voluntarios.cibit.uc.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:1b:22:04:20:ed:a8:1b:ac:b4:e2:f8:b5:a6:09:68:88 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=voluntarios.cibit.uc.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:1b:22:04:20:ed:a8:1b:ac:b4:e2:f8:b5:a6:09:68:88
Serial Number (int): 296762289732776213845388694317665264167048
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:da:1e:ec:69:87:74:86:f1:3b:ff:9d:c3:0f:65:1f:7d:b6:62:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:c9:1d:55:b0:f6:35:9d:5e:5e:7f:d2:39:6e:57:12:1d:ea:68:1a
Fingerprint (sha256): 03:1c:c6:a1:91:11:11:67:e5:ad:2f:4e:f5:be:ef:e1:5f:3b:ea:d0:5b:75:25:50:86:1d:9d:ed:cf:7a:25:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate voluntarios.cibit.uc.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for voluntarios.cibit.uc.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

voluntarios.cibit.uc.pt

Other certificates including the domain name uc.pt

(limited to 100 certificates)
erp.uc.pt
da.ci.uc.pt
labder.dei.uc.pt
cdv.dei.uc.pt
ai4eu.dei.uc.pt
isise.dec.uc.pt
nectar.eq.uc.pt
web.fcdef.uc.pt
dec.uc.pt
vgi.uc.pt
lists.dei.uc.pt
anossaidentidade.uc.pt
intra.fct.uc.pt
ftp.eq.uc.pt
vgi.uc.pt
daephys.fis.uc.pt
voluntarios.cibit.uc.pt
agriao.ci.uc.pt
wwac2016.dec.uc.pt
pihackathon.dei.uc.pt
zabbix.dec.uc.pt
pesquisa.auc.uc.pt
www.uc.pt
ebefree.uc.pt
radius.deec.uc.pt
loja.fe.uc.pt
spes.fd.uc.pt
www.eq.uc.pt
pluris2018.dec.uc.pt
ldod.uc.pt
accept.uc.pt
cmuc.mat.uc.pt
epqu2011.isr.uc.pt
clubeprogramacao.dec.uc.pt
git-ci.dei.uc.pt
onda.dei.uc.pt
arqmultimedia.cd25a.uc.pt
devasses.dei.uc.pt
acustica2017.uc.pt
mooshak.dei.uc.pt
bon.deec.uc.pt
fisica.uc.pt
best.uc.pt
cibb.uc.pt
spin.fis.uc.pt
git.dei.uc.pt
*.isr.uc.pt
cdv.dei.uc.pt
belenus-dev.uc.pt
*.ces.uc.pt
oracle.dei.uc.pt
estagios.dei.uc.pt
comunidade.esms.dei.uc.pt
sasuc.go.uc.pt
vhosts.cnc.uc.pt
lct-svn.dei.uc.pt
dms.ci.uc.pt
inforestudante.uc.pt
cameras.dec.uc.pt
snipeit.deec.uc.pt
moodle.fe.uc.pt
smtp.deec.uc.pt
net.fpce.uc.pt
isise.dec.uc.pt
icm.uc.pt
mooshak2.dei.uc.pt
idp.uc.pt
suporte.uc.pt
daephys.fis.uc.pt
offline.uc.pt
www.cisuc.uc.pt
quark.fis.uc.pt
zabbix.dec.uc.pt
linkresearch.dei.uc.pt
justsideatlas.uc.pt
helpdesk.fpce.uc.pt
Tyre4BuildIns.dec.uc.pt
ldod.uc.pt
intra.fd.uc.pt
radius.fcdef.uc.pt
www.tyre4BuildIns.dec.uc.pt
visteam.isr.uc.pt
www.eq.uc.pt
syn2psy.cnc.uc.pt
www.itecons.uc.pt
fs2.uc.pt
da.ci.uc.pt
clubeprogramacao.dec.uc.pt
git.deec.uc.pt
alpha.sib.uc.pt
falcon.mat.uc.pt
syn2psy.cnc.uc.pt
bee.fe.uc.pt
wotca16.mat.uc.pt
fisica.uc.pt
box.deec.uc.pt
visteam.isr.uc.pt
ftp.eq.uc.pt
admin.estagios.dei.uc.pt
mail.dei.uc.pt

Certificate

The complete raw certificate details for voluntarios.cibit.uc.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296762289732776213845388694317665264167048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 11:30:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 11:30:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'voluntarios.cibit.uc.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937984525569238466311079327278034488971834451675061244363062968402896868118977440176963728917839769887652245335162208175863333382146590517613945519372251149045583833713418246624669250818242888092961484199558244644232402637404120799363526572904024068038201987557953101415847633662217076308977160869445351327970532617203341209314401162029321908948882533597082808106220446426549422474313363078570027913433847967599484444689649962487056335522412286282005038123749631263364758058891891712381205670372455929041608298583240201137617528567220287353790629245683747829901581689090232098860560223999930492665853432230261540553905540906980833633163419976345202745070804350053526589035534489190164545790960757627770689098448019760243080664140094625987143039059265571249191682539361768238792751550293340903837263801031030465101045644260859901927853549207687315200044147710172328961333540043331008246902574783606847130578518587735271421218966249185703777642163039002197946620561454660528240426607743409935117313081494339635868612255333181284857383453005680247946919843672470149130225325481937728290072880043771229206956922162022646915640589982759001037756435409301657250367618660940093013411727379332732055764778302518569914256296411481038741184239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1da1eec69877486f13bff9dc30f651f7db662be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voluntarios.cibit.uc.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e45d88c430000040300483046022100af3d35cab1363f61aad6510b368fb96efbe7423c3eed10ba5f0ea49513545b5d022100d0d398104a3831648467cd57d6d11f16ec40c162bd6c9e343f86924c2a5e646e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e45d88c7800000403004730450220089982e3f5061f4717f277344c63efe937255203950bed6cac90d3b0d01d1fba02210098bd3f11fadcd2c401baddf528b3d0af964a8d6d587fcb038aeb33a18f0fee53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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