publiport.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:df:b2:37:89:95:00:3f:4a:bb:44:fa:33:65:96:d9:82 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

publiport.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:df:b2:37:89:95:00:3f:4a:bb:44:fa:33:65:96:d9:82
Serial Number (int): 272863519102005464703785597606014108490114
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:d2:0c:b5:75:07:ea:e5:dd:df:82:8c:0f:30:d3:01:56:84:2a:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:bb:51:55:e2:17:16:45:dd:ca:71:4e:39:9d:f9:d8:94:ce:ee:c4
Fingerprint (sha256): 00:00:93:2b:99:bc:b9:ec:47:75:fd:7e:1c:ac:be:5f:b8:0a:20:90:82:34:0e:dd:37:39:3e:98:e9:f3:2a:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate publiport.pt

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for publiport.pt


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.directoriodenegocios.pt
cpanel.portalinformacaonacional.pt
cpanel.publiport.pt
directoriodenegocios.pt
directoriodenegocios.publiport.pt
mail.directoriodenegocios.pt
mail.portalinformacaonacional.pt
mail.publiport.pt
portalinformacaonacional.pt
portalinformacaonacional.publiport.pt
publiport.pt
webdisk.directoriodenegocios.pt
webdisk.portalinformacaonacional.pt
webdisk.publiport.pt
webmail.directoriodenegocios.pt
webmail.portalinformacaonacional.pt
webmail.publiport.pt
www.directoriodenegocios.pt
www.directoriodenegocios.publiport.pt
www.portalinformacaonacional.pt
www.portalinformacaonacional.publiport.pt
www.publiport.pt

Certificate

The complete raw certificate details for publiport.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x1ENsxmQIeZbVGj9Srz
oRWRW3QzbbgeUwa/Q46GIi8iBeHyphqDrYVVnElv/WEgd9C3sNXoytRxS2fHoA8Q
MZo0fkL2pfvxCzS7FvmYT9vtAVYchIUmyf9O1ArmXD4Iz7bQ2jUvophxYUtkDHjx
/seV+oSZocQ5F7OgQNJ1G5fTkBC2BuCbfFGSYnIZWZp6E87561faXvigkzmFhA6Y
BBHCVMKfiJkfkO2RO+4WRopKZGDf3ZWIbyifyrRnkz0R8FJzNFOsPWNfu9ooua8r
uW/EoRYdlBITcmLU6b3JCK0fbR1Bhv78MCuy6zoqxhZ/ga5Cr8OvDh39lFHewWUE
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272863519102005464703785597606014108490114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 23:47:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 23:47:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'publiport.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28165573837309631991905392589594495527607491879564204535052995576536517643173224986983536334089595868107260553971925400431916492556159079099140239324029470835975094467867911793522482121345162252379869066493415294459625823960700456909201107704988636770912983391775414541749268573319313605849834913339477412130840903780594400169140303148958115270920370344122081951421233799054154827215628132958569028975669768777701238516971545063052196461960192305841272114276756309029519700754493109842586536872415705823632136516020734022261764630243194406539089616446489747644796339499365455828220016136632384003410639732367151137933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58d20cb57507eae5dddf828c0f30d30156842af1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (664 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.directoriodenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.portalinformacaonacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directoriodenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directoriodenegocios.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.directoriodenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portalinformacaonacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalinformacaonacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalinformacaonacional.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.directoriodenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.portalinformacaonacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.directoriodenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.portalinformacaonacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directoriodenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directoriodenegocios.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portalinformacaonacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portalinformacaonacional.publiport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publiport.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f3bd77a1ab639910e461264261a93aa2f611e0807a751c2d8c3871050c7f081d03b74d5f8cfa00bc0d7fac0d0c8c58bde82fa82e58379d54a131f390f0b70dd4e2e7dc4bd3335f6d755ef2793070b1c2aee1af940977454bd3e56428d7de7d17436d12bbf7df05d3096f78158d516e5289e60ec5b0724b9cae16e6e7ddf1b846548042e3409f5ebcfa8af28e1c381ea4b80ac4e5a6b9762be8e7bc1c162e84080ff9cd14df0b73e7f553a22d6b1c1d83d6824c1d8771e4b86b38a7fba0e7566cc210b951c7e8d379240ed2982e5f88b9a4c52f598e64596d23e546f161f7c4709102b6026776ec795ee08f19e85bd0efec8fb4d6e5f390e621af973e022ee1d