sme.gov.ao

Issued by R3

About this certificate

This digital certificate with serial number 03:42:4f:4e:ae:5a:8d:08:2e:e0:2d:97:29:22:b7:5e:5e:30 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sme.gov.ao

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:4f:4e:ae:5a:8d:08:2e:e0:2d:97:29:22:b7:5e:5e:30
Serial Number (int): 283900911559198105539798873480731677318704
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:35:35:fe:ec:8e:9e:64:e7:bb:1b:3c:27:3e:df:72:a0:d7:c9:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:e6:dd:59:25:db:93:4d:43:43:67:1b:2e:c5:f9:e5:0d:f7:46:91
Fingerprint (sha256): 07:95:1f:0d:96:c7:fa:9f:2d:db:11:92:8c:19:6a:8e:6b:9e:a4:99:78:5e:cc:40:ac:33:9d:68:3e:81:7c:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sme.gov.ao

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sme.gov.ao

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sme.gov.ao
www.sme.gov.ao

Other certificates including the domain name gov.ao

(limited to 100 certificates)
incubadora.maptss.gov.ao
teste.scm.gov.ao
www.isutic.gov.ao
iemp.gov.ao
cefojor.gov.ao
particular-test.equadros.gov.ao
siasp.minpet.gov.ao
teste.doc.gov.ao
irdp.gov.ao
api.sgal.gov.ao
sisac.ciam.gov.ao
sic.gov.ao
sniea.pna.gov.ao
teste.dns.gov.ao
inadec.gov.ao
governo.gov.ao
www.cgpn.gov.ao
sisac.ciam.gov.ao
desenvolvimento.gov.ao
*.oavpr.gov.ao
sisac.ciam.gov.ao
livrobranco.gov.ao
*.minjusdh.gov.ao
*.ine.gov.ao
gov.ao
*.minjusdh.gov.ao
vicepresidente.gov.ao
ircop.gov.ao
cert.minpet.gov.ao
sme.gov.ao
lisboa.mirex.gov.ao
angola.gov.ao
notification.masterdata.gov.ao
webmail.inacom.gov.ao
sicoex.minco.gov.ao
pna.gov.ao
webmail.oapr.gov.ao
angola.gov.ao
sigof.gov.ao
plataformacipra.gov.ao
belas.luanda.gov.ao
sicoex.minco.gov.ao
*.oapr.gov.ao
gueadmin.gov.ao
*.ine.gov.ao
ciam.gov.ao
gp.gov.ao
docente.gov.ao
www.isutic.gov.ao
bombeirosdeangola.gov.ao
ciam.gov.ao
fgc.gv.ao
dikota.desenvolvimento.gov.ao
impa.gov.ao
gov.ao
www.isutic.gov.ao
sigas.masfamu.gov.ao
teste.dns.gov.ao
*.oapr.gov.ao
ebumba.gov.ao
www.egti.gov.ao
inis.gov.ao
govcloud.gov.ao
anrm.ao
mail.imprensanacional.gov.ao
mail1.minint.gov.ao
armed.gov.ao
*.maptss.gov.ao
cicloformativo.inefop.gov.ao
*.mintrans.gov.ao
infosi.gov.ao
dtser.pn.gov.ao
sepe.gov.ao
*.gov.ao
*.angola.gov.ao
scm.gov.ao
inls.gov.ao
www.candidaturas.mep.gov.ao
www.idia-gov-ao.mlstp-psd.org
www.isutic.gov.ao
gue.gov.ao
*.ine.gov.ao
sepeadmin.gov.ao
embaixada.brazzaville.gov.ao
iaca.gov.ao
gw1.api.gov.ao
minea.gov.ao
www.infosi.gov.ao
remagest.gov.ao
*.egti.gov.ao
candidatura.med.gov.ao
form.desenvolvimento.gov.ao
*.oapr.gov.ao
candidatura.dev.med.gov.ao
impa.gov.ao
dev.sri.enapp.gov.ao
ciam.gov.ao
admin.ebumba.gov.ao
minjusdh.gov.ao
aspect.minsa.gov.ao

Certificate

The complete raw certificate details for sme.gov.ao in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FZcoRXAdUZLo83oQKFS
Eyag7WT/5digSLP3yoxAlNeUMLbDX3LXMPaLwEk8dfZgdwKiDGOIfvNfFLeCugvH
YvHIvGJhO6dKIcPET+T7KfI2mH0x2ZXML3us5hsYDtjCBiITg33A09ccrznEKVI1
a3uU45ROX3AfmnqQgby2IKFxFOCb1hIK+2vLRHwbVCREMh2y36qZLuGmF9Ryz2hs
J4oCdanQJA+/lh9BLgvietg48J7JyOzXj5yCzvVxjLZLPFGSwrJILIjsgc1/d4Ia
lhnAM0awqVW/ftSDaW96i7KrBhY5RAJNRSYuFlkShJdDFV7LTTagHyQhvtcw66Ch
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283900911559198105539798873480731677318704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 10:04:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 10:04:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sme.gov.ao'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30339779798911989469121175813832097665039264690051927966740354472771175346835154209570400459729228748956045446667065214639125845795517975504804506321921880170323472693626092479669508805837764643031179638787009070328711496188380223885209183307260001633071555363270817357136321089062419453101076499469648926065866039606977393523098694190334856764971830731907947348057590188005543621886436828889508857790042806798827460268774918472173357583155343396401731720135276630118849684701238510795368927510512452906737362470205059654675477285996476537319950653153136265371855022089555348942685575239762193867516721290115547177317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							523535feec8e9e64e7bb1b3c273edf72a0d7c91a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme.gov.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sme.gov.ao'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189f8de215700000403004730450221009056b7e54775cb789d5c7225031860b0313954f22c01a48038077317137eb49d02200fcbd71914308eecd338fc1b2e084cc7ff951c3385d09c04a4b161cd0f630cf0007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189f8de2189000004030046304402204cc1adbf3c40b0fa26a93a5d2e1bf138ffc45dd3a1bebac8f0b08742da0b48ef02200b3c19cb0ba93a93fb25bb02f3f1782ca4b7942d440cffe0499ea91875db5746
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a79d5377a2cb063b3596993bfdaf0c840919faa87579705f5d23e0f42acfb9c1e0f159716a146caa151b449ec0f3c99ec82b928cd24e19d0f0bfec5b1f06afcf53a5b8b74e864c383e11a4ffbbca936b04140f52152489c87fcc35add8af29c607283bc7f7f0f30b749cd0abdd7078b5dc340ea6f525ff93f865ca624e03482f2bad96aedb41497994305b776096109ca2b6199069537c5910a7c1af28d01b9d88ffcb65c24d01bf8d029951d15ad51a51cda546290da89991374d488018bdb70f38cd7f7c4b24f6ebfbfa66e31f820fe9f12450a9a228c82c84de6f428fc8d7a5247e02795211fab3753a7f7a3efbd6d9328b59a4516541a8fe64ddb64b9cc