expresso.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:34:d0:9e:6d:31:f7:a6:84:a9:7d:3f:43:4f:f9:88:f6 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expresso.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:34:d0:9e:6d:31:f7:a6:84:a9:7d:3f:43:4f:f9:88:f6
Serial Number (int): 321977322174007228553427560805373046262006
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:8e:4c:4d:b9:c6:78:41:44:50:3e:19:2d:1e:75:bd:00:d7:ca:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:45:c6:87:f2:d1:b6:e4:76:cf:0c:45:7e:fb:a4:40:50:1f:31:4a
Fingerprint (sha256): 3c:a2:7b:02:90:cf:97:9b:72:b9:76:6b:cd:d9:c8:f8:47:f7:b6:89:15:37:33:b0:e7:dc:84:ee:28:c1:fc:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate expresso.pt

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expresso.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aeiou.expresso.pt
*.amp.bcbm.pt
*.app.bcbm.pt
*.bcbm.pt
*.beta.expresso.pt
*.blitz.pt
*.boacamaboamesa.expresso.pt
*.boacamaboamesa.pt
*.expresso.pt
*.tribunaexpresso.pt
*.vidaextra.expresso.pt
app.leitor.expresso.pt
bcbm.pt
beta.app.leitor.expresso.pt
beta.leitor.expresso.pt
blitz.pt
boacamaboamesa.pt
carrodoano.pt
expresso.pt
offline.leitor.expresso.pt
preview-app.leitor.expresso.pt
tribunaexpresso.pt
www.tribuna.expresso.pt

Other certificates including the domain name expresso.pt

(limited to 100 certificates)
expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt

Certificate

The complete raw certificate details for expresso.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321977322174007228553427560805373046262006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 09:22:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 09:22:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expresso.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630660636609238036498628776643618512767397010041213617734291354552036391645096617979819459452317714913480921051751679085267223232368570580514527735479999962894581116173989612859325811576226765863102322747228231924666720753739552818056390708458450210836204964687618825293415200230450204202377580422989689499937601382265560538916223439625266375992350198439377695614277857703328695866160988425430179457575862534591823949611471063864069023234340028260340996817828308039424903121893996905099957313168601385257456781227488356398881044944400611633634616202662262138440953163717954680788311406210277800054244052641581330344580708299592536101664952529069158816701856011855782852511445312117476993190877359857245002131033944386692764780912213552614012241098012097987479701962311640743593266783227195436544594702706385350060171042485149365334889084025618014355625317801107574340775198958656183059030229011257136955510071592147597629328551040519120561670562244265661672230875182369956196623805645379566992966281858483201799014698019906018271126863678545273825291807180189780881135472046616442127391809197509651552704494491775919834482145912945000388455602614822441970775303517696943237900011494178034958056730493526153111737950409937469792729821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb8e4c4db9c6784144503e192d1e75bd00d7ca8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (460 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeiou.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amp.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidaextra.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrodoano.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170d36ae4f00000040300473045022100a1ebd418ffecfd140e78d62bdffe99df82aa516e52a85655a898c953f740b467022026495d86e83df6b72b0e91c2affbe8c7aa8ccf01fe64a7bbee87d94253157e9a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d36ae580000004030046304402204e278df36ac127619098f82102dc428db09fc45adb381308b8f9d4d8caf237b2022021bef887b0e7436566701a117420a1db8048154d2b494b71072b7088c7d19f0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051f398804d3639c3a4745a915d097e00c277cd17e95a4a353929005a3c34ed0a7252edd0a2089c306e8e22b8ea718810660fb54bc0400a284c35a7f806f872d4e182d10c9b1da3cc5e4c7d836ba9ce94eda9c442b021ecbcca1691615d5d29faccb2b8193fac2cc928a55d74f4387cdfdac0fbe89c08a4cdfcc36ce81a88192038def2ec1dad1b98e8d6558232f717baa8b14320440cdd2e4faf0a969db2ee47ba28601d1171eadee5a1174004753d25715b58fededd336cf811f775c1202992a791398ed2c37320a10ce914a4f73dfbbf32830f9c8d76f5320b5f223d57d75dd981bd08943daaaf64cd82ba4461f110ee35ff8a957b349e9d9fe8f913eb6a44