erasmusmais.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:01:d5:1e:00:a3:d8:85:8d:06:49:2f:ae:e7:d5:4d:05:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=erasmusmais.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:d5:1e:00:a3:d8:85:8d:06:49:2f:ae:e7:d5:4d:05:51
Serial Number (int): 349072707438951068880766473919626105128273
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:ed:fa:60:b8:c9:71:0d:89:1b:31:d5:51:82:2b:49:ed:a4:53:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:a7:96:e9:27:a1:bb:ec:5a:a9:65:f0:b3:79:9b:fd:67:cc:d1:b7
Fingerprint (sha256): 57:ea:a0:c2:3e:bf:51:aa:57:c6:76:09:27:3d:a2:98:9d:fc:2b:c8:f6:e7:43:7d:e9:8e:7e:20:c3:4f:ab:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate erasmusmais.pt

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erasmusmais.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erasmusmais.pt
www.erasmusmais.pt

Other certificates including the domain name erasmusmais.pt

(limited to 100 certificates)
rolemodels.erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
www.erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
erasmusmais.pt
www.erasmusmais.pt
www.erasmusmais.pt
tcas.erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
www.erasmusmais.pt
pages.falconjobs.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
www.erasmusmais.pt
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
mkt.gourmetzinho.com.br
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
tcas.erasmusmais.pt
tcas.erasmusmais.pt
www.erasmusmais.pt
lp.erasmusmais.pt
www.erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
rolemodels.erasmusmais.pt
tcas.erasmusmais.pt
erasmusmais.pt

Certificate

The complete raw certificate details for erasmusmais.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Cl7uHi1nkz2pS/pM918
0JV27UKRu/i5GfulYP3Kj4Hok5SJgJra2oZC744wGovo9K8ygUiRRpIvMlsk0BJo
1QSuxFRWRajMNiS0VmTYgAWSnZyaf1a8EzfgfMwYE4XYXj87OdjXjp13iTKITuuK
WwEPtMudCtlEHl26ALVHkw9DNj7QVRnLrQ1L0QpOrK3W+mGoOT90QS9GlVZvbiw4
A8h0j/AncbPHbBM4EzP4kWa+RlU00MRQDbD3CnWpPYW39Y+QGZ3qx38TxnlnU3uO
McBTaBuAnmL7ZuMHUJvJiLCGSzCKImxbRjVb4jc0c9vF5NLR1fNWqS7KhiqEg1Vw
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349072707438951068880766473919626105128273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 13:25:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 13:25:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erasmusmais.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30822602581254620944361936129915585095404714940634523071324556314660346564867281510663867280368091519715488563343017531540000281387495370294864597542882479726095001841228358407160895646996260885511030328895567978765161898390262256812176186473000441644200060216982892579591434177902589334126172329655671271148761172608290161800505190424801214003216819155555228821435947487880252136239900982991367249681200936031918876673963567314993358046706646582827564898411854606051338327172039247110663267432746383998798109122190083830342544432005642860674406870683530864963117358942456884361339261793112684959337296201518754918573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30edfa60b8c9710d891b31d551822b49eda453ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmusmais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasmusmais.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c209e7daa000004030046304402200a60861a835941be4c311fa030c080b39462ecdc1693491cb04df9265608cb1f0220562c9e24252fcfa5532ed583884472116e305ed6aa50b339950c86cf1bae397400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c209e7dfd0000040300483046022100beceb24cefb7d73e0e42454eac095c2ba3deea4245a0c4c46cea0cbe13618f85022100c839add40e63c5c5d05cf06137d64921bbf5f7bdf0ba81774d3f11b2dd95efdd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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