impresa.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2a:a0:ad:33:44:e9:fb:0d:3d:ff:63:76:64:5b:bd:df:35 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=impresa.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2a:a0:ad:33:44:e9:fb:0d:3d:ff:63:76:64:5b:bd:df:35
Serial Number (int): 362954578924265333464210358026858697449269
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b6:6c:3f:b4:e7:0f:aa:4d:f8:81:73:c2:9b:df:2c:5a:2f:6d:70:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:9c:d8:92:ae:b5:00:7f:d9:0d:db:0a:00:b2:e2:21:1f:6c:96:90
Fingerprint (sha256): 00:35:b2:82:8b:c7:1b:69:c0:eb:2a:f3:cb:c7:3e:28:a3:2d:08:6a:b4:95:79:7e:60:12:46:d5:0d:4a:51:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate impresa.pt

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for impresa.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.impresa.pt
api.onprem.impresa.pt
atm.impresa.pt
auth.impresa.pt
backoffice.impresa.pt
bacula.impresa.pt
cdn.impresa.pt
ci.impresa.pt
digital.impresa.pt
docker-repo.impresa.pt
epg.impresa.pt
expresso.impresa.pt
forms.impresa.pt
git.impresa.pt
graylog.impresa.pt
httpd.impresa.pt
iapi.impresa.pt
iapi.onprem.impresa.pt
id.impresa.pt
images-cdn.impresa.pt
images.impresa.pt
impresa.pt
ingestlusa.impresa.pt
internal.impresa.pt
iweb.impresa.pt
loja.impresa.pt
newsletters.impresa.pt
nsm.impresa.pt
pagamento.impresa.pt
perfil.impresa.pt
player-zerozero.impresa.pt
player.impresa.pt
preview-exameinformatica.impresa.pt
preview-expresso.impresa.pt
preview-idp.impresa.pt
preview-rss.impresa.pt
repo.impresa.pt
rocket.impresa.pt
rss.impresa.pt
sites.impresa.pt
stage.graylog.impresa.pt
static.impresa.pt
subscribers.impresa.pt
upload.impresa.pt
videos.impresa.pt
voucher.impresa.pt
web.impresa.pt
www.impresa.pt

Other certificates including the domain name impresa.pt

(limited to 100 certificates)
bola.impresa.pt
impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
san-12-s51.tlsprovisioning.exacttarget.com
comercial.impresa.pt
*.aws.impresa.pt
www.impresa.pt
*.kube-worker.eu-west-1.impresa.pt
player.impresa.pt
drive.impresa.pt
ssl255780.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.ops.aws.impresa.pt
ssl255782.cloudflaressl.com
mkt.admatosinhos.pt
www.impresa.pt
sni.cloudflaressl.com
*.kube-worker.eu-west-1.impresa.pt
reclames.impresa.pt
impresa.pt
*.advnce.sic.pt
ssl453728.cloudflaressl.com
sso.remp.impresa.pt
*.advnce.sic.pt
*.app.bcbm.pt
images.impresa.pt
*.advnce.sic.pt
eu-west-1.impresa.pt
*.app.bcbm.pt
*.advnce.sic.pt
ocs-access.impresa.pt
www.impresa.pt
drive.impresa.pt
*.advnce.sic.pt
player.impresa.pt
postal.pt
*.expresso.pt
campanhas.cca.com.br
ssl255780.cloudflaressl.com
player.impresa.pt
impresa.pt
impresa.pt
*.advnce.sic.pt
*.aws.impresa.pt
sso.remp.aws.impresa.pt
*.advnce.sic.pt
ssl453730.cloudflaressl.com
*.impresa.pt
web2.aws.impresa.pt
backoffice.impresa.pt
*.advnce.sic.pt
postal.pt
www.impresa.pt
beam.remp.impresa.pt
statics.qas.impresa.pt
player.impresa.pt
*.advnce.sic.pt
crops.aws.impresa.pt
*.kube-worker.eu-west-1.impresa.pt
ssl255782.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
crops.aws.impresa.pt
*.advnce.sic.pt
cdn.impresa.pt
*.advnce.sic.pt
*.aws.impresa.pt
www.impresa.pt
impresa.pt
ssl453729.cloudflaressl.com
*.advnce.sic.pt
videos.impresa.pt
statics.impresa.pt
*.advnce.sic.pt
bola.impresa.pt
beam.remp.impresa.pt
newsletter.warepro.pt
www.impresa.pt
www.impresa.pt
ssl255782.cloudflaressl.com
comercial.impresa.pt
cdn.impresa.pt
sso.remp.impresa.pt
sdistribution.impresa.pt
reclames.impresa.pt
bl.impresa.pt
ssl453729.cloudflaressl.com
san-12-s51.tlsprovisioning.exacttarget.com
cdn.impresa.pt
*.advnce.sic.pt
*.impresa.pt
*.app.bcbm.pt
impresa.pt
*.kube-worker.eu-west-1.impresa.pt
comercial.impresa.pt
bola.impresa.pt
drive.impresa.pt

Certificate

The complete raw certificate details for impresa.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwhujkU0bCymLtIzyX9ZR
czq1PxVjVmQMb+nn0QEFs4/5lbiova+JkH9t7Us+ETunHQkJDi1bGOgvOgg2yO59
DziB9u8nc1F+Y2dLRB76WfVe6rdQyW3Ee8bYrA5u2GoyBypFch0g+TzwtO8qZyIH
CjXVlunugDm6gDolYJnMqf7AkRvluISuB09H9Bp32rXFMZq4VWlwGUIIhzI/s5z+
kbHEBXinz5WZWF1mG8/M7yof7622pzj9ca0qVurHL9/wCWvCww2R2esbf1KCVizy
rii7HEPbN/0UYZnclQIdTOfFOn3AcjvdfZcZU1vavNWZ1wvfsV2njGhC3Kix/238
0yUiQSa7vPv/xxznRuU69VzCY6p6rpIS23dYOcWKi1yJsMNEwKf3CuAneGhi0e6g
bVSSgSfxQb3k7JLlM73HeZChNHmof1Wd8lhbRxMKCXegrf9UdbskbFRZ9I7ii0mY
HSU51jcvJ5+gWVLOsbMaTjVmV345lWrE6cwKFFzsBsWtq0gBuOVormdiQyHivBRl
GX3yLQjxckIM2ERE7EUsG8gB/TQ8uBCfVeolBZ4lQutRbUsRw+beAl7crNX8XWOz
r6tJzTOau2UyK4diPWBNg/s/jcIZEUTG0ud6OKEdJGWhv9VNZymYv2YJb/pl7qmq
1rIVCP2H00AIOUSDw5PW0R8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362954578924265333464210358026858697449269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 13:01:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 13:01:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'impresa.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791891406308285605593079744172103648228874631242182608675427230354726402868225028582080876871188842655055596878189101315328572375313205032247304202376447407793812960335904500128516799195197107024761392466962663917357551523695134694787938145050777469213810454663916313923084372863974946237878307467720133391429666385352059432679885377566868105053725465456449082661484473757957359605358086453449875901005162978672677103836800645693909261854476368497195290591316910816609747772338647267645491972815834879595312213962210869276669114266621635366995235557337212571876982017246341903018578166314602748617899618683269871975308459413861309693590491642791784906482030122599833636012887783144650569831383081080537250567209949947569158970215162645102517384085077002450122187512775087927756243126616863116674644999164937108333126700343799307958782533859763225290650812199050364753005111327685526462344008882485608187107682747293020778538673348895693724829544958390798640250567050899662569087472540674565443597497134801830829888641714755696185041924768405929108740452668209265240351009311136505498079251353627812492847257392501732313784327799464441293970969340781524183644323405735182780546725957296646499861930731700663966068755033124155321405727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b66c3fb4e70faa4df88173c29bdf2c5a2f6d70e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.onprem.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atm.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacula.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docker-repo.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epg.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graylog.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpd.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iapi.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iapi.onprem.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-cdn.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingestlusa.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iweb.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsm.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagamento.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfil.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-zerozero.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-exameinformatica.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-expresso.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-idp.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-rss.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repo.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocket.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.graylog.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribers.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voucher.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impresa.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001630242af46000004030047304502204fe69da991778edc32109e38d46c7b6cbad5163443208cf65591506f83c8eebf022100c0ba2ae1584bfd44f9b56f06c3a2b31255b2a66f5f66b8e9b1da3518e7998c45007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001630242af3b000004030047304502201f3e866207c6e320d07c1e85baa5cad2fc7801609db241d216fc28e435c13619022100d6581eb548a438774e29bbc189082553271016a6bc2412e1d1961eb66e6b1df0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028279265f6eaac7e645d9549b358cb15461cfd2ec8a883fef837fb27307030cd295d3825b9aef871eabbe5c6c731c5f3483836244385959678d9edfce36a53dedbe68619baf3444adf138bff651e9ea22cb8e0696257f01e8790516c78a36a8fbdb076a86100efc5e2f166e0bb2b16ec09e8f34568dbc7827fee44dea5e9ecc91594aa51173ee5782a888a6777753944cbfe7cf60680bf5e6cbefa156194e0030aec53bee362ee7e816efdeb0942c1a59fb6a63dbd79b42628b1be50653f4f313d177de76616b9ddf288fda80dea6d662910dc0e9e8bed50d84dd8cbe1165ca986b79c4cdd2e00692682248d0aa10a100c855b28491fe4c9f0de2cd399fe66bd