staff.bicimax.pt

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:d1:c4:2d:5d:65:02:5e:7a:63:e1:bf:cd:16:e8:ac:46:d6 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staff.bicimax.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d1:c4:2d:5d:65:02:5e:7a:63:e1:bf:cd:16:e8:ac:46:d6
Serial Number (int): 158492064853035733829365562020515485075158
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 22:2a:4a:ac:81:ad:fd:9a:cc:b4:5a:9b:4f:55:eb:cb:ff:46:d3:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:66:41:ee:cb:cb:cc:fe:b4:df:85:ae:17:20:02:51:ef:03:d6:6b
Fingerprint (sha256): 2e:4e:05:8e:d5:3d:72:25:bc:18:d1:05:6a:d6:6f:ef:e7:b6:f9:f4:f2:ac:9e:d2:7d:35:77:19:49:e5:05:5b

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate staff.bicimax.pt

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staff.bicimax.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staff.bicimax.es
b2b.bicimax.pt
b2b.bicimax.es
bicimax.es
www.bicimax.es
staff.bicimax.pt

Other certificates including the domain name bicimax.pt

(limited to 100 certificates)
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
staff.bicimax.es
sni227180.cloudflaressl.com
staff.bicimax.es
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
staff.bicimax.pt
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni31183.cloudflaressl.com
unms.bicimax.pt
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
unms.bicimax.pt
b2b.bicimax.pt
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni31183.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
staff.bicimax.pt
sni227180.cloudflaressl.com
bicimax.pt
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
b2b.bicimax.pt
sni227180.cloudflaressl.com
sni.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
staff.bicimax.pt
sni227180.cloudflaressl.com
staff.bicimax.pt
sni31183.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com
sni227180.cloudflaressl.com

Certificate

The complete raw certificate details for staff.bicimax.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158492064853035733829365562020515485075158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-14 15:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-13 15:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staff.bicimax.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657948615006403234291692795186993770267057475038383642113205443358892385972193665353118560943280866118867861861617039857711292582472420885417547117824013627506867745642696403018899496407266542381235881996747855681940049085204702824940822348488434698730940677149343704120381933311355811032291131008928702658342665237440330915089363482347928046492899721647249183716208273142025503727975892395054080540043521449664760343217085641560538207464245049938566916351205772253983040694572797505275234497383426664709305386738709739303994925267845555099657276064403701795965756096210020924499971629065410875582808601061292738628086621385128603504192629380240862898460803342987905542024361998649382551178708126981796659505713546353798637540932534868674343979773050242542111210775261061274760556778761566484615859920382722176499214657331255307736424620657094153555714764406880107148582425395686257993404320777921539392322180636507975146591577712868189435908373381826752790984866336740313930587674102830119262471980481446336827241754412504447478817886075845274755951379652784780095150103522682809043035197080103938836531650069975847481113787636314383682824963751101234672647321219114372114460307640386043111930624951487263763561989898888964973400779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							222a4aac81adfd9accb45a9b4f55ebcbff46d312
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.bicimax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.bicimax.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.bicimax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicimax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicimax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.bicimax.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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