www.impresa.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:88:51:8b:17:60:64:64:7a:85:2c:b8:ea:30:d4:46:4a was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.impresa.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:88:51:8b:17:60:64:64:7a:85:2c:b8:ea:30:d4:46:4a
Serial Number (int): 297928269460400459983637436828211555354186
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:97:63:e0:34:42:8d:62:f2:da:05:ba:d6:33:6d:7a:e0:b1:3c:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:ac:97:97:18:14:fe:56:56:a1:44:21:d1:e1:75:90:c6:db:af:8c
Fingerprint (sha256): 1a:f1:e5:cb:04:0c:7b:9f:eb:b7:a1:43:6d:0b:1a:18:fe:24:be:60:01:2f:45:e6:77:9c:75:3b:35:4d:89:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.impresa.pt

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.impresa.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cronicasdofidalgo.pt
omirante.pt
smack.pt
www.cronicasdofidalgo.pt
www.impresa.pt
www.omirante.pt
www.smack.pt

Other certificates including the domain name impresa.pt

(limited to 100 certificates)
bola.impresa.pt
impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
san-12-s51.tlsprovisioning.exacttarget.com
comercial.impresa.pt
*.aws.impresa.pt
www.impresa.pt
*.kube-worker.eu-west-1.impresa.pt
player.impresa.pt
drive.impresa.pt
ssl255780.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.ops.aws.impresa.pt
ssl255782.cloudflaressl.com
mkt.admatosinhos.pt
www.impresa.pt
sni.cloudflaressl.com
*.kube-worker.eu-west-1.impresa.pt
reclames.impresa.pt
impresa.pt
*.advnce.sic.pt
ssl453728.cloudflaressl.com
sso.remp.impresa.pt
*.advnce.sic.pt
*.app.bcbm.pt
images.impresa.pt
*.advnce.sic.pt
eu-west-1.impresa.pt
*.app.bcbm.pt
*.advnce.sic.pt
ocs-access.impresa.pt
www.impresa.pt
drive.impresa.pt
*.advnce.sic.pt
player.impresa.pt
postal.pt
*.expresso.pt
campanhas.cca.com.br
ssl255780.cloudflaressl.com
player.impresa.pt
impresa.pt
impresa.pt
*.advnce.sic.pt
*.aws.impresa.pt
sso.remp.aws.impresa.pt
*.advnce.sic.pt
ssl453730.cloudflaressl.com
*.impresa.pt
web2.aws.impresa.pt
backoffice.impresa.pt
*.advnce.sic.pt
postal.pt
www.impresa.pt
beam.remp.impresa.pt
statics.qas.impresa.pt
player.impresa.pt
*.advnce.sic.pt
crops.aws.impresa.pt
*.kube-worker.eu-west-1.impresa.pt
ssl255782.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
crops.aws.impresa.pt
*.advnce.sic.pt
cdn.impresa.pt
*.advnce.sic.pt
*.aws.impresa.pt
www.impresa.pt
impresa.pt
ssl453729.cloudflaressl.com
*.advnce.sic.pt
videos.impresa.pt
statics.impresa.pt
*.advnce.sic.pt
bola.impresa.pt
beam.remp.impresa.pt
newsletter.warepro.pt
www.impresa.pt
www.impresa.pt
ssl255782.cloudflaressl.com
comercial.impresa.pt
cdn.impresa.pt
sso.remp.impresa.pt
sdistribution.impresa.pt
reclames.impresa.pt
bl.impresa.pt
ssl453729.cloudflaressl.com
san-12-s51.tlsprovisioning.exacttarget.com
cdn.impresa.pt
*.advnce.sic.pt
*.impresa.pt
*.app.bcbm.pt
impresa.pt
*.kube-worker.eu-west-1.impresa.pt
comercial.impresa.pt
bola.impresa.pt
drive.impresa.pt

Certificate

The complete raw certificate details for www.impresa.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297928269460400459983637436828211555354186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 15:48:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 15:48:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.impresa.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874708555356926407847222135829883397959805626484185309599721860445737947297796064906988805957272700454401793834255804942890993671386636036249990311982520397642578630218332291431355280642347330752733050153892205044935488626721340797186624935026525110325141212310061168512512610750177332691123627810623801262175660643335653256212935422186813803913400122519461636698145477163310166655608256547617520369720670637061658733791816728547871986682462469521646245300644257021888255977651425007977604719669577337283838238091300437943399967796832683295439655077468775722059991820029248626429279662217759224208047851887491935001940171065827631992103295104798662407178794095388666810359290357815474652483906338704327909094731725174225388669156848597500068452738080424998380004702044220893399713285244176378588230101824820972793337186067005956699926350388605620564493167086919887033440376954304654029439976122717329635328085348203779278180747926213637159976097487014251087015528507178637719663238970204394627672036907389196887074714965417640662602107445689149615206620690894313797856862354236156812313320385801333132297741437408915149869353393958947102155082784130616862077808060510167942561412187933130780379399397761513217453660571211040921452487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							889763e034428d62f2da05bad6336d7ae0b13c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronicasdofidalgo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omirante.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smack.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cronicasdofidalgo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omirante.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smack.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001705933eb2b000004030046304402202d6cf4b684357362a2c5a2330cdc291a9915b813749008e3e96dc9b38178f44002204d3745503c9bae3715f9f9e1a5d04cc6166ae9882031516da470bfe95e32894b00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705933eb2e0000040300463044022001bbc19a6d7d2fe30db46a9bce1e193f841b9f7a468af2a07d73bb54dc06025802201901aaeee8fa56bc7adb7890227924d0e946bba0c8fc0a782192b10d31605e3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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