*.edu.xunta.es

- XUNTA DE GALICIA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3f:99:3c:4b:e8:e1:8a:ff:fc:64:0a:fe was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

XUNTA DE GALICIA

Organization: XUNTA DE GALICIA
State / Province: La Coruña
Locality: Santiago de Compostela
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:99:3c:4b:e8:e1:8a:ff:fc:64:0a:fe
Serial Number (int): 19682806011421401818935331582
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 38:15:67:ea:f9:76:bf:5d:9f:97:87:4d:88:72:8c:ae:30:5b:1f:75
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 0f:d5:42:04:70:a0:50:9a:53:9b:95:b3:57:da:7c:86:46:5a:be:a3
Fingerprint (sha256): f3:f0:91:b8:6e:d7:7e:ea:83:0e:c0:d0:5d:9b:39:05:65:c9:f7:e5:50:b8:e8:a7:2a:bb:4c:81:c4:12:ef:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.edu.xunta.es

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.edu.xunta.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.edu.xunta.es
edu.xunta.gal
*.edu.xunta.gal
edu.xunta.es

Other certificates including the domain name xunta.es

(limited to 100 certificates)
*.EDU.XUNTA.ES
www.edu.xunta.es
sede.xunta.es
correoweb.xunta.gal
cdtic.xunta.es
resultados2024.xunta.gal
CORREO.EDU.XUNTA.ES
*.dev.xunta.es
*.edu.xunta.es
imap.edu.xunta.es
axude-ws.dev.sara.xunta.es
resultados2020.xunta.gal
www.extranet.edu.xunta.es
*.xunta.es
*.redsara.ourense.sara.xunta.es
egap.xunta.gal
*.edu.xunta.es
smtp.edu.xunta.gal
SEDE.XUNTA.ES
correoweb.xunta.gal
adviser-notifica-des-depo.sara.xunta.es
WWW.CMG.XUNTA.ES
autoprovision.xunta.es
www.xunta.es
emprego.xunta.es
xunta.es
bega-elbe2.edu.xunta.es
pop.edu.xunta.es
egap.xunta.gal
correoweb.xunta.gal
*.edu.xunta.es
sara.xunta.es
*.stg.xunta.es
auth.edu.xunta.es
edu.xunta.es
www.extranet.edu.xunta.es
carpeta-pre.pontevedra.sara.xunta.es
smtp.edu.xunta.es
pre-nidec-dacoruna.sara.xunta.es
*.CDTICVIRTUAL.XUNTA.ES
rpvxg.xunta.es
senfios.xunta.gal
des-cir-depo.sara.xunta.es
xunta.es
smtp.edu.xunta.es
*.EDU.XUNTA.ES
emprego.xunta.es
EGAP.XUNTA.ES
www.extranet.edu.xunta.es
keys.xunta.es
smtp.edu.xunta.es
imap.edu.xunta.gal
KEYS.XUNTA.ES
www.candidaturas.xunta.gal
CORREO.EDU.XUNTA.ES
descargas2024.xunta.gal
emprego.xunta.es
notifica.pontevedra.sara.xunta.es
*.edu.xunta.es

candidaturas.xunta.es
egap.xunta.gal
csvstorage-pre.pontevedra.sara.xunta.es
correoweb.xunta.es
nidec-dacoruna.sara.xunta.es

egap.xunta.gal
EGAP.XUNTA.ES
*.xunta.es
csvstorage.pontevedra.sara.xunta.es
rpvri.xunta.es
*.dev.xunta.es
EMPREGO.XUNTA.ES
*.edu.xunta.es
rpvri.xunta.es
adviser-notifica-depo.sara.xunta.es
www.extranet.edu.xunta.es
xunta.es
EGAP.XUNTA.ES
autoprovision.xunta.es
www.edu.xunta.es
*.XUNTA.ES
www.formacion.edu.xunta.es
www.formacion.edu.xunta.es
cir-depo.sara.xunta.es
emprego.xunta.es
carpeta.pontevedra.sara.xunta.es
xunta.es
orzamentos.xunta.gal
*.edu.xunta.es
keys.xunta.es
emprego.xunta.gal

axg.dev.sara.xunta.es
*.edu.xunta.es
correoweb.xunta.gal
*.edu.xunta.es
*.oleiros.sara.xunta.es

Certificate

The complete raw certificate details for *.edu.xunta.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7GeMdCSyDLhE+lIxDvd
cjXnydyZm1UB6iNMKokGGmFYfW8yhLEJ0wTY5r+m2Fcvnei0duFaYH5miBFVGOQp
kuBZ4uNMzsIY+27K7N/hVAjX9tVp2Nwxnd2UepLP/nMc7yHM320rgnX+g3xLZVHU
XIhrUu3TgnHG0Pxu6ucVOBczEizOLdr5Bk6MTYWKOzPvlLWK55J+MqKFF/aSLGKZ
NlH0WrI5ED2Lji7xGsDt6iKggpIqIaWOMmvl2z+f6qYGcaMN4PBSQRpk5oA4UgWc
jm9rRwID9Al7A1qFeNwx/FWE3If8BgXRi4tmrPMhflP7SSsCANs8k7fdfqafIev/
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19682806011421401818935331582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 08:06:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 08:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.edu.xunta.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26218915802341968875265993901828465667475797756401968208660027370498531918645194483404855293788955754738803928137685044793422977841006347234246149514323382575304400753195634888367543926535596367034259202506638054832826974568759275551839821471277495736310133616306035291517542492442084231204804808877722280434605145228866506633126920416236291980605341103788789768673433161991403418575720192687931608014216200016159891064275115134584425786454122922637113529179495019272752533952362738174917659977411329570524679531921807364703006604218409036932061140416896577002200247138064202279017601139288728281440496298814696325103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edu.xunta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edu.xunta.gal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.xunta.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							381567eaf976bf5d9f97874d88728cae305b1f75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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