wincar.em.co.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:cf:05:fb:25:b4:cd:0d:a6:6e:38:53:64:db:f9:0a:87:d7 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wincar.em.co.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cf:05:fb:25:b4:cd:0d:a6:6e:38:53:64:db:f9:0a:87:d7
Serial Number (int): 418895543850939350861187875823595050141655
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 58:0d:24:80:21:c8:9a:86:d6:98:d6:c3:07:f2:4d:f1:f4:2d:fb:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:6a:11:7f:a1:27:a9:94:2b:9e:2f:eb:74:a3:1b:a8:a6:e4:9a:22
Fingerprint (sha256): 00:fe:1e:cb:2a:02:6a:34:4a:e4:56:ce:80:18:db:c2:50:44:1e:ec:7d:a9:97:f4:e7:46:48:02:4c:15:d4:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wincar.em.co.pt

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wincar.em.co.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wincar.com.pt
*.wincar.em.co.pt
*.wincar.pt
*.wincarsoftware.com
wincar.com.pt
wincar.em.co.pt
wincar.pt
wincarsoftware.com

Other certificates including the domain name co.pt

(limited to 100 certificates)
sni28288.cloudflaressl.com
sni70437.cloudflaressl.com
sni42445.cloudflaressl.com
sni28500.cloudflaressl.com
ffvp.org
sni28500.cloudflaressl.com
sni28288.cloudflaressl.com
sni60168.cloudflaressl.com
sni70437.cloudflaressl.com
wincar.em.co.pt
sni70437.cloudflaressl.com
bo.placaapi.com
sni70437.cloudflaressl.com
sni105285.cloudflaressl.com
dolmen.co.pt
dentists-for-france.em.co.pt
sni105285.cloudflaressl.com
azimute.co.pt
sni105285.cloudflaressl.com
sni70437.cloudflaressl.com
sni28500.cloudflaressl.com
sni70437.cloudflaressl.com
azimute.co.pt
arturdomingos.org
sni70081.cloudflaressl.com
sni40947.cloudflaressl.com
sni70437.cloudflaressl.com
degier1935.com
mail.dessau.pt
sni28500.cloudflaressl.com
sni28500.cloudflaressl.com
sni105285.cloudflaressl.com
sni31971.cloudflaressl.com
sni70437.cloudflaressl.com
zorg.pt
multicom.co.pt
sni28500.cloudflaressl.com
sni28288.cloudflaressl.com
algarve-autos.co.pt
sni175022.cloudflaressl.com
lisboa.co.pt
base.co.pt
bsanimal.com
sni28500.cloudflaressl.com
sni70437.cloudflaressl.com
www.placaapi.com.bo
sni40947.cloudflaressl.com
www.marjos.pt
algarve-autos.co.pt
sni147271.cloudflaressl.com
ugo.pt
sni105285.cloudflaressl.com
sni70437.cloudflaressl.com
campanhas.risema.com
sni175022.cloudflaressl.com
sni175022.cloudflaressl.com
sni70437.cloudflaressl.com
sni70437.cloudflaressl.com
sni70437.cloudflaressl.com
sni70437.cloudflaressl.com
sni52388.cloudflaressl.com
sni105285.cloudflaressl.com
sni133806.cloudflaressl.com
ugo.pt
dolmen.co.pt
moverna.co.pt
sni66910.cloudflaressl.com
degier1935.com
mail02.dessau.pt
*.memoir.em.co.pt
sni105285.cloudflaressl.com
sni70437.cloudflaressl.com
sni29012.cloudflaressl.com
sni70437.cloudflaressl.com
sni28500.cloudflaressl.com
sni42445.cloudflaressl.com
joomla.velocidadeonline.co.pt
webmail.alfacoop.co.pt
sni165465.cloudflaressl.com
webmail.auditor.pt
sni70437.cloudflaressl.com
sni28500.cloudflaressl.com
sni28288.cloudflaressl.com
sni28288.cloudflaressl.com
sni70437.cloudflaressl.com
elefante.em.co.pt
sni31971.cloudflaressl.com
sni70437.cloudflaressl.com
vibe.cloud.co.mz
sni66910.cloudflaressl.com
sni28288.cloudflaressl.com
sni28288.cloudflaressl.com
sni28288.cloudflaressl.com
sni40947.cloudflaressl.com
sni70437.cloudflaressl.com
sni66910.cloudflaressl.com
avast.co.pt
ae.carregistrationapi.com
napoleao.co.pt
sni40947.cloudflaressl.com

Certificate

The complete raw certificate details for wincar.em.co.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYU2HWWxzav1CfL2f0AA
flXd03d8ELVgFmBEsn+DWT8YfDpXDV5bZoHJnIkUvM5LKLxTDlQnFYXofvOYcfVZ
KNffBe2Z3N7nkYgjRHjkqQfHYArvuxBulC5ctFuz/4hVeeTwUtIAqEdu+6lkIRUV
XLkwf63kFtL4aZNLyyhQVHE65x0lOyWX/t+wzX4iS8iOjwe3b1gnK9Hdsb1Vp0fA
NEf6yvFjY0Dy/+r+BeHv6z7C9DofOS8T0AvKu7GKebZ55imgEMDD2iBlnmvYK9Qf
KBB71qNBc1oTnLw7kxdeuBLGwhU5oVGshYyjQXGpv6kNINY+Kf4+x5CgDUG5vron
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418895543850939350861187875823595050141655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 06:53:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 06:53:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wincar.em.co.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21399962521995138669584174503074318315053469627938260305557349822591659210330353771566791195439177301690954484183086014175206884998931883117987615574282936824986038944490970446144540079605254577533431182124742988395919651360014202996266623387833070898267818408059894678305402184888169175452624582652188235074342246615578174623478765589108715376087332976969822667137866791663002796114514756500691758687174910301410829534284564409422049946755879430788769274160773647685970198865279819479236551641826957650518590754669804704478608904262309002153984975320294336796611010269504629242372020875088096476314440427763297560451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							580d248021c89a86d698d6c307f24df1f42dfb1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wincar.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wincar.em.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wincar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wincarsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wincar.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wincar.em.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wincar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wincarsoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0f183e840000040300473045022100d3c476c23695de0deab9081b63d08b7095208ac30cddcae2afc2787fe38dcb9b0220645cf7bc2cfb3f34b41c30885a255ff874ef490a4540a77e49f0d9c7cc5f6c1e00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f0f183eaf00000403004630440220468486d87893c746759ca0c819b035d4cd30b5e82fad1eeefdb2f04dd2802a4f0220317909600438b9f29b15d2a31cc318bff8d3fe15809f8626642f14af9c3ef7b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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