xunta.es

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 60:05:b0:b2:70:db:df:a8:57:f7:46:e2 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 60:05:b0:b2:70:db:df:a8:57:f7:46:e2
Serial Number (int): 29717440000100969387581196002
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 2a:d2:53:41:01:4d:0e:0f:f1:7e:c4:10:be:9a:92:84:28:f6:6b:a8
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 11:8b:c8:c6:4d:72:74:80:c9:89:88:29:6b:e4:c0:25:23:2b:48:fc
Fingerprint (sha256): 67:9f:26:f0:13:82:d3:46:4e:97:5a:a4:61:06:9e:4f:3e:60:31:6b:75:af:d9:06:01:d8:98:26:cf:a8:8e:17

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate xunta.es

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xunta.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xunta.es
xunta.gal
*.xunta.es
*.xunta.gal

Other certificates including the domain name xunta.es

(limited to 100 certificates)
*.EDU.XUNTA.ES
www.edu.xunta.es
sede.xunta.es
correoweb.xunta.gal
cdtic.xunta.es
CORREO.EDU.XUNTA.ES
*.dev.xunta.es
*.edu.xunta.es
imap.edu.xunta.es
resultados2020.xunta.gal
www.extranet.edu.xunta.es
*.xunta.es
*.redsara.ourense.sara.xunta.es
egap.xunta.gal
SEDE.XUNTA.ES
WWW.CMG.XUNTA.ES
autoprovision.xunta.es
www.xunta.es
emprego.xunta.es
xunta.es
pop.edu.xunta.es
egap.xunta.gal
correoweb.xunta.gal
*.edu.xunta.es
*.stg.xunta.es
auth.edu.xunta.es
edu.xunta.es
www.extranet.edu.xunta.es
smtp.edu.xunta.es
*.CDTICVIRTUAL.XUNTA.ES
des-cir-depo.sara.xunta.es
xunta.es
smtp.edu.xunta.es
*.EDU.XUNTA.ES
emprego.xunta.es
EGAP.XUNTA.ES
www.extranet.edu.xunta.es
keys.xunta.es
smtp.edu.xunta.es
imap.edu.xunta.gal
KEYS.XUNTA.ES
www.candidaturas.xunta.gal
CORREO.EDU.XUNTA.ES
emprego.xunta.es
*.edu.xunta.es

candidaturas.xunta.es
egap.xunta.gal
correoweb.xunta.es

egap.xunta.gal
EGAP.XUNTA.ES
*.xunta.es
rpvri.xunta.es
*.dev.xunta.es
EMPREGO.XUNTA.ES
*.edu.xunta.es
rpvri.xunta.es
www.extranet.edu.xunta.es
EGAP.XUNTA.ES
autoprovision.xunta.es
www.edu.xunta.es
*.XUNTA.ES
www.formacion.edu.xunta.es
www.formacion.edu.xunta.es
cir-depo.sara.xunta.es
emprego.xunta.es
xunta.es
keys.xunta.es

correoweb.xunta.gal
*.edu.xunta.es
*.oleiros.sara.xunta.es

Certificate

The complete raw certificate details for xunta.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiy/C08aFeWGinsqnGll
NA9bKCgMQWvhwibjuRzzJoC9RTNMF9lCJjaTR44pNQfsnscsbygizOtnH2Cye+wC
wxUwXtOUdT0pme9j/rrfl/q0aQ+xNXsK4x0W7qedHMJCnbW9S6uYN1FavxCgntyE
UJRN+LiVpI0MNDUdcUs974zUay6BK7SHWrborPMB+LV5gFfmOUSPdGDpDNCscmsT
BunXd5ONiYrzHBYarLwJjfFo+eINEOrxfbC46uxw6PlSKGcOIBIOvwKy1XfArt41
xaCUIfGw36b5kETnb2g4HYMQqsz78Dup7ks0zEBWWRlSnU0f3WZSR/yqxnv9i+7R
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29717440000100969387581196002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 17:31:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-25 17:31:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xunta.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21482577050529677324909161110707386952080717655516142705858511577313027818212006394054391949812781572188084271124253138511248981481976862064389251071508575301673583905847503757356736573294554353823887978385795351858672843999825478923380497695614858761962308268617412411591884583964116075858730628002198904420797136748793402186528055399661510616327268028368847127274744636848306917073153687575009659006634334369733284312636028952980226575219619441635531132727538880453489770497760430315393077220848829503616394358436989887704248130318626455210322272296890136657903874731235476578393370781219053135256223859500997595551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xunta.gal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ad25341014d0e0ff17ec410be9a928428f66ba8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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