*.hispasat.es

- HISPASAT S.A. -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 63:e8:d4:18:c0:99:9a:e5:8b:7d:23:aa:e1:1e:94:04 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HISPASAT S.A.

Organization: HISPASAT S.A.
Organization unit: Administración de Sistemas
State / Province: Madrid
Locality: Madrid
Country: ES

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:e8:d4:18:c0:99:9a:e5:8b:7d:23:aa:e1:1e:94:04
Serial Number (int): 132802486285805444938663228602387960836
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): fa:f8:ce:8b:f4:41:37:9e:60:dd:87:91:d6:0e:43:1c:14:d0:2f:42
Fingerprint (sha256): 4b:61:1b:5b:26:9d:f3:d7:5a:09:ea:bd:9f:06:cc:22:c6:79:7f:ac:5e:82:ba:19:45:f7:b0:1f:a9:e1:58:0e

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.hispasat.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hispasat.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hispasat.es
hispasat.es

Other certificates including the domain name hispasat.es

(limited to 100 certificates)
pre.hispasat.es
*.hispasat.es
assist.tenens.com
connect.warditservices.co.uk
www.hispasat.es
*.pre.hispasat.es
assist.yunatech.co.uk
empleo.hispasat.es
ofertas.hispasat.es
assist.displax.com
connect.warditservices.co.uk
assist.easitill.co.uk
connect.warditservices.co.uk
pre.hispasat.es
remote.logicwave.co.uk
empleo.hispasat.es
help.numed.co.uk
connect.warditservices.co.uk
personas.hispasat.es
*.hispasat.es
assist.hispasat.es
remote.ukcloud365.co.uk
connect.warditservices.co.uk
ofertas.hispasat.es
support.originfilmtv.com
assist.easitill.co.uk
personas.hispasat.es
pre.hispasat.es
empleo.hispasat.es
assist.easitill.co.uk
ofertas.hispasat.es
empleo.hispasat.es
help.numed.co.uk
connect.warditservices.co.uk
assist.rydercragie.com
*.hispasat.es
assist.hardsoft.co.uk
pre.hispasat.es
connect.warditservices.co.uk
nms.hispasat.es
personas.hispasat.es
connect.warditservices.co.uk
personas.hispasat.es
support.johnsons1871.co.uk
ofertas.hispasat.es
empleo.hispasat.es
nms.hispasat.es
ofertas.hispasat.es
personas.hispasat.es
empleo.hispasat.es
ofertas.hispasat.es
assist.tenens.com
assist.higgins-group.co.uk
*.hispasat.es
assist.rydercragie.com
ofertas.hispasat.es
connect.warditservices.co.uk
ofertas.hispasat.es
remote.logicwave.co.uk
connect.warditservices.co.uk
assist.shinetsusilicones.eu
ofertas.hispasat.es
ofertas.hispasat.es
assist.shinetsusilicones.eu
empleo.hispasat.es
asistencia.consultumti.net
connect.warditservices.co.uk
remote.nimdasoft.com
ofertas.hispasat.es
connect.warditservices.co.uk
asistencia.consultumti.net
fernwartung.hohmann.digital
empleo.hispasat.es
remote.ukcloud365.co.uk
assist.hardsoft.co.uk
ofertas.hispasat.es
*.hispasat.es
empleo.hispasat.es
*.hispasat.es
empleo.hispasat.es
assist.displax.com
hilfe.dgfkt.de
ofertas.hispasat.es
asistencia.consultumti.net
empleo.hispasat.es
assist.rydercragie.com
personas.hispasat.es
personas.hispasat.es
asistencia.consultumti.net
personas.hispasat.es
assist.rydercragie.com
connect.warditservices.co.uk
*.hispasat.es
personas.hispasat.es
empleo.hispasat.es
ofertas.hispasat.es
*.pre.hispasat.es
assist.higgins-group.co.uk
empleo.hispasat.es
remote.ukcloud365.co.uk

Certificate

The complete raw certificate details for *.hispasat.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1xVANCoH6WVhj9oX1hO
rbm76LRs4oOEYNIfCZERNLkCII9SiqvOA2HNYOJ3Ya2wf80LX9VkiSkrFlYoaQlx
3MlyIGJRJhDvf5rxvrrxoiLBxaKxVFSq3u7GxI8REijTj30O9X8mpOZJhsvIKO0S
2Oc1h6Aptz8Zz1pfOh+/3A0Ta/AtkoH/4MWCHJ9W+gxqglsWaE+xy1eGXHzPeuQW
ilelDd69p0aHk+a+qzDh+/ZH0Ks2FEDiQhoieQSd1X+DcjKDAVEidxtsc13+4/VF
bO8ojz4fSkzDZaKMw3Wfoqji1xRq43qsvVZpd44bokoTrnYB9j9etgmTJrIvTt6b
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132802486285805444938663228602387960836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HISPASAT S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Administración de Sistemas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hispasat.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24662000096073179968782192557367946005568689454098601516186031613488207404650649377495025684843889272133849338743445799665522860708017146016493490459205571129897506296261044314346006376073452219341519405089403786887437281187172241248136486751839308872565159697079342108992210422040137778520759131255343944818306912454816391993801838748998255717297158728293771323503412921215942163769181425239010565231768313967052056292086227660963448902239268411621828378559545389640732405577788263772097446276011011540116754355211731684530116367435577416940182730996800445223314657663033038466036682248494949520098141958210412518249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hispasat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispasat.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001533712f2890000040300473045022100f8c822826842a47abe5345c439230861f6eb40ab07e47f1543f940780da5c11402207aa08b02253ed3085162596fcc63140c8e35d7e337296234b64576576902dab3007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001533712f2c50000040300473045022076d5d0e4de0924f3f0b21a018f2ef2dd34cd728dede2fe070efeb1dedb777bb702210090e2a5f99d6c5ffe0083ac02cfe1d95c368104976870c8bcea652af4dc8e2212
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000eb9f05c8b9070dd690f1dcea22a560264bcd2f47ee4035c42b9be77ef32568998c25d75288e6ac9d2a8616f23496ed70c3ec79b9dcd8d8a9ab5a51af1bda762469af54f1d027cf894c52fa52e4a8d0b40065663fd64fb40525cd9fff86f3aaca46598a68af3ced603e186e42857852e5891c1f4e0c6f793d3ab594fd9fa2105539f158591992b674ca2faff444fa1ac1d5814f3b71f990afe616aa47a2694f7b40a3880163d2389ac4db1fd1c0c3323a8bea3efbcefc13f02eb0e2b18a526db5c70dd74cdfeeed073200df27550aea38b60ef960163ed22143c755708ff50dd815795403b22a470501f8761a6bd45bdc9490be41a3d6b51dc8cce8ba8eb5fdb