expresso.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:10:36:e8:ba:13:a9:84:a9:ff:56:8a:06:86:1e:99:e5:29 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expresso.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:36:e8:ba:13:a9:84:a9:ff:56:8a:06:86:1e:99:e5:29
Serial Number (int): 353966648296505552253696025249147214488873
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:85:8b:73:0a:09:8c:5c:e0:e9:81:d9:07:32:74:af:a0:6d:9e:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:e1:1e:7f:c7:df:b7:e0:cc:1d:7c:e8:88:df:81:6b:e9:cb:85:39
Fingerprint (sha256): 46:f1:31:d8:cb:6e:e5:2e:34:ff:c0:d0:25:ed:22:cf:45:67:58:91:12:6c:a1:1d:2b:8b:ea:5d:2d:f8:3b:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate expresso.pt

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expresso.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aeiou.expresso.pt
*.beta.expresso.pt
*.expresso.pt
app.leitor.expresso.pt
bcbm.pt
beta.app.leitor.expresso.pt
beta.leitor.expresso.pt
blitz.pt
boacamaboamesa.pt
carrodoano.pt
expresso.pt
offline.leitor.expresso.pt
preview-app.leitor.expresso.pt
tribunaexpresso.pt
www.bcbm.pt
www.tribuna.expresso.pt
www.tribunaexpresso.pt
www.vidaextra.expresso.pt

Other certificates including the domain name expresso.pt

(limited to 100 certificates)
expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt

Certificate

The complete raw certificate details for expresso.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHtzCCBp+gAwIBAgISBBA26LoTqYSp/1aKBoYemeUpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjgxNjQyNDFaFw0x
OTA2MjYxNjQyNDFaMBYxFDASBgNVBAMTC2V4cHJlc3NvLnB0MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAxNTmLBMGDjy0i92aJh2fOHKAZJO5Ut4pvmN4
DRbgsfHWHLXId9S0iinc6MVBc1pJz/mixLWIQ9NB13r9ZArd0yT3BZ23WIIyxQma
ISdMsc25dwFOUUzLGImFyqxz/WkDct+BJD/nzC7aSBpy6gsCOrOC49mbBXr+veGm
ScJdaVuZDdlDK25sqYxNop9DOEGEnvlDPWWWMouSMHuRdcSy5N6DiCUEsOaFAOqU
twI9A3uovrvR3umgYbWeAfNK5NMlNHUvurTMLyhMLz0bxyt00zm1wIMlDzH5Dsko
1M9/ahMZfmzipIfnkZWz+dINcV71bLcfpXnm0BraeUEqruv9vmu8GV+alOyC3BaO
NFU1xNxWQZlvx9zuwTHyG8AhOQ2m6r6c/Cxs3HkO6Amn3AUWixn+ecVTNRbr0qzg
jo9JjPCfRRwuWobSammwmg1rwL5Us6va2PYxUKr4Dp1SN9WL2JIeb0dMMMs7YjAP
uFfdMLf0pWoNai0Nhp8NFnQsj5vIFQ+GO7xBmlyfOES8niKSRpfie8MUzCGwl7CG
MdwMfAo8fAnFuUoAvoCFd5wNutMhjhc9KXSlVqm3hKlxHJUmpHaXZYsb8wPq3sX3
xLmAzmXEPIPOOa65Zalsf+03lsurC6ykhrRZr9YCtDJYvwxhN73mnoHXbsq8FFjM
8QMW9O0CAwEAAaOCA8kwggPFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUcYWLcwoJ
jFzg6YHZBzJ0r6BtnpcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCAX4GA1UdEQSCAXUwggFxghMqLmFlaW91LmV4cHJl
c3NvLnB0ghIqLmJldGEuZXhwcmVzc28ucHSCDSouZXhwcmVzc28ucHSCFmFwcC5s
ZWl0b3IuZXhwcmVzc28ucHSCB2JjYm0ucHSCG2JldGEuYXBwLmxlaXRvci5leHBy
ZXNzby5wdIIXYmV0YS5sZWl0b3IuZXhwcmVzc28ucHSCCGJsaXR6LnB0ghFib2Fj
YW1hYm9hbWVzYS5wdIINY2Fycm9kb2Fuby5wdIILZXhwcmVzc28ucHSCGm9mZmxp
bmUubGVpdG9yLmV4cHJlc3NvLnB0gh5wcmV2aWV3LWFwcC5sZWl0b3IuZXhwcmVz
c28ucHSCEnRyaWJ1bmFleHByZXNzby5wdIILd3d3LmJjYm0ucHSCF3d3dy50cmli
dW5hLmV4cHJlc3NvLnB0ghZ3d3cudHJpYnVuYWV4cHJlc3NvLnB0ghl3d3cudmlk
YWV4dHJhLmV4cHJlc3NvLnB0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFpxWWQiwAABAMARjBEAiB6l4itiTn/evHZitT9vyY9SfrD
bAa4K0p4TN8N4CobYwIgFb7PYmT5AYZMmWnzF61oA2jm38pQyKjsNq5MGhhWBH0A
dgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWnFZZBeAAAEAwBH
MEUCIQCQEesH9ZNk207v/HaBknmQM87Tc0vmIpCQa1W2Xtk4ZgIgOrOAvMYIhD/W
TePB7uj7DEybnm4UKKBCYNXtQMUDLSswDQYJKoZIhvcNAQELBQADggEBAB/pMv7x
DqW1Kq4tRqfXjxp3DbhDvc6lTTVOiksrehEP/Q/P+WphgUVvll+BNuZ9c4XMzfDz
ZhvpCLUsAG7dWPueuXi9gC5sMHkjDoitEb4oXYWkxjWBIMQI98GhWEK6rHXATqrR
4FMgmGqGnHHqGMKBI/Q2BbuvkC8UPsjGzoq8WZeqlDIEy2RFjRlTl29qEnacoTQH
+1ydn9SUKIAiQcthb+oECTFvqM5IWQxUEsESYl/HVE7r1pxvpeCLKFCi5vKQYgGk
rmoICrEXLqkxm5J38y5FRdXe+kfGjAQy7jEHPtt07k6GsRiDTV3630OqpJlB3ce/
Yy9bONgpDw06fpo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353966648296505552253696025249147214488873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 16:42:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 16:42:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expresso.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803003020891641662331013676649462245677895372084107463436492153599533922074506441268620796188599869699762754983859070983174803171867452567002637443181573034470842084555615044170363196128004027725000333766000279574330590514386386217333517420229814659949389632273029810107546297272741007573427025870121767113366811567045327250955697909315515852533608455921288097765610969745803189406008419857506683531086035642495447384132374820316811551953810398609267037498753767527264349721096959023801779262041669433736223311537277365575635463903054690755970124185099685277857442650222281612208158957244762603806291914844253124494564692226016829794922884384668049157848972048820047517377837518432909273033406047358800666399856743506028036431222653121417310401450519128891779729092998222856197391176006357827844332291194188818501883286779177300867857113424895492725663694660052899318949977824068386423796901502696633832672491250812802920999713775484390085676292617721751932626928020024345631350092415419699497818450858772106690235395765118220104004078807835515397290815103213117638597451277378376453434337242996762489647991083639168941528315110232776307781650294333370914451328936747639093854845821187045044509769697961457878968304656093482591909101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71858b730a098c5ce0e981d9073274afa06d9e97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeiou.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrodoano.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaextra.expresso.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169c565908b000004030046304402207a9788ad8939ff7af1d98ad4fdbf263d49fac36c06b82b4a784cdf0de02a1b63022015becf6264f901864c9969f317ad680368e6dfca50c8a8ec36ae4c1a1856047d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c565905e00000403004730450221009011eb07f59364db4eeffc768192799033ced3734be62290906b55b65ed9386602203ab380bcc608843fd64de3c1eee8fb0c4c9b9e6e1428a04260d5ed40c5032d2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001fe932fef10ea5b52aae2d46a7d78f1a770db843bdcea54d354e8a4b2b7a110ffd0fcff96a6181456f965f8136e67d7385cccdf0f3661be908b52c006edd58fb9eb978bd802e6c3079230e88ad11be285d85a4c6358120c408f7c1a15842baac75c04eaad1e05320986a869c71ea18c28123f43605bbaf902f143ec8c6ce8abc5997aa943204cb64458d1953976f6a12769ca13407fb5c9d9fd49428802241cb616fea0409316fa8ce48590c5412c112625fc7544eebd69c6fa5e08b2850a2e6f2906201a4ae6a080ab1172ea9319b9277f32e4545d5defa47c68c0432ee31073edb74ee4e86b118834d5dfadf43aaa49941ddc7bf632f5b38d8290f0d3a7e9a