xunta.es

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 4e:d3:23:54:da:d7:4a:27:f9:ab:35:cb was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:d3:23:54:da:d7:4a:27:f9:ab:35:cb
Serial Number (int): 24395080962126158901394748875
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: dd:e6:4c:54:46:d9:25:f5:27:c1:3a:ac:ce:b4:36:e5:c1:2f:cd:f9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): b6:a1:76:ff:b8:b5:06:95:25:6d:54:ad:e9:24:c8:d5:ec:10:a0:d0
Fingerprint (sha256): c8:cc:5a:57:da:71:c0:fa:ff:df:da:22:64:42:ac:51:d1:b8:db:94:1f:b4:fc:92:5d:ba:bb:cf:ec:f8:dc:5c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate xunta.es

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xunta.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xunta.es
xunta.gal
*.xunta.es
*.xunta.gal

Other certificates including the domain name xunta.es

(limited to 100 certificates)
*.EDU.XUNTA.ES
www.edu.xunta.es
sede.xunta.es
correoweb.xunta.gal
cdtic.xunta.es
CORREO.EDU.XUNTA.ES
*.dev.xunta.es
*.edu.xunta.es
imap.edu.xunta.es
resultados2020.xunta.gal
www.extranet.edu.xunta.es
*.xunta.es
*.redsara.ourense.sara.xunta.es
egap.xunta.gal
*.edu.xunta.es
SEDE.XUNTA.ES
correoweb.xunta.gal
WWW.CMG.XUNTA.ES
autoprovision.xunta.es
www.xunta.es
emprego.xunta.es
xunta.es
bega-elbe2.edu.xunta.es
pop.edu.xunta.es
egap.xunta.gal
correoweb.xunta.gal
*.edu.xunta.es
*.stg.xunta.es
auth.edu.xunta.es
edu.xunta.es
www.extranet.edu.xunta.es
smtp.edu.xunta.es
*.CDTICVIRTUAL.XUNTA.ES
des-cir-depo.sara.xunta.es
xunta.es
smtp.edu.xunta.es
*.EDU.XUNTA.ES
emprego.xunta.es
EGAP.XUNTA.ES
www.extranet.edu.xunta.es
keys.xunta.es
smtp.edu.xunta.es
imap.edu.xunta.gal
KEYS.XUNTA.ES
www.candidaturas.xunta.gal
CORREO.EDU.XUNTA.ES
emprego.xunta.es
*.edu.xunta.es

candidaturas.xunta.es
egap.xunta.gal
correoweb.xunta.es
nidec-dacoruna.sara.xunta.es

egap.xunta.gal
EGAP.XUNTA.ES
*.xunta.es
rpvri.xunta.es
*.dev.xunta.es
EMPREGO.XUNTA.ES
*.edu.xunta.es
rpvri.xunta.es
www.extranet.edu.xunta.es
EGAP.XUNTA.ES
autoprovision.xunta.es
www.edu.xunta.es
*.XUNTA.ES
www.formacion.edu.xunta.es
www.formacion.edu.xunta.es
cir-depo.sara.xunta.es
emprego.xunta.es
xunta.es
*.edu.xunta.es
keys.xunta.es

*.edu.xunta.es
correoweb.xunta.gal
*.edu.xunta.es
*.oleiros.sara.xunta.es

Certificate

The complete raw certificate details for xunta.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjsD24u+ALqDUyqbZY5r
su6ILBuQXsNMWyi6fsdGxllNxaHw9cmI/Er9BpoUrCAUc5e1+VnxR0toO2q13CUP
+87j2eetobqGuU4UDYQgCsHrG+RmfO7qaPmxlZCGU8UyejSeSeB0pSD/7p/IBlFA
X8alqFx7tlf1h84el0J0yrb+jStVIn4zFUqWDL64O8KRXvJM6NGwHVzoCM4mi+qm
U0u8obZhymK6kmMJkpOk6wFQk5sMr7jYZ/Vl9QwbCO6pdGL9og1VwcfUBH2z0RRV
leRlg9C9U3fvuHoe9fsrRmjKJJzPMUnrvXYkN4Tv4HW94jrM452jc3+61vYLIz9p
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24395080962126158901394748875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 08:51:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-22 08:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xunta.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19974753599664495047751519356663943433098951320362853076915702033724699905233998459657152826012957606606181084800561451741550237036021036963529597646827979474827000546052922505831715518849561775367428785156918043112073620327378790580693338329444237274660160761269044268842413378891044505956136062543995991309633555528149843521331481120025434504845904085874238415221536279881451637862997285887904193128339655665051042869186095435870348345056889797735784805853459877661963283880468659936027278880739257424721036420293578259900778127924531775151195875261988316918789686843329402352046290393575092921188469047516104452491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xunta.gal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dde64c5446d925f527c13aacceb436e5c12fcdf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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