egap.xunta.gal

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 53:f9:11:cd:6f:3e:2f:68:6b:47:6c:a6 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 53:f9:11:cd:6f:3e:2f:68:6b:47:6c:a6
Serial Number (int): 25988362414084323775374388390
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 98:65:04:05:21:f6:8a:0c:6e:61:0a:7f:97:dd:92:c6:5a:7d:30:aa
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 32:68:d7:5e:a7:74:38:c7:a9:4c:49:17:ef:de:86:f3:bf:e1:f6:f2
Fingerprint (sha256): 8c:3f:c3:7d:f9:07:72:00:14:7c:f4:88:c0:ad:9b:5e:11:51:c8:1a:bf:f9:74:d0:ac:90:0b:25:34:78:fa:ed

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate egap.xunta.gal

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egap.xunta.gal

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egap.xunta.gal
egap.xunta.es
*.egap.xunta.gal
*.egap.xunta.es

Other certificates including the domain name xunta.gal

(limited to 100 certificates)
adfs.xunta.gal
correoweb.xunta.gal
*.dev.xunta.es
www.xunta.gal
resultados2020.xunta.gal
videoconferencia.xunta.gal
www.edu.xunta.gal
sede.xunta.gal
egap.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
micollab-02.xunta.gal
www.xunta.gal
autoprovision.xunta.es
videoconferencia.xunta.gal
candidaturas.xunta.gal
xunta.es
www.edu.xunta.gal
*.xunta.gal
egap.xunta.gal
correoweb.xunta.gal
asiste.xunta.gal
edu.xunta.es
igvs.xunta.gal
smtp.edu.xunta.es
cntg.xunta.gal
www.xunta.gal
xunta.es
sede.xunta.gal
mmdm.xunta.gal
smtp.edu.xunta.es
luciaccn.xunta.gal
micollab-01.xunta.gal
micollab-03.xunta.gal
videoconferencia.xunta.gal
smtp.edu.xunta.es
imap.edu.xunta.gal
www.candidaturas.xunta.gal
*.xunta.gal
asiste.xunta.gal
*.edu.xunta.es

egap.xunta.gal
*.xunta.gal
correoweb.xunta.es
egap.xunta.gal
micollab-02.xunta.gal
sede.xunta.gal
videoconferencia.xunta.gal


egap.xunta.gal
rpvri.xunta.es
micollab-01.xunta.gal
*.edu.xunta.es
rpvri.xunta.es
*.xunta.gal
autoprovision.xunta.es
www.xunta.gal
videoconferencia.xunta.gal
xunta.es
sede.xunta.gal
emprego.xunta.gal
merlin.xunta.gal
keys.xunta.es

radiusedu.xunta.gal
mdm.xunta.gal
*.xunta.gal
*.cdticvirtual.xunta.gal
*.xunta.gal
streaming.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
*.edu.xunta.es
www.edu.xunta.gal

Certificate

The complete raw certificate details for egap.xunta.gal in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2IEbHHXb1HK/juIOtK0
zPwoAJqBQT0IuSMlMA6GAY+Mj1MYaaHpvS4ZNXhlZj1sTqk+DSap+jQhOU1ePjGq
Y9pvS0E/f0GQKazjbZzzpVIe+wUZumXkbOUkqgwOFg4QL5gw9sOVIb1rWQZCYM9x
r8bv68ATEOtP99Qult9zfqH+il+0xT6ZL2JsWlXuMgGdBK88d+EVye6Rw7K5z2Qp
XZxp0AGfOuFC+g1Z1dB3NYmUnHyAigiRWZUvurjnQ9qRrNec6UmqwHV4optjcX/G
ft2VJVtYbO80QCgB0MbxBJad++Z7CpTG+YYJBtGoG72b/wyrFeuJ8NZqJgw7krbq
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25988362414084323775374388390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 11:01:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 11:01:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egap.xunta.gal'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21635084271270606324866624185012046818340567902921362360621293170679745675129944891569199196734810090318412362180006322951809208257781321210397211113432364558239479513626339204649415282159559411493042991189505357809685724550313218145410074911880438138097988439837526553085301605669468618074464468701900061364287004697956784548915589870163421783631636787085731991527334454450999501339312112212150405743180463251938727528392791756582454746860932395627442894896556627905556344956165117849338480623399982139237349724082021387313537796356272366155718410941279973714314387547778498422800283558321924245048285235824505055779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egap.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egap.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egap.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egap.xunta.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9865040521f68a0c6e610a7f97dd92c65a7d30aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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