www.yvesrocher.pt

- YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A. -

Issued by MULTICERT Certification Authority 002

About this certificate

This digital certificate with serial number 33:a7:50:92:90:25:63:14 was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A.

Organization: YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A.
Organization unit: Certificado SSL/TLS
Locality: Gemunde
Country: PT

MULTICERT - Serviços de Certificação Electrónica S.A.

Organization: MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Accredited Certification Authority
Country: PT

This certificate has expire since

Certificate Details

Serial Number (hex): 33:a7:50:92:90:25:63:14
Serial Number (int): 3722032207458820884
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 7f:07:85:0f:d9:14:9d:6c:b6:c2:a1:a5:fe:36:bb:35:eb:8d:7b:da
AuthorityKeyId: 2c:f4:ce:00:8e:78:00:5a:aa:71:0f:5b:8e:5c:de:8d:a3:67:e4:4f

Fingerprint (sha1): 81:f4:98:5b:f4:04:a3:d6:0f:f1:9c:cb:02:ea:0d:84:87:81:7c:23
Fingerprint (sha256): 2c:fb:05:37:4b:0b:6e:a9:39:0d:87:0b:0a:fc:b3:cb:5c:55:76:5f:ce:d8:4d:4a:71:b6:e2:27:60:3e:00:03

Issuing Certificate URL: http://ec2pki.multicert.com/cert/mca_002.cer

Revocation information

OCSP Server: http://ocsp.multicert.com/ocsp
CRL Distribution Point: http://ec2pki.multicert.com/crl/crl_mca002.crl

Check the revocation status for certificate www.yvesrocher.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yvesrocher.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yvesrocher.pt

Other certificates including the domain name yvesrocher.pt

(limited to 100 certificates)
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io

Certificate

The complete raw certificate details for www.yvesrocher.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXLBShp3Y/DyHsqq4QC9
KPOFqFwP6exsLi/iNUpqWxBMpWXpKogzyev9HEj/ENGs0vV5lvwX5UEmItcYrKCe
l/OugbujxUU27wtGRHjt5Z2Gzgkw946D0N7QLHocJVzHx7k2OsyTVyrOwG/+kIaS
AjSNxcDpWmYq9gxaNokRC4g//mrLB2N9qpniN+rewm6T7myK4zoSyfny1GoVpXtX
JtAuOFKQZ8KOtrJpd5PgrlZ572Te8BqIUjV3OQL/kP2pVj/HAeNPwkbecvRJrA2g
d7ZAsToFxx+0HIOhw+gI//QISwQOGfNHPMHsvuT1u+npSBRQ9RSlVszMC5j+1Tgb
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3722032207458820884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Accredited Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT Certification Authority 002'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 17:54:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gemunde'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'YVES ROCHER (PORTUGAL) - COSMÉTICOS S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado SSL/TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.yvesrocher.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24420580676239972797720356253668978033160940739857285276923940803591039496826363586963055827983504917596970220277649750562931408930512611697432988945591534490003721533788318165101533330086974277384142964625719063871141149387080115226209798632410024623712172554802104792350695892974879967889839136312848873875407089892980674851022280460934124746071653944126139881606469870909716762233424975727389618379383769698608593997599539411306086770895974132646207417722696833801103285876728663728826725719981404935428219137772315070340784763518523996739549548021629124719365074946428225476596158152056648903078430010172646104027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ec2pki.multicert.com/cert/mca_002.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f07850fd9149d6cb6c2a1a5fe36bb35eb8d7bda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2cf4ce008e78005aaa710f5b8e5cde8da367e44f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ec2pki.multicert.com/crl/crl_mca002_delta.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ec2pki.multicert.com/pol/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado emitido de acordo com a Política de Certificados em /Certificate issued in accordance with the Certificate Policy in http://ec2pki.multicert.com/pol/index.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ec2pki.multicert.com/crl/crl_mca002.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.pt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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