DV SSL/TLS Certificate for www.bcacores.pt

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.bcacores.pt DV SSL/TLS Certificate

This certificate with serial number 06:a3:04:02:4e:9b:b6:c2:80:c4:79:7e:10:1b:ba:23:c5:f1 for www.bcacores.pt was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.bcacores.pt provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:a3:04:02:4e:9b:b6:c2:80:c4:79:7e:10:1b:ba:23:c5:f1
Serial Number (int): 578145070289616181843445311849459274204657
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: ef:1b:2c:ff:ed:17:cb:98:f1:ba:3a:54:25:ef:e2:50:6c:24:22:1c
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 1d:e6:92:f9:b9:e9:2b:e0:89:d4:ec:0a:dd:f1:52:83:72:8a:b4:21
Fingerprint (SHA-256): 61:72:6b:e0:d2:f0:6c:56:77:b9:d5:93:8f:2e:39:4e:74:f2:c1:22:1e:65:ab:35:9c:d9:4b:40:02:99:23:b6

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/114.crl

Check the revocation status for certificate www.bcacores.pt
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.bcacores.pt

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.bcacores.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xaJuUoQpfB0OpS9Zykm
3QzN8jrTobKn9xWnhSBN9KP70H6uM5PpFqKXVCQRmpeB8gpbFowemqcy0Ht/oZc4
vya1+eXn4MPQixRttZSNDZHhR+MWZLiWemY05IUjHdxULX906547hl4qIkVDjt+/
dYagVcLOtBGTpfxEGehmXCXRNuzreyhv0ZAnV8Azs+UAiMUEpmnunr7NpENYBpba
3QucEfTJlJUZmIHa16AIfBwv+koJiMHBNBQiCyETPNtw69gzzUQE2VqF5FLRFUXc
7W1vrrokpe+M9V2b2Dmem+wOlE9XeEMyTBYq7AArMvF0bhP9wmAVyI/JVgS1XYtR
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 578145070289616181843445311849459274204657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 17:52:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-26 17:52:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bcacores.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28162255901335439285402759027934769620966385356243046713924829384728927348450879271669918157132789593004621857106223577921736381144616872888145559954058213138818261286877365316390174696609240158661561545044463726785000836991213461342574362607562279448845693183727687231600862394338919919763654275185420605757968064760994284037870544723547286079598787475212322622489155211588549096346985811219189828464672992030413169869508550875927174380357817566456265309765835519012405259577465403064343943309579902049636229141001815535556436014356207564164962994604204883802609599479532409891770879787349242859334819870205826257223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef1b2cffed17cb98f1ba3a5425efe2506c24221c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcacores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bcacores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcacores.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/114.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197183c0c340000040300473045022033f694b2dc157b95bce747353a7da3222331aa33166f34a9d2485c3ea1e63b04022100ddd6732a0d333f5bd22e2377d8ed4002d82f971748583355fcc226412a3d72ab007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197183c13f1000004030047304502206c5beede33d997980424ae0435016b394322871dac0de0f04e8d161127acb630022100be095ed1c5dc46a3a408487b68a92788bd42b9afefc754763c94a953536a455d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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