www.yvesrocher.pt
- YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A. -
Issued by MULTICERT Certification Authority 002
About this certificate
This digital certificate with serial number 33:a7:50:92:90:25:63:14 was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A.
Organization:
YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A.
Organization unit: Certificado SSL/TLS
Organization unit: Certificado SSL/TLS
Locality:
Gemunde
Country: PT
Country: PT
MULTICERT - Serviços de Certificação Electrónica S.A.
Organization:
MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Accredited Certification Authority
Organization unit: Accredited Certification Authority
Country:
PT
This certificate has expire since
Certificate Details
Serial Number (hex): 33:a7:50:92:90:25:63:14Serial Number (int): 3722032207458820884
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 7f:07:85:0f:d9:14:9d:6c:b6:c2:a1:a5:fe:36:bb:35:eb:8d:7b:da
AuthorityKeyId: 2c:f4:ce:00:8e:78:00:5a:aa:71:0f:5b:8e:5c:de:8d:a3:67:e4:4f
Fingerprint (sha1): 81:f4:98:5b:f4:04:a3:d6:0f:f1:9c:cb:02:ea:0d:84:87:81:7c:23
Fingerprint (sha256): 2c:fb:05:37:4b:0b:6e:a9:39:0d:87:0b:0a:fc:b3:cb:5c:55:76:5f:ce:d8:4d:4a:71:b6:e2:27:60:3e:00:03
Issuing Certificate URL: http://ec2pki.multicert.com/cert/mca_002.cer
Revocation information
OCSP Server: http://ocsp.multicert.com/ocspCRL Distribution Point: http://ec2pki.multicert.com/crl/crl_mca002.crl
Check the revocation status for certificate www.yvesrocher.pt
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.yvesrocher.pt
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.yvesrocher.pt
Other certificates including the domain name yvesrocher.pt
(limited to 100 certificates)
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
Certificate
The complete raw certificate details for www.yvesrocher.pt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmzCCBYOgAwIBAgIIM6dQkpAlYxQwDQYJKoZIhvcNAQELBQAwga4xCzAJBgNV BAYTAlBUMUIwQAYDVQQKDDlNVUxUSUNFUlQgLSBTZXJ2acOnb3MgZGUgQ2VydGlm aWNhw6fDo28gRWxlY3Ryw7NuaWNhIFMuQS4xKzApBgNVBAsMIkFjY3JlZGl0ZWQg Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkxLjAsBgNVBAMMJU1VTFRJQ0VSVCBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eSAwMDIwHhcNMTYwMzIzMTc1NDE2WhcNMTgwODIw MjI1OTAwWjCBjTELMAkGA1UEBhMCUFQxEDAOBgNVBAcMB0dlbXVuZGUxMjAwBgNV BAoMKVlWRVMgUk9DSEVSIChQT1JUVUdBTCkgLSBDT1NNw4lUSUNPUyBTLkEuMRww GgYDVQQLDBNDZXJ0aWZpY2FkbyBTU0wvVExTMRowGAYDVQQDDBF3d3cueXZlc3Jv Y2hlci5wdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFywUoad2Pw 8h7KquEAvSjzhahcD+nsbC4v4jVKalsQTKVl6SqIM8nr/RxI/xDRrNL1eZb8F+VB JiLXGKygnpfzroG7o8VFNu8LRkR47eWdhs4JMPeOg9De0Cx6HCVcx8e5NjrMk1cq zsBv/pCGkgI0jcXA6VpmKvYMWjaJEQuIP/5qywdjfaqZ4jfq3sJuk+5siuM6Esn5 8tRqFaV7VybQLjhSkGfCjrayaXeT4K5Wee9k3vAaiFI1dzkC/5D9qVY/xwHjT8JG 3nL0SawNoHe2QLE6BccftByDocPoCP/0CEsEDhnzRzzB7L7k9bvp6UgUUPUUpVbM zAuY/tU4G9sCAwEAAaOCAtowggLWMHQGCCsGAQUFBwEBBGgwZjA4BggrBgEFBQcw AoYsaHR0cDovL2VjMnBraS5tdWx0aWNlcnQuY29tL2NlcnQvbWNhXzAwMi5jZXIw KgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLm11bHRpY2VydC5jb20vb2NzcDAdBgNV HQ4EFgQUfweFD9kUnWy2wqGl/ja7NeuNe9owDAYDVR0TAQH/BAIwADAfBgNVHSME GDAWgBQs9M4AjngAWqpxD1uOXN6No2fkTzBFBgNVHS4EPjA8MDqgOKA2hjRodHRw Oi8vZWMycGtpLm11bHRpY2VydC5jb20vY3JsL2NybF9tY2EwMDJfZGVsdGEuY3Js MIIBOQYDVR0gBIIBMDCCASwwSgYOKwYBBAGBw24BAQEBAAcwODA2BggrBgEFBQcC ARYqaHR0cDovL2VjMnBraS5tdWx0aWNlcnQuY29tL3BvbC9pbmRleC5odG1sMIHT Bg8rBgEEAYHDbgEBAQEAAQUwgb8wgbwGCCsGAQUFBwICMIGvDIGsQ2VydGlmaWNh ZG8gZW1pdGlkbyBkZSBhY29yZG8gY29tIGEgUG9sw610aWNhIGRlIENlcnRpZmlj YWRvcyBlbSAvQ2VydGlmaWNhdGUgaXNzdWVkIGluIGFjY29yZGFuY2Ugd2l0aCB0 aGUgQ2VydGlmaWNhdGUgUG9saWN5IGluIGh0dHA6Ly9lYzJwa2kubXVsdGljZXJ0 LmNvbS9wb2wvaW5kZXguaHRtbDAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYu aHR0cDovL2VjMnBraS5tdWx0aWNlcnQuY29tL2NybC9jcmxfbWNhMDAyLmNybDAO BgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBwG A1UdEQQVMBOCEXd3dy55dmVzcm9jaGVyLnB0MA0GCSqGSIb3DQEBCwUAA4ICAQC4 MO98SBR+4tUokE0zQK+d5GmZWfq+EnRZ6TvGLf0iDa+jtF/HbOt+RVoJCwvQqPPa FObKxw1k6IQal98KfK2Wfor+I525m8gi8ScMLmAWEv1HlmK8T1Ja3J9IPWLOvzmR q6XHppHMGni7+GLOAIUESUgOzODO+mdNaubx46K1SjiNYDk1BjL/1wfinx0U720u zDKvtBdGapJvRYCfa49Nea4nRu6Y376GNq0+XPxUarynmClEjBhEo2Uz7Vx0y19L AsnHAWFz3WfE5kvLvp/OJcD4ZIPSvhmAW0G+OhGRruMY3A/Za4T8Ra2QEUQGkhc5 b204TjeUyUVmwGnh08GyKkxKVeYwMCfHupqRhEYmtywe4k8wh8/Db1V23/yr6gyL szVuwbb5peui+if7Z988U33YB7aDcE7sxMECxR/wxMiVMnJ1kUMhJitCrxWmApEw zbWBRqZ1suZGtxACQgARuwqJvi2GF8bnUGr1DOpOLfTfNXlvOu/dXEVutd5A0Dbl eBss/WpTYWi931lgimsXtxNFBQJb5D+QJ/nRbldLBqc8xJPZJEX3EbgrjecmiPr2 0buEfwScUQaveZob/j60vLH5GnBweQFHgwuMh1WnlUIPddM6CQnEE3eYihiYoYaP Ij5exUAgfImcKIjX8jIm55pEXHh5qSFd0DULFLVL4g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXLBShp3Y/DyHsqq4QC9 KPOFqFwP6exsLi/iNUpqWxBMpWXpKogzyev9HEj/ENGs0vV5lvwX5UEmItcYrKCe l/OugbujxUU27wtGRHjt5Z2Gzgkw946D0N7QLHocJVzHx7k2OsyTVyrOwG/+kIaS AjSNxcDpWmYq9gxaNokRC4g//mrLB2N9qpniN+rewm6T7myK4zoSyfny1GoVpXtX JtAuOFKQZ8KOtrJpd5PgrlZ572Te8BqIUjV3OQL/kP2pVj/HAeNPwkbecvRJrA2g d7ZAsToFxx+0HIOhw+gI//QISwQOGfNHPMHsvuT1u+npSBRQ9RSlVszMC5j+1Tgb 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3722032207458820884 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Accredited Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT Certification Authority 002' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 17:54:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 22:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemunde' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado SSL/TLS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.yvesrocher.pt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24420580676239972797720356253668978033160940739857285276923940803591039496826363586963055827983504917596970220277649750562931408930512611697432988945591534490003721533788318165101533330086974277384142964625719063871141149387080115226209798632410024623712172554802104792350695892974879967889839136312848873875407089892980674851022280460934124746071653944126139881606469870909716762233424975727389618379383769698608593997599539411306086770895974132646207417722696833801103285876728663728826725719981404935428219137772315070340784763518523996739549548021629124719365074946428225476596158152056648903078430010172646104027 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ec2pki.multicert.com/cert/mca_002.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7f07850fd9149d6cb6c2a1a5fe36bb35eb8d7bda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2cf4ce008e78005aaa710f5b8e5cde8da367e44f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ec2pki.multicert.com/crl/crl_mca002_delta.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ec2pki.multicert.com/pol/index.html' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado emitido de acordo com a Política de Certificados em /Certificate issued in accordance with the Certificate Policy in http://ec2pki.multicert.com/pol/index.html' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ec2pki.multicert.com/crl/crl_mca002.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.pt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00b830ef7c48147ee2d528904d3340af9de4699959fabe127459e93bc62dfd220dafa3b45fc76ceb7e455a090b0bd0a8f3da14e6cac70d64e8841a97df0a7cad967e8afe239db99bc822f1270c2e601612fd479662bc4f525adc9f483d62cebf3991aba5c7a691cc1a78bbf862ce00850449480ecce0cefa674d6ae6f1e3a2b54a388d6039350632ffd707e29f1d14ef6d2ecc32afb417466a926f45809f6b8f4d79ae2746ee98dfbe8636ad3e5cfc546abca79829448c1844a36533ed5c74cb5f4b02c9c7016173dd67c4e64bcbbe9fce25c0f86483d2be19805b41be3a1191aee318dc0fd96b84fc45ad901144069217396f6d384e3794c94566c069e1d3c1b22a4c4a55e6303027c7ba9a91844626b72c1ee24f3087cfc36f5576dffcabea0c8bb3356ec1b6f9a5eba2fa27fb67df3c537dd807b683704eecc4c102c51ff0c4c895327275914321262b42af15a6029130cdb58146a675b2e646b71002420011bb0a89be2d8617c6e7506af50cea4e2df4df35796f3aefdd5c456eb5de40d036e5781b2cfd6a536168bddf59608a6b17b7134505025be43f9027f9d16e574b06a73cc493d92445f711b82b8de72688faf6d1bb847f049c5106af799a1bfe3eb4bcb1f91a7070790147830b8c8755a795420f75d33a0909c41377988a1898a1868f223e5ec540207c899c2888d7f23226e79a445c7879a9215dd0350b14b54be2