masia.fcbarcelona.net

- FUTBOL CLUB BARCELONA -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:4e:f9:e2:a9:73:1b:51:95:e0:5c:4b:57:e6:60:c7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUTBOL CLUB BARCELONA

Organization: FUTBOL CLUB BARCELONA
Locality: Barcelona
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:4e:f9:e2:a9:73:1b:51:95:e0:5c:4b:57:e6:60:c7
Serial Number (int): 15031575386597950784587155188841078983
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: df:41:81:01:16:07:59:15:4d:d2:45:9b:79:9f:f4:cd:2d:f3:68:36
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3d:e1:58:a0:b7:b4:5e:85:a6:95:53:8e:1b:19:2a:02:0d:68:52:b9
Fingerprint (sha256): b3:29:6c:d0:60:73:33:8a:96:55:ce:3d:63:ca:e1:3d:34:a5:1c:65:f7:31:02:35:d8:ac:a7:d5:b1:3a:4b:ed

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate masia.fcbarcelona.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for masia.fcbarcelona.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

masia.fcbarcelona.net
www.masia.fcbarcelona.net

Other certificates including the domain name fcbarcelona.net

(limited to 100 certificates)
forms.fcbarcelona.cat
gestorweb.fcbarcelona.net
www.basilea.fcbarcelona.net
adtarget.fcbarcelona.com
www.fcbarcelona.cat
sts.fcbarcelona.net
xrmbpm.fcbarcelona.net
www.fcbarcelona.cat
mail.fcbarcelona.cat
games.fcbarcelona.com
games.fcbarcelona.com
seientlliure.fcbarcelona.cat
mail.fcbarcelona.cat
www.fcbarcelona.cat
store.fcbarcelona.com
games.fcbarcelona.com
extranet.fcbarcelona.cat
gestiopenyes.fcbarcelona.cat
www.fcbarcelona.cat
games.fcbarcelona.com
prexrmbpm.fcbarcelona.net
gestiopenyes.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
adtarget.fcbarcelona.com
forms.fcbarcelona.cat
www.basilea.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
gopre.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
store.fcbarcelona.com
games.fcbarcelona.com
MAIL.FCBARCELONA.CAT
www.fcbarcelona.cat
www.fcbarcelona.cat
games.fcbarcelona.com
www.basilea.fcbarcelona.net
adtarget.fcbarcelona.com
smetrics.fcbarcelona.net
www.fcbarcelona.cat
gopre.fcbarcelona.net
www.fcbarcelona.cat
games.fcbarcelona.com
oab.fcbarcelona.cat
erp.fcbarcelona.net
www.basilea.fcbarcelona.net
gestiopenyes.fcbarcelona.cat
gestiopenyes.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
teletreball.fcbarcelona.net
mail.fcbarcelona.cat
gestorweb.fcbarcelona.net
MAIL.FCBARCELONA.CAT
absencies.fcbarcelona.net
mail.fcbarcelona.cat
seientlliure.fcbarcelona.cat
seientlliure.fcbarcelona.cat
masia.fcbarcelona.net
testoab.fcbarcelona.net
erp.fcbarcelona.net
www.fcbarcelona.cat
sts.fcbarcelona.net
mail.fcbarcelona.cat
www.fcbarcelona.cat
erp.fcbarcelona.net
noc.fcbarcelona.net
store.fcbarcelona.com
www.fcbarcelona.cat
teletreball.fcbarcelona.net
xrmbpm.fcbarcelona.net
forms.fcbarcelona.cat
games.fcbarcelona.com
seientlliure.fcbarcelona.cat
gestorweb.fcbarcelona.net
gestorweb.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
mail.fcbarcelona.cat
games.fcbarcelona.com
erp.fcbarcelona.net
gestiopenyes.fcbarcelona.cat
seientlliure.fcbarcelona.cat
oab.fcbarcelona.cat
mail.fcbarcelona.cat
www.fcbarcelona.cat
adtarget.fcbarcelona.com
coplays.fcbarcelona.net
hr.fcbarcelona.net
games.fcbarcelona.com
forms.fcbarcelona.cat

Certificate

The complete raw certificate details for masia.fcbarcelona.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15031575386597950784587155188841078983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUTBOL CLUB BARCELONA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'masia.fcbarcelona.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624055613596756794320360383774315355044979875137655916763246213549997878965610004616243554601058388412018829643189571782159725034396127419368566169164689895911116861597778270510741513178908774351583552500745848987608475089978433444993468158417942183371461677890438593653679624619981231186818763489643243863368635984585442683739535389203144276707782119215384763530322964012904109522636216824595254822604379553728775575505331981712907147300939344458718554466707982646383157548784495029108106272265337950662242869563959842650636457158122039934664198481587447723320504198916350654333300906041809350490480631747286599922458155454824950998223058334508787523515223012611507541136556681600560485801632027403217355537272796306389625300811825146416466167777365877313654770377337499622830029917974024054140502064246687253262897138434660617367919784423533920787691915816514304767785772820758172265107108021817646641510849788128154491199015038332242429733381634276430402729320601518686196008442841200244530539105712839818673886577079258454062089672599279139700512626073177148636146099300970477619993462274763134673756002878827640548902786089889116839865438529128948679871087934223131488707586088768045609719718714884161958254696759826824185224919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df418101160759154dd2459b799ff4cd2df36836
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masia.fcbarcelona.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masia.fcbarcelona.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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