xrmbpm.fcbarcelona.net

Issued by Amazon

About this certificate

This digital certificate with serial number 09:61:b2:07:87:ff:00:3f:a4:34:00:59:85:a1:94:ae was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xrmbpm.fcbarcelona.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:61:b2:07:87:ff:00:3f:a4:34:00:59:85:a1:94:ae
Serial Number (int): 12470315622937462317147821318594466990
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:c5:be:8c:b0:23:9d:82:db:66:aa:5f:c9:b9:94:77:e6:ba:ce:91
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ae:6b:23:00:be:44:cb:d4:2a:70:e8:97:0c:9a:d8:1f:e7:18:89:06
Fingerprint (sha256): c7:f3:88:ef:9b:4f:c9:79:14:45:4b:9c:ec:a8:0f:a3:d9:e5:be:b1:63:39:31:8d:b7:90:95:d9:c1:9a:fe:52

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate xrmbpm.fcbarcelona.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xrmbpm.fcbarcelona.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xrmbpm.fcbarcelona.net
xrmbpm.fcbarcelona.cat

Other certificates including the domain name fcbarcelona.net

(limited to 100 certificates)
forms.fcbarcelona.cat
gestorweb.fcbarcelona.net
www.basilea.fcbarcelona.net
adtarget.fcbarcelona.com
www.fcbarcelona.cat
sts.fcbarcelona.net
xrmbpm.fcbarcelona.net
www.fcbarcelona.cat
mail.fcbarcelona.cat
games.fcbarcelona.com
games.fcbarcelona.com
seientlliure.fcbarcelona.cat
mail.fcbarcelona.cat
www.fcbarcelona.cat
store.fcbarcelona.com
games.fcbarcelona.com
extranet.fcbarcelona.cat
gestiopenyes.fcbarcelona.cat
www.fcbarcelona.cat
games.fcbarcelona.com
prexrmbpm.fcbarcelona.net
gestiopenyes.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
adtarget.fcbarcelona.com
forms.fcbarcelona.cat
www.basilea.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
gopre.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
store.fcbarcelona.com
games.fcbarcelona.com
MAIL.FCBARCELONA.CAT
www.fcbarcelona.cat
www.fcbarcelona.cat
games.fcbarcelona.com
www.basilea.fcbarcelona.net
adtarget.fcbarcelona.com
smetrics.fcbarcelona.net
www.fcbarcelona.cat
gopre.fcbarcelona.net
www.fcbarcelona.cat
games.fcbarcelona.com
oab.fcbarcelona.cat
erp.fcbarcelona.net
www.basilea.fcbarcelona.net
gestiopenyes.fcbarcelona.cat
gestiopenyes.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
teletreball.fcbarcelona.net
mail.fcbarcelona.cat
gestorweb.fcbarcelona.net
MAIL.FCBARCELONA.CAT
absencies.fcbarcelona.net
mail.fcbarcelona.cat
seientlliure.fcbarcelona.cat
seientlliure.fcbarcelona.cat
masia.fcbarcelona.net
testoab.fcbarcelona.net
erp.fcbarcelona.net
www.fcbarcelona.cat
sts.fcbarcelona.net
mail.fcbarcelona.cat
www.fcbarcelona.cat
erp.fcbarcelona.net
noc.fcbarcelona.net
store.fcbarcelona.com
www.fcbarcelona.cat
teletreball.fcbarcelona.net
xrmbpm.fcbarcelona.net
forms.fcbarcelona.cat
games.fcbarcelona.com
seientlliure.fcbarcelona.cat
gestorweb.fcbarcelona.net
gestorweb.fcbarcelona.net
www.fcbarcelona.cat
www.fcbarcelona.cat
www.fcbarcelona.cat
mail.fcbarcelona.cat
games.fcbarcelona.com
erp.fcbarcelona.net
gestiopenyes.fcbarcelona.cat
seientlliure.fcbarcelona.cat
oab.fcbarcelona.cat
mail.fcbarcelona.cat
www.fcbarcelona.cat
adtarget.fcbarcelona.com
coplays.fcbarcelona.net
hr.fcbarcelona.net
games.fcbarcelona.com
forms.fcbarcelona.cat

Certificate

The complete raw certificate details for xrmbpm.fcbarcelona.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNzwa7GnoANMam/fUQHi
0F4d/uH19YpHmwBQ6ZBtWSwgb55GgMXp0NLrjUzuTNgu+GgJFEI6ew0lqyAU4ntL
RMjhXIKlUXThNurf7JyG9K+K13Z9wfW2WO2MhmeGNmnJBfr2UJ8mm2Zl2+9WdFfq
CXZePRCYNdyYOm0g+IRSnO1p0RvyDTU2D9zNVNwCJn7jgnOOibNpdOEIauXD7PGB
tuV0XB7IvT3SAa36Tz0apHxTQdOOIEqAl/vj+WrKF1qEF6Ec7Sd7EEwSwR7KXHgq
XQDIWZsz52Iu+Q8+VXhoctv2NynGQ4oTkHWNj0M3+Mp/T62IyO+o9/dtInkwQYbF
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12470315622937462317147821318594466990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xrmbpm.fcbarcelona.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25861563365217578963372328649362768511131875765024970118396949880378092864001836882492657678519160073155245485102384798364975734622546408405934405876903203796492643282264587172455389833500790188677654838241126864190274643967622180184501567906641409283161537545115481691497785535745650454724971988577190076044141554749230215020488122462227602789678574565002219212982825334529932458332441974987241693850033665078790115105421449977336919116989732386936686460249586288948069426246571383014876557646195746507565053300577890501873707172084379352223655143685253037958292327915743213054800635471712884783582181373027916629381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11c5be8cb0239d82db66aa5fc9b99477e6bace91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrmbpm.fcbarcelona.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrmbpm.fcbarcelona.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e491e1f6e6a5e31e2efbb76f010ef8b47c15a5a6baa6d0f24efadd01239c871fff28a52b02e10c450cf7d302859bf94269fb5ee475decda3974929465a48b7d0a05aa1a6b3f3a2d3490a4bb3616d38e6389f1236d68e38e7ac7cc2a1d857dd7438cbc31e7b720b80cd2c4719a0d21844b60694a20e6fa142041d0ad355b5f5c12963d425fbb1f1706f24e3e12e1f2b3620ae253056e52a2dd22c4602dfcb851c5776f1b94de9fe3dac363ff6ebc71591af9f6befea71321e91030a9230413e857c02a32d0eb8352dbf45afd4e5b8e3cd74f98f06e196130278b4b67eb598b539011ad760c08a30762d3dc519d93a4a35968e91341979994b89a3620235090d1