gestiopenyes.fcbarcelona.cat

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:57:e4:86:a5:db:a8:84:7b:c3:a9:f6:92:02:f0:cb was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gestiopenyes.fcbarcelona.cat

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:57:e4:86:a5:db:a8:84:7b:c3:a9:f6:92:02:f0:cb
Serial Number (int): 19065556824975338893088388055256199371
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:41:b5:34:3c:e3:aa:02:57:a7:a7:c8:28:e4:d9:7f:7b:b4:fd:65
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 15:14:f2:86:ca:08:6f:0e:48:0d:05:bf:89:b0:6d:c0:c8:41:33:b6
Fingerprint (sha256): 92:be:d9:bf:1c:0f:1f:e0:bd:7b:24:d3:3d:91:be:37:8e:d4:8b:a9:d6:bd:59:a1:fe:9c:7c:d7:85:70:b8:45

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate gestiopenyes.fcbarcelona.cat

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gestiopenyes.fcbarcelona.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gestiopenyes.fcbarcelona.cat
gestiopenyes.fcbarcelona.net

Other certificates including the domain name fcbarcelona.cat

(limited to 100 certificates)
confederaciopenyesfcbarcelona.cat
*.fcbarcelona.cat
tracklink.fcbarcelona.cat
forms.fcbarcelona.cat
confederaciopenyesfcbarcelona.cat
appsocis.fcbarcelona.cat
*.fcbarcelona.cat
confederaciopenyesfcbarcelona.cat
gestorweb.fcbarcelona.net
wimu.fcbarcelona.cat
smetrics.fcbarcelona.cat
formaciojugadors.fcbarcelona.cat
revistafundacio.fcbarcelona.cat
revistabarca.fcbarcelona.cat
arxiu.fcbarcelona.cat
contraelbullying2122.fundacio.fcbarcelona.cat
contactless.fcbarcelona.cat
formaciojugadors.fcbarcelona.cat
seientlliure.fcbarcelona.cat
beta.fcbarcelona.com
adtarget.fcbarcelona.com
vpnblm.fcbarcelona.cat
formaciojugadors.fcbarcelona.cat
formaciojugadors.fcbarcelona.cat
www.fcbarcelona.cat
barcanovesregles.fcbarcelona.cat
contactless.fcbarcelona.cat
teletreball.fcbarcelona.cat
escuts.confederaciopenyes.fcbarcelona.cat
preserveis.fcbarcelona.cat
careers.fcbarcelona.cat
chronostorageweb.fcbarcelona.cat
appsocisstg.fcbarcelona.cat
vpnblm.fcbarcelona.cat
*.fcbarcelona.cat
contactless.fcbarcelona.cat
gestiopenyes.fcbarcelona.cat
xrmbpm.fcbarcelona.net
usuaris.fcbarcelona.cat
www.fcbarcelona.cat
kpkmdm.fcbarcelona.cat
fcbarcelona.cat
messi500.fcbarcelona.cat
mail.fcbarcelona.cat
track.fcbarcelona.cat
messi500.fcbarcelona.cat
beta.fcbarcelona.com
messi500.fcbarcelona.cat
revistafundacio.fcbarcelona.cat
revistabarca.fcbarcelona.cat
contactless.fcbarcelona.cat
contactless.fcbarcelona.cat
contactless.fcbarcelona.cat
games.fcbarcelona.com
teletreball.fcbarcelona.cat
photoawards.fcbarcelona.com
captiveportal.wifi.fcbarcelona.cat
report.fcbarcelona.cat
games.fcbarcelona.com
chronostorageweb.fcbarcelona.cat
contactless.fcbarcelona.cat
contactless.fcbarcelona.cat
fcb-escola.fcbarcelona.com
seientlliure.fcbarcelona.cat
mail.fcbarcelona.cat
serveis.fcbarcelona.cat
www.fcbarcelona.cat
messi500.fcbarcelona.cat
preserveis.fcbarcelona.cat
serveis.fcbarcelona.cat
revistabarca.fcbarcelona.cat
contactless.fcbarcelona.cat
fundacio.fcbarcelona.cat
serveis.fcbarcelona.cat
e1p-internal-sandbox.mrooms.net
appsocis.fcbarcelona.cat
contactless.fcbarcelona.cat
teletreball.fcbarcelona.cat
games.fcbarcelona.com
juga-i-guanya.fcbarcelona.cat
extranet.fcbarcelona.cat
serveis.fcbarcelona.cat
fcbwifi.fcbarcelona.cat
fcbarcelona.cat
forms.fcbarcelona.cat
revistabarca.fcbarcelona.cat
revistabarca.fcbarcelona.cat
track.fcbarcelona.cat
juga-i-guanya.fcbarcelona.cat
chronostorageweb.fcbarcelona.cat
weblink.fcbarcelona.cat
juga-i-guanya.fcbarcelona.cat
gigafotoaquijuguemtots.fcbarcelona.cat
arxiu.fcbarcelona.cat
gestiopenyes.fcbarcelona.cat
fcbarcelona.com
contactless.fcbarcelona.cat
www.fcbarcelona.cat
chronostorageweb.fcbarcelona.cat
fundacio.fcbarcelona.cat

Certificate

The complete raw certificate details for gestiopenyes.fcbarcelona.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRRufoy79SpzzpN5drFz
k9USyLgIdq8F/MzyrjQ5Esm4jwzxIamkX2TR5GkgBE838No8xIwOAyi1k09HTOlQ
kMuKJr+WMJUDPUd2ahiye2vuF7p5rjJ0Z/aNERr24LWp5NBd4Uh+VG2xEyvRYlY2
UsPlFwy2KmIU5SiQJ+TgPSMlQJkMkYpCzGB3vc0kN9T+WGUwAzal9KYeBkVbsanj
9TjGeFye3SNTqPnGtDfBHwCN99V1A+PElX3f+8wRkO7ED53ubpQESwGRivElb+8x
uE8jDDzkd8isqhhg+qDjlqS5/BLdKeD8QBcFa+LPmCWsNv4e3kbIDJjOkGR7b3d0
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19065556824975338893088388055256199371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gestiopenyes.fcbarcelona.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20839395525988060617126246971208195863728399636044143782862703603206768258521314067628259758300483698004693047437499352194427752454058579870421466558470954031057792081488200420602869402339846886540453001010533391605131034419816120727429202441764081334027586394416007188581206166588986615771726475487785307161663293243280446389447188040931722595549169180763885836529200430936647032523230540475276915221937561634955723061718857331960963843000470578150993681822130668681153444410354454765569429527139167183436780932042438270615032055318371588327991302998957071929708539488867934642229635764212667580079566158288792286429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb41b5343ce3aa0257a7a7c828e4d97f7bb4fd65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestiopenyes.fcbarcelona.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestiopenyes.fcbarcelona.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017f8af071070000040300483046022100fc14ceb0f860c650cca75daf67d104dc0ab5449ed84b3c751d865f4474c673c1022100aceb559ceaff152cd55f1c832203f450d77ee41e782c8000caa38be514f9a3bd00760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017f8af0714e0000040300473045022100a498dd74d00cfb514fe9d934eb6f2e99df07944fd33775a8161bcd2a6ee74bbc022025eb3666c853bcb1523038d16e37622067f99fd9dbe0833ecabf9c10dbec798a007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017f8af0716e00000403004630440220495a28c8e61834d2b51d07d525e6e961b6d107917c4da280b29ddcfc0663eac0022002ae109a6ecc1b1cb1d7a4b1e79ee46ba57a60303de235247afc4a3facc8750b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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