sistemas.nebrija.es

- Universitas Nebrissensis S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 07:09:d0:ab:b0:07:f5:c4:cd:cd:98:d2:30:62:93:39 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitas Nebrissensis S.A.

Organization: Universitas Nebrissensis S.A.
Organization unit: Departamento de Sistemas
State / Province: Madrid
Locality: Hoyo de Manzanares
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:09:d0:ab:b0:07:f5:c4:cd:cd:98:d2:30:62:93:39
Serial Number (int): 9355558985913558865107186599665505081
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 90:d6:07:6e:1d:17:78:b3:97:9b:0a:35:d5:9e:63:bb:7c:e9:e3:45
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 45:59:35:fa:da:3d:8b:0a:e0:d9:a6:43:f8:9e:5f:0b:37:45:0d:c6
Fingerprint (sha256): 65:f7:01:ba:f4:d3:bc:1f:e4:10:f0:4f:3b:f6:84:df:5e:c1:7b:e6:df:99:61:f9:58:0d:f2:3d:be:fd:72:90

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate sistemas.nebrija.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sistemas.nebrija.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sistemas.nebrija.es

Other certificates including the domain name nebrija.es

(limited to 100 certificates)
fs.nebrija.es
campusvirtual.nebrija.es
symposium.events
sistemas.nebrija.es
biblioteca.nebrija.es
symposium.events
www.nebrija.es
desarrollopre3.nebrija.es
symposium.events
portalempleado.nebrija.es
vpn.nebrija.es
www.nebrija.es
pruebasadmision.nebrija.es
symposium.events
biblioteca.nebrija.es
eventos.uam.es
campusvirtual.nebrija.es
www.nebrija.es
vpn.nebrija.es
autodiscover.nebrija.es
www.nebrija.es
actos.nebrija.es
www.nebrija.es
sistemas.nebrija.es
symposium.events
portalpdipas.nebrija.es
BZCCM.rednebrija.nebrija.es
symposium.events
EXPE02.nebrija.es
*.ezproxy.nebrija.es
symposium.events
vpn.nebrija.es
EXPE02.nebrija.es
certbot.symposium.events
blogs.nebrija.es
symposium.events
www.nebrija.es
fs.nebrija.es
campusvirtual.nebrija.es
symposium.events
owa.nebrija.es
campusvirtual.nebrija.es
certbot.symposium.events
biblioteca.nebrija.es
symposium.events
symposium.events
owa.nebrija.es
symposium.events
cursos.nebrija.es
owa.nebrija.es
symposium.events
BZCCM.rednebrija.nebrija.es
vpn.nebrija.es
certbot.symposium.events
symposium.events
certbot.symposium.events
biblioteca.nebrija.es
vpn.nebrija.es
biblioteca.nebrija.es
owa.nebrija.es
portalpdipas.nebrija.es
certbot.symposium.events
EXPE02.nebrija.es
campusvirtual.nebrija.es
symposium.events
fs.nebrija.es
desarrollopre3.nebrija.es
sgd.nebrija.es
www.symposium.events
biblioteca.nebrija.es
campusvirtual.nebrija.es
vpn.nebrija.es
portalpdipas.nebrija.es
symposium.events
portalpdipas.nebrija.es
portalempleado.nebrija.es
sistemas.nebrija.es
nch.nebrija.es
desarrollopre.nebrija.es
owa.nebrija.es
campusvirtual.nebrija.es
symposium.events
symposium.events
vpn.nebrija.es
fs.nebrija.es
www.symposium.events
www.nebrija.es
campusvirtual.nebrija.es
actos.nebrija.es
symposium.events
campusvirtual.nebrija.es
symposium.events
sistemas.nebrija.es
blogs.nebrija.es
portalpdipas.nebrija.es
certbot.symposium.events
*.ezproxy.nebrija.es
vpn.nebrija.es
vdiaulas.nebrija.es
clubalumni.nebrija.es

Certificate

The complete raw certificate details for sistemas.nebrija.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmT8CurVYcTpCeexAaC2
6x0zM7ftamNAYxodE2USl9hAuEBfizVFVs+Z7C4j+oPvVKJ0dLcbfNwpPkaGbImm
4mtXjbI/c5uCMSiG8nuGmXQhrAd/wuYbNV0gYutUBiaNS+b0mL1lpE/Ad7e6rltx
2FEmyq8nBTQvtkFWn4CD4xIgSz8j1iKCoc8b/2s0ucLmfrX/fp9ZAP2WGmDCQgxi
Kz1k2Gdv5xx/rECPDNJU2PAA+IAgF4PNfseLwkPMW0Q6Rk+BJ/iV/MvO56OsAv04
EpaO36NYJK3+eDctoUvGc28+Iy8/5YziVEL2VSgwwIX0+2L6KfbDQsiM+5RHgUMB
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9355558985913558865107186599665505081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hoyo de Manzanares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitas Nebrissensis S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Departamento de Sistemas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sistemas.nebrija.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24540028496842999091983101753547319376774490725239321399895551765659920924145074374009731503873677244052025514574027470433836274643245801495041522907271764104013756897938652179995628752218993051525533770541409739481804149911768338092280201314975454144160881347849711317526073081046976825406005542056396909951978102028130716187486068405756801361986789765857046320012993665681518141351511714298842539855708664255948884049837953745820827771411621151764153386834171190389528605731934412876828061102683174320298976294023601995165103115196404461870758785927066817990381664219996010527468706623870315568432272306491946631589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90d6076e1d1778b3979b0a35d59e63bb7ce9e345
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemas.nebrija.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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