expresso.pt
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b2:34:d0:9e:6d:31:f7:a6:84:a9:7d:3f:43:4f:f9:88:f6 was issued on by Let's Encrypt.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=expresso.pt
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b2:34:d0:9e:6d:31:f7:a6:84:a9:7d:3f:43:4f:f9:88:f6Serial Number (int): 321977322174007228553427560805373046262006
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bb:8e:4c:4d:b9:c6:78:41:44:50:3e:19:2d:1e:75:bd:00:d7:ca:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bd:45:c6:87:f2:d1:b6:e4:76:cf:0c:45:7e:fb:a4:40:50:1f:31:4a
Fingerprint (sha256): 3c:a2:7b:02:90:cf:97:9b:72:b9:76:6b:cd:d9:c8:f8:47:f7:b6:89:15:37:33:b0:e7:dc:84:ee:28:c1:fc:e1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate expresso.pt
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for expresso.pt
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aeiou.expresso.pt
*.amp.bcbm.pt
*.app.bcbm.pt
*.bcbm.pt
*.beta.expresso.pt
*.blitz.pt
*.boacamaboamesa.expresso.pt
*.boacamaboamesa.pt
*.expresso.pt
*.tribunaexpresso.pt
*.vidaextra.expresso.pt
app.leitor.expresso.pt
bcbm.pt
beta.app.leitor.expresso.pt
beta.leitor.expresso.pt
blitz.pt
boacamaboamesa.pt
carrodoano.pt
expresso.pt
offline.leitor.expresso.pt
preview-app.leitor.expresso.pt
tribunaexpresso.pt
www.tribuna.expresso.pt
*.amp.bcbm.pt
*.app.bcbm.pt
*.bcbm.pt
*.beta.expresso.pt
*.blitz.pt
*.boacamaboamesa.expresso.pt
*.boacamaboamesa.pt
*.expresso.pt
*.tribunaexpresso.pt
*.vidaextra.expresso.pt
app.leitor.expresso.pt
bcbm.pt
beta.app.leitor.expresso.pt
beta.leitor.expresso.pt
blitz.pt
boacamaboamesa.pt
carrodoano.pt
expresso.pt
offline.leitor.expresso.pt
preview-app.leitor.expresso.pt
tribunaexpresso.pt
www.tribuna.expresso.pt
Other certificates including the domain name expresso.pt
(limited to 100 certificates)
expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt
Certificate
The complete raw certificate details for expresso.pt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIDjCCBvagAwIBAgISA7I00J5tMfemhKl9P0NP+Yj2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTMwOTIyNDJaFw0y MDA2MTEwOTIyNDJaMBYxFDASBgNVBAMTC2V4cHJlc3NvLnB0MIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAmpZQ3KWcc1tdEk+rKjMMvTIu2hGfQV+gz5F9 gn6X+Y33UmAin07OJ1ZdtqkTrzDR9AW7YBLDxifKNSULGct11vfORUPri6QXLnqn wI9A/2NCM9TH0kT6WAjkCCsCz4Qe3uIezt8hpoa1E9rx3b2JeYBGW4b6PX/bhdzp yC6MlNjgAEPzmvJM2oC3ClTDAmTKtIeNMkZSuRx9cmDQcXitszPU1yCeP04PHnrj 5QJkozPNc6xZIWo8+ydLqHN/ZzypAWObgda2Q9Nq2BMXPQWdsE8UXsiemzjLracF XNtP7lJ6uA7O9O1NPkLUIRy+zAWUg+vVRI25fQVguJtbsYpkhZ908I+rxzRtPzyL O85umChd4vJw6YEa4w9JI7JZEElgW3MPve2NQkcQbuuZgIeY3X7tXxGtK8Xz+2Aq v/0O12i2KwqopCYKTArYnEXpVKIP5NPC4UiaJRuR7kEtosc+bQcii/ZW0kUwZt3g ryyQeFh3cTR3kFPA+4QJw5TKsbLi7MYf/lFrUwXFpLJYPMX3Enq2FxstUXjdLUv1 65BYoCIBBbHQhttNUsuqSkbzuGjLO91QlrLApzC4KU6KLwyhpJCs0tXXxP9cE2/G EOn3LpWK8l7NI1SP7udW4hxuH6mLPB26B6WKVY+q4OpGSwTjZ61XQSVMRCt1S4VJ 6wHWOt0CAwEAAaOCBCAwggQcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUu45MTbnG eEFEUD4ZLR51vQDXyo0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzCCAdUGA1UdEQSCAcwwggHIghMqLmFlaW91LmV4cHJl c3NvLnB0gg0qLmFtcC5iY2JtLnB0gg0qLmFwcC5iY2JtLnB0ggkqLmJjYm0ucHSC EiouYmV0YS5leHByZXNzby5wdIIKKi5ibGl0ei5wdIIcKi5ib2FjYW1hYm9hbWVz YS5leHByZXNzby5wdIITKi5ib2FjYW1hYm9hbWVzYS5wdIINKi5leHByZXNzby5w dIIUKi50cmlidW5hZXhwcmVzc28ucHSCFyoudmlkYWV4dHJhLmV4cHJlc3NvLnB0 ghZhcHAubGVpdG9yLmV4cHJlc3NvLnB0ggdiY2JtLnB0ghtiZXRhLmFwcC5sZWl0 b3IuZXhwcmVzc28ucHSCF2JldGEubGVpdG9yLmV4cHJlc3NvLnB0gghibGl0ei5w dIIRYm9hY2FtYWJvYW1lc2EucHSCDWNhcnJvZG9hbm8ucHSCC2V4cHJlc3NvLnB0 ghpvZmZsaW5lLmxlaXRvci5leHByZXNzby5wdIIecHJldmlldy1hcHAubGVpdG9y LmV4cHJlc3NvLnB0ghJ0cmlidW5hZXhwcmVzc28ucHSCF3d3dy50cmlidW5hLmV4 cHJlc3NvLnB0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3 2RMAAAFw02rk8AAABAMARzBFAiEAoevUGP/s/RQOeNYr3/6Z34KqUW5SqFZVqJjJ U/dAtGcCICZJXYboPfa3Kw6Rwq/76MeqjM8B/mSnu+6H2UJTFX6aAHUAsh4FzIui zYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFw02rlgAAABAMARjBEAiBOJ43z asEnYZCY+CEC3EKNsJ/EWts4Ewi4+dTYyvI3sgIgIb74h7DnQ2VmcBoRdCCh24BI FU0rSUtxBytwiMfRnwowDQYJKoZIhvcNAQELBQADggEBAFHzmIBNNjnDpHRakV0J fgDCd80X6VpKNTkpAFo8NO0KclLt0KIInDBujiK46nGIEGYPtUvAQAooTDWn+Ab4 ctThgtEMmx2jzF5MfYNrqc6U7anEQrAh7LzKFpFhXV0p+syyuBk/rCzJKKVddPQ4 fN/awPvonAikzfzDbOgaiBkgON7y7B2tG5jo1lWCMvcXuqixQyBEDN0uT68Klp2y 7ke6KGAdEXHq3uWhF0AEdT0lcVtY/t7dM2z4Efd1wSApkqeROY7Sw3MgoQzpFKT3 Pfu/MoMPnI129TILXyI9V9dd2YG9CJQ9qq9kzYK6RGHxEO41/4qVezSenZ/o+RPr akQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmpZQ3KWcc1tdEk+rKjMM vTIu2hGfQV+gz5F9gn6X+Y33UmAin07OJ1ZdtqkTrzDR9AW7YBLDxifKNSULGct1 1vfORUPri6QXLnqnwI9A/2NCM9TH0kT6WAjkCCsCz4Qe3uIezt8hpoa1E9rx3b2J eYBGW4b6PX/bhdzpyC6MlNjgAEPzmvJM2oC3ClTDAmTKtIeNMkZSuRx9cmDQcXit szPU1yCeP04PHnrj5QJkozPNc6xZIWo8+ydLqHN/ZzypAWObgda2Q9Nq2BMXPQWd sE8UXsiemzjLracFXNtP7lJ6uA7O9O1NPkLUIRy+zAWUg+vVRI25fQVguJtbsYpk hZ908I+rxzRtPzyLO85umChd4vJw6YEa4w9JI7JZEElgW3MPve2NQkcQbuuZgIeY 3X7tXxGtK8Xz+2Aqv/0O12i2KwqopCYKTArYnEXpVKIP5NPC4UiaJRuR7kEtosc+ bQcii/ZW0kUwZt3gryyQeFh3cTR3kFPA+4QJw5TKsbLi7MYf/lFrUwXFpLJYPMX3 Enq2FxstUXjdLUv165BYoCIBBbHQhttNUsuqSkbzuGjLO91QlrLApzC4KU6KLwyh pJCs0tXXxP9cE2/GEOn3LpWK8l7NI1SP7udW4hxuH6mLPB26B6WKVY+q4OpGSwTj Z61XQSVMRCt1S4VJ6wHWOt0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321977322174007228553427560805373046262006 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 09:22:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 09:22:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expresso.pt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630660636609238036498628776643618512767397010041213617734291354552036391645096617979819459452317714913480921051751679085267223232368570580514527735479999962894581116173989612859325811576226765863102322747228231924666720753739552818056390708458450210836204964687618825293415200230450204202377580422989689499937601382265560538916223439625266375992350198439377695614277857703328695866160988425430179457575862534591823949611471063864069023234340028260340996817828308039424903121893996905099957313168601385257456781227488356398881044944400611633634616202662262138440953163717954680788311406210277800054244052641581330344580708299592536101664952529069158816701856011855782852511445312117476993190877359857245002131033944386692764780912213552614012241098012097987479701962311640743593266783227195436544594702706385350060171042485149365334889084025618014355625317801107574340775198958656183059030229011257136955510071592147597629328551040519120561670562244265661672230875182369956196623805645379566992966281858483201799014698019906018271126863678545273825291807180189780881135472046616442127391809197509651552704494491775919834482145912945000388455602614822441970775303517696943237900011494178034958056730493526153111737950409937469792729821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bb8e4c4db9c6784144503e192d1e75bd00d7ca8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (460 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeiou.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amp.bcbm.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.bcbm.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbm.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blitz.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunaexpresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidaextra.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.leitor.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.app.leitor.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.leitor.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrodoano.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline.leitor.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-app.leitor.expresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribuna.expresso.pt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170d36ae4f00000040300473045022100a1ebd418ffecfd140e78d62bdffe99df82aa516e52a85655a898c953f740b467022026495d86e83df6b72b0e91c2affbe8c7aa8ccf01fe64a7bbee87d94253157e9a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d36ae580000004030046304402204e278df36ac127619098f82102dc428db09fc45adb381308b8f9d4d8caf237b2022021bef887b0e7436566701a117420a1db8048154d2b494b71072b7088c7d19f0a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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