DV SSL/TLS Certificate for epiwork.pt

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the epiwork.pt DV SSL/TLS Certificate

This certificate with serial number 06:9a:3c:9f:69:be:b0:fe:43:6f:74:a1:d7:2f:a5:39:fe:a6 for epiwork.pt was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for epiwork.pt provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:9a:3c:9f:69:be:b0:fe:43:6f:74:a1:d7:2f:a5:39:fe:a6
Serial Number (int): 575157781496094741251547156016789391539878
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 25:d4:de:c4:a3:64:07:0d:44:34:90:28:1e:62:6d:93:2e:c5:60:25
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 53:d1:33:f8:57:cd:d4:46:ad:2b:41:dc:c9:4a:b8:f4:88:b9:db:15
Fingerprint (SHA-256): b3:88:5f:11:23:e3:79:5d:02:4b:14:c9:70:a0:19:19:28:12:8e:dc:b1:d3:7c:a5:f4:f6:b3:ba:2a:2e:f0:41

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/39.crl

Check the revocation status for certificate epiwork.pt
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for epiwork.pt

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for epiwork.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1aol2Q1aboOg4aHPqbb
WvTnzNj2RbTe1vSnv/exCuT3LioasfnoQRmtuvZ+ROJOye/1FfQkbKB/TWAtXl0E
A2vyiuBiXpwMh+OVYNxk0WWqbZ7aepbw5H6vagAHgdipdT1n2u7mxWrGVtJLNQKZ
OZo9EH9QOU0jdKKgiva3rLYMlgwdShlIUyqxr+XUyGLOaB6NcVkPq3BpaChjeD7A
7l2N+Z8nYVMXxDa32dVPjeOxpxpPlkMfFqK/gzFeN1hYlVDCepxNEIkXaW4tq/Uh
FpI0VnICVbnZwwnzyOux+Mkr4imdQIipzlm+OTuH/1IekjH8lRWqCeVDp2AHxFEn
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 575157781496094741251547156016789391539878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 18:03:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-03 18:03:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epiwork.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20619576638106296063598436065819718210502475227652007679259544563359036277088549610450049778228878739177490899388853343460531801843535977162859419163231487808229146350407128308107942734040344769254916555013135999597451628639753295186814738847731618170543971254419713184488827436632090775109425034111810736343973664382309428850851562899109284589931751022367303417720843673877177728364470889812370281934405338887175362623049343294619749492746516611675759475216035429711906654243823142910412212423536218376003865187193035374154483313148747361400829017819357448163851956072335385123215366138843840604515470712996786939789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d4dec4a364070d443490281e626d932ec56025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epiwork.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiwork.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/39.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197417864a800000403004730450221009a3bc22139d16beefcd5fe3ff6b0a2a459719e52c19d8df5caa30df4c52e3dd4022079d13d61c241b72cf01f47e54695de8cd9bd058712f16cfea06e2b578ac0c2ba00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019741786c87000004030047304502205eb19c1c443ac401a8c8a55e46d7974b837c5cb29e571162c8cdfeb3c018159402210085d542cd0735e238d8944fec231227e8750123ac34f68f34295ad62ef8365829
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003dca53fe6bb15d22f602b3dd61da54815cede37493ddf5705b7acbb261abba290995ce75f4231bdad6a4287566a9a6164c8118b5743d420339536680298c617e496b7019393ccceab12ca1de30fd8b93d00ffa25d9eb7d232f6791958abbe7a822b8a53a6cd9bb42fb052f76dacf92351af4a1996028fbbe6107f2041527a8f26ce9215923fc5a4f2e5af12194b940d1eded55fd6ee7228cfbd3522011de3fd8603009cbab90c673539af4d8ad5ac4a34b4dcfe229f26cf16ad217d98764b408e91e574c2843fbe6a56683243cffbdc46da3de47a900aaec45bc61e1c42220a2631d8c3c24d72c8353093df9e6aaad244c89c7445919a7cc516bf60b8176ab3a