expresso.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:61:56:95:f2:7d:fd:aa:53:7c:b0:f0:45:3b:b7:12:c2:13 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expresso.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:56:95:f2:7d:fd:aa:53:7c:b0:f0:45:3b:b7:12:c2:13
Serial Number (int): 381571625496566592013947297075912602993171
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:ec:7d:d4:72:16:72:4a:d9:f6:92:9d:c1:25:27:fd:d0:a9:5f:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:95:61:98:16:d9:8a:20:0c:24:67:7c:ab:03:c8:8f:df:a9:cf:9e
Fingerprint (sha256): 0f:e2:39:4a:77:76:99:f9:ce:3e:a9:30:af:5b:13:5a:7f:a0:1a:c3:4c:ef:2d:a6:14:81:61:63:76:75:b8:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate expresso.pt

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expresso.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.expresso.pt
app.leitor.expresso.pt
bcbm.pt
beta.app.leitor.expresso.pt
beta.leitor.expresso.pt
blitz.pt
boacamaboamesa.pt
carrodoano.pt
expresso.pt
offline.leitor.expresso.pt
preview-app.leitor.expresso.pt
tribunaexpresso.pt
www.bcbm.pt
www.tribuna.expresso.pt
www.tribunaexpresso.pt
www.vidaextra.expresso.pt

Other certificates including the domain name expresso.pt

(limited to 100 certificates)
expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt

Certificate

The complete raw certificate details for expresso.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381571625496566592013947297075912602993171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 13:52:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 13:52:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expresso.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774457058745973963988422729508882512870490367590074388335463744970926172054535323189247992596839799425756318021628711138836478315388582998202692009633324821799200250420473683637467606746072747728146520231606545084695508083872979836224382993386646141806100013132719727386139832479065269559303466555546943654037339264941774205429479749153518655704608043554677772235844697826830049557089983896654874652400413654332118983863732675448226052943393623989848789010114022621592479015577739209016538196722376171642722076739735125504960691373511353676917000919392693888856173695759308530760376093184084954223500836675873830031639313614831822209322956112401273685485238219157029321846031385414043219824273759382974242059815371198219777043298576692436531955275419340070858838901858673604923417630846662108668709771549846386645255537742158994848262847118092367354856572121608491350826510612389746774801190266481262029652479254187405945946262356168260511842862966238459715890055132825193907581198522068181833209067793992651393589456185806587667978880580274672274167865739198057457972823522262151092920526799409459396179289626795565883019908511542502997055236969504469574865867827230149539918784502153187254735157032223130371620684400502079139182133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efec7dd47216724ad9f6929dc12527fdd0a95ffd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrodoano.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaextra.expresso.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001689f3f89260000040300473045022100ebaf746a84f172be35dd37023ccf4cfd4d097c7b63828f67dfedb9480430a91e0220707545216dc449066be751a7b33c6275b96148718c57d0a5fbd5e40ed9ba395000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001689f3f895d0000040300483046022100a44929923761c1df7b3be36b8bb8d84d25ed89dc1588dd860299787527a06d6902210083da52c64f3474b625b6f02d43f98d239b9b1c1da7060beb80e2500352cc5e43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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