expresso.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:67:a6:bc:2c:1a:d5:b6:55:ce:33:6e:aa:fa:26:8f:d9:3b was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expresso.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:a6:bc:2c:1a:d5:b6:55:ce:33:6e:aa:fa:26:8f:d9:3b
Serial Number (int): 383719856413559444428559752484817327872315
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:8e:03:29:54:4e:a8:76:13:09:e8:bb:a4:67:7f:bc:fa:b9:75:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:8c:cc:99:13:80:8d:82:aa:73:78:99:42:5a:26:32:6d:e9:87:29
Fingerprint (sha256): 09:6a:89:f5:0e:e9:8f:f6:90:39:88:b3:63:10:13:28:15:af:eb:5b:8f:ab:7d:98:4f:b8:21:77:22:1c:43:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate expresso.pt

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expresso.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aeiou.expresso.pt
*.app.bcbm.pt
*.app.leitor.expresso.pt
*.bcbm.pt
*.beta.bcbm.pt
*.beta.expresso.pt
*.blitz.pt
*.boacamaboamesa.expresso.pt
*.boacamaboamesa.pt
*.expresso.pt
*.leitor.expresso.pt
*.tribunaexpresso.pt
*.vidaextra.expresso.pt
bcbm.pt
blitz.pt
boacamaboamesa.pt
carrodoano.pt
expresso.pt
tribunaexpresso.pt
www.tribuna.expresso.pt

Other certificates including the domain name expresso.pt

(limited to 100 certificates)
expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt

Certificate

The complete raw certificate details for expresso.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383719856413559444428559752484817327872315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 12:33:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 12:33:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expresso.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825335126339597480525801268807642198798775906601392485602440527739621283091627645081037867341624534013851637584690693963329128616882678665493923994642805748991088679546273749471474640159795677516571156202742323856505760069865927553257785186734198867519598462822077742132268411996048378006562180898626551126953075461306489326037942754530904345448604857665628354312669286725889408972880643838157038611281516296009164611017027352678688724017286803281670340023891183515620214903880201206087907743716814931530088814215906945753310765886415455393021297606389080179322990853397031764882455514254345336046118797149457029665459552801274518804078548159183928499000163435907859362338706489600463012203702166190325369396805251767583111913381484606415967149222836355890557320408427556773817988526304612566383534365612535164376381425492024201284644614299393781079533438983959549460521968052258035651785960323129886739138667854706243299510639551813193072921538123598990216230450611549182609701426005615605653959099096423764388050580235767106132750409408268657957536949912551624690233684696951653153014963527612694764995943563071679830823136720813213350671418592516077566240546343719604272188953435324315852878036201539528986885739700528642009436899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							208e0329544ea8761309e8bba4677fbcfab97556
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeiou.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidaextra.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrodoano.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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