*.habitat.es

- PROMOCIONES HABITAT S.A -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 42:dc:0b:9a:63:9e:8e:13:59:ed:19:b7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PROMOCIONES HABITAT S.A

Organization: PROMOCIONES HABITAT S.A
State / Province: Madrid
Locality: Madrid
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 42:dc:0b:9a:63:9e:8e:13:59:ed:19:b7
Serial Number (int): 20692029122532222941478590903
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 03:28:b5:c6:91:7c:5d:8c:94:1f:36:89:e5:59:8a:0e:b8:24:3c:90
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 9b:4c:8f:cb:40:11:04:61:09:45:ce:9c:ee:4a:20:74:ce:8a:f5:2c
Fingerprint (sha256): af:73:de:1f:91:d2:e7:f4:1c:06:e7:4f:3b:a2:52:a2:1a:05:e2:5e:5f:6c:cb:ec:18:87:f2:8d:12:19:23:27

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.habitat.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.habitat.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.habitat.es
habitat.es

Other certificates including the domain name habitat.es

(limited to 100 certificates)
www.qeuegames.com
shuttle.kiwilabs.de
19130160.tk
crm.dizzibrands.leap360.com
my.aramark.co.uk
whereismypythonmodule.com
indowhere.org
eventcomfort.com
imperva.com
convene-now-dev.cpptl.co
trackingram.com
*.habitat.es
contratos.habitat.es
*.habitat.es
mission.vsnap.my
whereismypythonmodule.com
imperva.com

Certificate

The complete raw certificate details for *.habitat.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20692029122532222941478590903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 10:43:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-10 10:43:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PROMOCIONES HABITAT S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.habitat.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867103455606526040070722313795943531823406908035639031085477396784530413536732842034161277804100425364699053208122293606725605844376618263248232083482777730678367130966229318111289411661526075358791384873582808617696903620773326523326341614880491745807756087512931726905067651460105808927727192990410156791232169608615634220075881341653794708897539972070334053956204634341180494101725902424533008005457727381418314873383295210818566162946963483064531617321589303729947391297790084073759300538440348653999976164337213585947004932470139527987081318324821886633616051988843751726473774081223359517130376594281627105241309372467484418978758867849200706647640698880221283186811627358235975061905280665404819747925668144775059272194661770415458248558519605149013589691592973059380165178838999460415707940556846360322770543091433043823740277101736651027785934854450558769301361367821974590469242248143927898935101111059411338293745025785434919875509051810112180970722670814229417199264932083228326667154613103822271003948545330999771267149025571347557063264255318199809395458725306277815101582435012058821967067727673709161503251297714311251859476601173117808687965440069078843038980015688836222701012374426326133265000930201735182185160861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habitat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitat.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0328b5c6917c5d8c941f3689e5598a0eb8243c90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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