owa.apser.es

- APPSER DATA ENGINEERING SRL -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:25:1c was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

APPSER DATA ENGINEERING SRL

Company registration number: ehC03Ua7pg-5b28s1Ok7SUDq8NduM-ac
Organization: APPSER DATA ENGINEERING SRL
Organization unit: IT
State / Province: Zaragoza
Locality: Zaragoza
Country: ES

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:25:1c
Serial Number (int): 140572
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: b1:e6:4b:d9:a6:ac:d8:e1:49:4d:75:23:4e:4f:f7:d7:c9:98:6a:b3
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 62:92:9d:d0:13:c0:f9:58:d2:a6:7a:5f:ab:b0:a2:60:fd:7a:db:80
Fingerprint (sha256): bc:71:b1:32:ac:a7:6a:7c:4b:7b:6a:8e:b0:93:01:d1:13:d9:b1:d4:87:74:90:15:38:cf:44:9b:9d:6e:0d:36

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate owa.apser.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.apser.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.apser.es

Other certificates including the domain name apser.es

(limited to 100 certificates)
www.apser.es
formular.smartpoint.ro
recursos.apser.es
formular.smartpoint.ro
formular.smartpoint.ro
connect.konacom.nl
forms.rmachado.group
formular.smartpoint.ro
cloud.apser.es
formular.smartpoint.ro
formular.smartpoint.ro
recursos.apser.es
formular.smartpoint.ro
formular.smartpoint.ro
blog.apser.es
360.apser.es
viewer.prinzvirtualcoders.ch
blog.apser.es
formular.smartpoint.ro
formular.smartpoint.ro
support.easylogic.nu
blog.apser.es
formular.smartpoint.ro
forms.rmachado.group
support-canon-test.gekko.fr
formular.smartpoint.ro
formular.smartpoint.ro
360.apser.es
blog.apser.es
blog.apser.es
forms.rmachado.group
formular.smartpoint.ro
formular.smartpoint.ro
forms.france-montage.fr
formular.smartpoint.ro
despliegues.apser.es
forms.rmachado.group
etmgroup.support.ignitehospitality.com
formular.smartpoint.ro
360.apser.es
www.apser.es
apser.es
formular.smartpoint.ro
apser.es
formular.smartpoint.ro
blog.apser.es
formular.smartpoint.ro
forms.rmachado.group
360.apser.es
formular.smartpoint.ro
remote.reliable-insights.com
formular.smartpoint.ro
360.apser.es
360.apser.es
formular.smartpoint.ro
forms.rmachado.group
blog.apser.es
forms.rmachado.group
recursos.apser.es
viewer.prinzvirtualcoders.ch
forms.rmachado.group
assist.kaspersky.com
formular.smartpoint.ro
360.apser.es
formular.smartpoint.ro
formular.smartpoint.ro
forms.admorris.com
forms.admorris.com
formular.smartpoint.ro
360.apser.es
recursos.apser.es
formular.smartpoint.ro
www.apser.es
formular.smartpoint.ro
connect.konacom.nl
owa.apser.es
recursos.apser.es
recursos.apser.es
formular.smartpoint.ro
forms.rmachado.group
formular.smartpoint.ro
formular.smartpoint.ro
apser.es
formular.smartpoint.ro
formular.smartpoint.ro
recursos.apser.es
recursos.apser.es
apser.es
formular.smartpoint.ro
despliegueslondon.apser.es
formular.smartpoint.ro
asset-hd.btoresearch.com
forms.rmachado.group
formular.smartpoint.ro
formular.smartpoint.ro
formular.smartpoint.ro
forms.apser.es
support-canon-test.gekko.fr
apser.es
formular.smartpoint.ro

Certificate

The complete raw certificate details for owa.apser.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTN8nBk9NtaDyH5nOqpp
ZhHHXuVEdG8Y2mNN/eLdRCqfBlZYaL8P7Y2fUBgbh2NgizqP7lmMQ5HEsMG6l1zD
l2zz9u9Y9uyIM2CC+pAsJqY/+H1iqTwYfmsP/YGqtCPGvegu5jGkthcBVORqLogw
QJSm/F+l/Tf2VXCAIO5G5WCvltGlT4dyS4z2NzhUinZ6tKoSueERVXpq4EvvJitv
Wj6ZZa+1CTUktI/CEK6/sq2fbJWG2vqEjJT+qQMRsecef0qcrJcHAC1gfJYYLVgF
ZMYKT6+nUwU1nMTwAazwPloQxIFO0vOSvYFJhR1H493LltdaLNVjgG1wxDEqJbS3
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-04 00:58:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-06 13:06:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ehC03Ua7pg-5b28s1Ok7SUDq8NduM-ac'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zaragoza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zaragoza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'APPSER DATA ENGINEERING SRL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.apser.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20349756165614180137186000017208294392203437153112447034097568849856072426435808438887117046963205569856485479781564881308828059394681821082458277941331487955692234260560199023671566334613306556422545349209390390719374196457248754117521427332091892483813029244767925016458432709515885433364494923133356103362054793384251038644509609054359954808578550566586659100043240663257216266204416239756699324800957619711867510516042026361060185603752217274506398246935938841775278149574274202435959773589437554942481928820967709638879609970002977393174922910841308334735940373605785868484122871950508638552552591854044194322191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.apser.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1e64bd9a6acd8e1494d75234e4ff7d7c9986ab3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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