www.grupoioe.es

- Iniciativas Organizativas de Empresa S.L. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:16:4f:24:d9:43:c3:94:0a:00:c8:c9:25:76:0e:a9 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Iniciativas Organizativas de Empresa S.L.

Organization: Iniciativas Organizativas de Empresa S.L.
State / Province: Lugo
Locality: Lugo
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:4f:24:d9:43:c3:94:0a:00:c8:c9:25:76:0e:a9
Serial Number (int): 4103519748055221575467876564952551081
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 10:a3:80:31:ae:5d:0b:d5:bb:42:46:6d:bf:47:e2:2d:83:95:40:61
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 6b:f4:eb:be:4b:32:3e:7a:7e:0c:26:32:59:7a:48:9f:57:de:17:89
Fingerprint (sha256): a8:52:30:76:3d:e9:ec:60:00:b8:1b:ca:29:8e:41:9e:33:48:0f:6d:3d:db:11:dc:08:ec:d2:7f:a3:b9:7c:32

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.grupoioe.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.grupoioe.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.grupoioe.es
grupoioe.es

Other certificates including the domain name grupoioe.es

(limited to 100 certificates)
www.grupoioe.es
grupoioe.es
grupoioe.es
grupoioe.es
grupoioe.es
grupoioe.es
grupoioe.es
www.grupoioe.es
www.grupoioe.es
www.grupoioe.es
www.grupoioe.es
grupoioe.es
www.grupoioe.es
www.grupoioe.es
www.grupoioe.es
empleo.grupoioe.es

Certificate

The complete raw certificate details for www.grupoioe.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wobor9Zgwk4fLW1cfMm
KLoMh8bo9Ny22boafaUULav7VQM96CmD8ffM1WXh7GrzbZHxisTa5ppqdyoBqIHc
7dBUjj3tQLtrCu+Rl/pfHOjP62VPOIRisOxj320yGVaE3qP6Gvf+4Y6nu1Q4AS+i
8pMHZG50pnpWFVvbKvuWf6loLJjVvzgDyDTrUrxkFtQMuN6jN7MbWFQ4LT6SniGi
pKsTWaG2wTE2UICd91XDN15X4UTQDiX/gXz/FiuoCthXGgfDLuFWno48c31cJ69I
dWxmnaLg5vG+3EjYE4fZG0hwvMitynF0TEOPm6nvfjtncz7IA45WvUZSwWsmreO9
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4103519748055221575467876564952551081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lugo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lugo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iniciativas Organizativas de Empresa S.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grupoioe.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30680892523694240717246286218989613627346991158848446898709627692438098284856988457519330283298527158760894294091388089739764170088653253884884055931358460942953196077019587698596303455691779723553175439304873744248897105308889848332074316073452604877970610386137866811894404924205624892170187565559375300746656297535026641572394846161317471758984793137398740652891014190415990645973701735392547113645290797282743687350983743882646406158196857363473737730323326145393684426353166306098705154462476745067452267603540402181272942267037089994501278649748370893784628366743639952021759285648916985169905192799541580250581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10a38031ae5d0bd5bb42466dbf47e22d83954061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupoioe.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupoioe.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00758489eb31f0674f951110fefa03bb305f7b5e0ce55b4bd676e25efc8a4d9e8b3e77852d04073a49a44b394559f2e582f8e92058b120aae5d2829d42f94e5bd6cfd83553d94315a40d3077b31abc494e4af825c356e74daec4446dde91d3bd463de4e172acd053b6e0c890630f4cabe81cac7b5a8a1c28b059fe2ef08f854c3ec6570191ae00a26ab59df49138cffd90d2982395ce3ed6524bfa967099bb074283934a324fb84684a0ebdb7dc3e0f2691ee07eb9245610e14c9a8e6632f2b4c2191785491176f63038f7bc8aae157f9e7536638733c743ea8d8541f576a8052d67fd5348c438b4e2cee4384a24f4dd7c9aeba085ebc92e11aff7aeb0f146ca24