seu.dipsalut.cat

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:c6:38:4c:b8:16:59:e8:3a:ec:5c:ac:7a:b5:ff:bf was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=seu.dipsalut.cat

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c6:38:4c:b8:16:59:e8:3a:ec:5c:ac:7a:b5:ff:bf
Serial Number (int): 16979952620659304672594606582771613631
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b4:67:3e:4e:17:7f:9a:96:ea:ad:13:65:9d:fa:c3:1d:5b:ae:8f:e7
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 86:3d:2e:09:68:71:80:da:45:09:6d:c3:15:39:1c:94:86:be:c4:3a
Fingerprint (sha256): 49:e6:43:ee:32:b1:e0:00:c1:b3:f1:28:1c:4e:f4:57:ee:68:14:03:9f:91:b8:5a:03:a6:9d:e1:df:ed:83:44

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate seu.dipsalut.cat

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seu.dipsalut.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seu.dipsalut.cat

Other certificates including the domain name dipsalut.cat

(limited to 100 certificates)
crm.dipsalut.cat
www.dipsalut.cat
crm.dipsalut.cat
randomprompt.com
registre.dipsalut.cat
joytasker.com
www.upliftnow.net
docu.dipsalut.cat
www.dipsalut.cat
aplicacions.dipsalut.cat
www.dipsalut.cat
transparencia.dipsalut.cat
www.rhynocare.ca
www.ladietadeldottmagrolino.play-bay.com
docs.dipsalut.cat
registre.dipsalut.cat
aplicacions.dipsalut.cat
docs.dipsalut.cat
platform.censminoristes.dipsalut.cat
simsap.dipsalut.cat
console.sagantosu-fan-token.jasmy.co.jp
crm.dipsalut.cat
test.tetel.in
seu.dipsalut.cat
alfresco.dipsalut.cat
seu.dipsalut.cat
seu.dipsalut.cat
ssid.yidindji.country
www.dipsalut.cat
transparencia.dipsalut.cat
test.tetel.in
*.dipsalut.cat
www.cpanel.lmserp.com
transparencia.dipsalut.cat
alfresco.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
sgi.dipsalut.cat
seu.dipsalut.cat
transparencia.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
transparencia.dipsalut.cat
www.hachede.tv
transparencia.dipsalut.cat
www.dipsalut.cat
www.dipsalut.cat
sgi.dipsalut.cat
alfresco.dipsalut.cat
seu.dipsalut.cat
docu.dipsalut.cat
seu.dipsalut.cat
simsap.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docs.dipsalut.cat
aplicacions.dipsalut.cat
hipchat.dipsalut.cat
transparencia.dipsalut.cat
docs.dipsalut.cat
docs.dipsalut.cat
docs.dipsalut.cat
registre.dipsalut.cat
www.dipsalut.cat
api-uat.freetrade.io
*.dipsalut.cat
www.global-visaconsultant.com
seu.dipsalut.cat
seu.dipsalut.cat
aplicacions.dipsalut.cat
docs.dipsalut.cat
crm.dipsalut.cat
www.dipsalut.cat
crm.dipsalut.cat
simsap.dipsalut.cat
simsap.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docs.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docu.dipsalut.cat
alfresco.dipsalut.cat
docu.dipsalut.cat
www.dipsalut.cat

Certificate

The complete raw certificate details for seu.dipsalut.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxASkJIjM7DAzDFDswsNA
YADPNCy39uZYSCNJAg6YGM5hGkPmHnoCnxS59VfthBQWw13dGzEThNpNRXe0jjh6
fBV0SL/QmVRKs8C1r/9hP2Hfa92DglhNgC/gwT2iTNh6/KU4J/EDpRGnWesnZK9Y
LELp7y9wFOL/br+W+GYN26RwagY78hrfDVN3HBEOw5MDZNKzKXzEji10QI2tdNSA
q6/BctKbGqNkJhaD7ZO3YUUlkjwUBfTtliXA+g0Ae9hK6kUfKMw5tu0KeiJRkfUI
NgP57By+SzLyzlFDALFJp5SrjPkdkCBD/MP/yL3bmwTsbXg+7mwNcj4juJotqZj7
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16979952620659304672594606582771613631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seu.dipsalut.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24744996425722861817046616839444439885437201309088804762364689042831588604812906003560740389026627004401943008174617235181448412057719993491912960960055011588515828767085411965450184446903830499223423201423556468363201337038064358264203950004416931832972998979065804704581366514421642768551087065595993733865939340420782917394453590498101264967351750272665888936393936663645472738558341223477562897445296381885290379755217447497563962765830354668685934253557625053851319273864231941930912791402693182296155951283251163324217295115801616297892886310105807281956823253667977209590563178591733745979140006221449912711937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4673e4e177f9a96eaad13659dfac31d5bae8fe7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seu.dipsalut.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001643cd5b692000004030047304502207da4188f5e00eb33f6692b37935a0de9f7679a0a1070a5b760115dc2eba442a602210096402722a553e255f7c3d3147414b86acd9425d4235a41c27cc76b91d96166df0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001643cd5b674000004030047304502210084b1b81512850af27d75e797f6cee6a6b499d093b1252dd5c0f74f1a0b8dcaf202207f0117178a0e4085d9fba8351fd7ed8046b43666f85bd5886742fdf15a69f4f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bc820bed43af276580dc6ba75d0167ab0b438e4a03b189e1009b330b53ebbc7b0a286659d635f4fe3f414b8176e4fa40ee89ea8d7ab8cd6869274302500fa49033da99e215f1df82f06e395e877980581d20a7bd72101432ca60c672b6a1d230ff62ce79d2e8d5c06b0b35336890f9965fa402078e3bb0ea0a39b0099ce9dc3cc2cdaf6959ffab2a9b0ff862f1864a5ec19857809273be77094f12a5585ab4646398809fbbbec7f5270825d5383c8a887b7fea3797c0502645a37f9061164e0833cdc5a74245ace8fadef7c00dd70806d792b294610d7a05a5b3fd22e8e4a960198d26dfe9ee32164e337e750bb2185f4bad231986e429aa3ae30ee4b630e556