7hsBrzpi6z5BxhNFCSYyXzhI58Db82U8wDjQSb2B0/xiOdxca
zyN08c6ApnHNLGJCJxG9mxxtcbIK9zsk0OdalXtitC4LKmwT6ZBnRm0f3V0C1iJL
cycK1kIFCvU3w+LWLWwkvbvD7mKnChTVWgq+mvrjKSpPKL/OvuxXYNxTSJblmkG8
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20921895192053155549814270733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 08:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 08:41:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'correoweb.xunta.gal'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26322137368431795361541594625542155451671868661584963682023307230295116320564872533849980157872170105288973960418829236707193737412360642601085672968135578663320663408083303712028921618401989706838274788943437294784738966135664908341926448848528786914085488225606968080299252490080779975333223022902555294489208750238225995316875691167021789760759218499243812826728152148831144262024530563665802361679560184953742126498361186842017327305122911321354139589667769998584490696667095870909508826717943750129127069616786616448144080873781152488663519074500597041361155174315209986695272646981626134505674457362605818362897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correoweb.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correoweb.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descargascorreoweb.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xunta.gal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb97869e295d84eca6d65759f5c6c9d295b894ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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