gestionclientes.ocaso.es

- OCASO S.A. COMPAÑIA DE SEGUROS Y REASEGUROS -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:05:86:f9:52:4d:57:96:d0:5f:78:b5:1e:e2:d0:2a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OCASO S.A. COMPAÑIA DE SEGUROS Y REASEGUROS

Organization: OCASO S.A. COMPAÑIA DE SEGUROS Y REASEGUROS
Locality: Madrid
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:05:86:f9:52:4d:57:96:d0:5f:78:b5:1e:e2:d0:2a
Serial Number (int): 18637891021452123455823916249116758058
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:be:9b:c6:b2:fb:f7:ec:0f:25:a5:f3:06:f9:cd:e3:d5:02:0f:96
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 6e:8c:0e:bc:1a:51:89:37:d4:11:1a:18:ec:2a:0e:dd:92:0d:55:e8
Fingerprint (sha256): 5b:c8:db:61:01:aa:30:4e:2c:d3:d3:f3:09:45:b9:d3:2f:1f:82:7f:01:91:b8:4f:20:31:6b:3a:e0:2c:79:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate gestionclientes.ocaso.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gestionclientes.ocaso.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gestionclientes.ocaso.es

Other certificates including the domain name ocaso.es

(limited to 100 certificates)
aplicaciones.ocaso.es
autenticacion.ocaso.es
docker-registry-default.master-devops.openshift.ocaso.es
aplicaciones.pruebas.ocaso.es
svc27010.ocaso.es
autenticacion.ocaso.es
clientes.pruebas.ocaso.es
portalclientes.ocaso.es
gestioncontenidos.ocaso.es
promociones.ocaso.es
dental.ocaso.es
invitados.ocaso.es
dni.ocaso.es
correo.ocaso.es
wwwtest.ocaso.es
guarda.ocaso.es
www.ocaso.es
acs.ocaso.es
agentes.ocaso.es
portalfunerario.ocaso.es
svc27010.ocaso.es
agentes.ocaso.es
webservices.ocaso.es
ldapsslprod.ocaso.es
cookierepo.openshift.ocaso.es
portalclientes.ocaso.es
correo.proveedores.ocaso.es
empleados.eterna-aseguradora.ocaso.es
promociones.ocaso.es
devops.ocaso.es
protecciondelmenor.ocaso.es
atencionmedica.ocaso.es
vdi.ocaso.es
colaboradores.ocaso.es
agentes.ocaso.es
empleados.eterna-aseguradora.ocaso.es
portalclientes.ocaso.es
invitados.ocaso.es
portalclientes.ocaso.es
empleados.ocaso.es
*.mail.ocaso.es
itsm.ocaso.es
clientes.ocaso.es
gue.pruebas.ocaso.es
cpd.ocaso.es
dni.ocaso.es
protecciondelmenor.ocaso.es
www.ocaso.es
webservices.ocaso.es
contacto.ocaso.es
devops.ocaso.es
testagentes.ocaso.es
wwwedit.ocaso.es
www.ocaso.es
colaboradores.ocaso.es
docker-registry-default.master-devops.openshift.ocaso.es
empleados.ocaso.es
contacto.ocaso.es
www.ocaso.es
guarda.ocaso.es
adfs.ocaso.es
scrstudio.ocaso.es
proveedores.ocaso.es
www.ocaso.es
colaboradores.ocaso.es
agentes.ocaso.es
adfs.ocaso.es
cpd.ocaso.es
colaboradores.ocaso.es
*.pruebas.ocaso.es
empleados.eterna-aseguradora.ocaso.es
*.ocaso.es
dental.ocaso.es
chat.ocaso.es
dental.ocaso.es
autenticacion.pruebas.ocaso.es
brand.ocaso.es
guarda.ocaso.es
dental.ocaso.es
vdi.ocaso.es
*.pruebas.ocaso.es
dental.ocaso.es
portalclientes.ocaso.es
empleados.pruebas.ocaso.es
acs.ocaso.es
www.ocaso.es
autenticacion.ocaso.es
guarda.ocaso.es
autenticacion.pruebas.ocaso.es
clientes.pruebas.ocaso.es
dental.ocaso.es
CENTRAL.OCASO.ES
itsm.ocaso.es
prevabanrstudio.ocaso.es
gue.empleados.ocaso.es
gestionclientes.ocaso.es
empleados.eterna-aseguradora.ocaso.es
colaboradores.ocaso.es
atencionmedica.ocaso.es
proveedores.ocaso.es

Certificate

The complete raw certificate details for gestionclientes.ocaso.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIvIBYIHyLdeI3bNGfLs
XhB6INeTLd9imkwxhPGoLQ0kcOg/nDlO+mLIPv6LOMGh9VfCRWqiHQwEQ9egS7Wc
jX+fyN5q730rHC61uCQWTB3NQqHpqvLl54zaIbGi8L4lcOdNIpvz5XEA2ffPyK+h
i/NIEIrvZZ5LTgxiO4lsDVv7fYQgkNOlh9BrIdCtuu6v27ISGhvL8DFSKt/uX8b5
fHyFiMfx9rIK5cKuOD5fyJgqRNRB7+mQuNKpvj7Z3F83qzdxTOWph4rQL4EFJ5cz
3WYp7X6s/VZY8y12JSQOlWg2NdNur1IrcKF9Vo4MkHsUWb6n57D08obN9wuJryco
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18637891021452123455823916249116758058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCASO S.A. COMPAÑIA DE SEGUROS Y REASEGUROS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gestionclientes.ocaso.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25821542957902734799325030224156731908992229921104208552820581629792899451252375613928358028709220409668892856571856076046242047133260008352484348800300828727160886808733706570595472664594737661138065684651345370921139153385101263372362240480281281627731322793672916986700908048340368825976062957097329470364808715134743537586298318425352836854234669811446304950473732391827389579712166109498986878228879481037402824876877709247099543939988462577940727249802593817289045237187323289697973017127797424950806836303517396461875707205564772587260837139985500122405934841200061900778699006524235686426879950454496021653553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11be9bc6b2fbf7ec0f25a5f306f9cde3d5020f96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionclientes.ocaso.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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