tierone.pt

Issued by R3

About this certificate

This digital certificate with serial number 03:35:d6:4e:9f:29:72:cb:8f:3a:b8:68:36:be:e4:71:00:17 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tierone.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:d6:4e:9f:29:72:cb:8f:3a:b8:68:36:be:e4:71:00:17
Serial Number (int): 279656686260530425239930049285129201844247
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:a9:70:10:1a:a8:fb:93:74:eb:be:08:24:51:e0:8c:06:78:75:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:d1:b6:4b:20:be:8d:48:39:bc:75:04:b2:30:b8:3b:e6:3a:b6:07
Fingerprint (sha256): 6b:1d:9c:7a:4f:98:d7:63:42:bf:e8:e0:a8:97:7d:20:91:3f:66:dd:82:ed:b4:17:1d:22:4d:19:f3:c9:3a:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tierone.pt

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tierone.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artifacts.tierone.pt
lab.tierone.pt
scm.tierone.pt
tierone.pt
www.tierone.pt

Other certificates including the domain name tierone.pt

(limited to 100 certificates)
tierone.pt
www.tierone.pt
www.tierone.pt
redmine.tierone.pt
tierone.pt
tierone.pt
webmail.tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
webmail.tierone.pt
mx.tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
mx.tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
webmail.tierone.pt
www.tierone.pt
tierone.pt
www.tierone.pt
lab.tierone.pt
tierone.pt
mx.tierone.pt
tierone.pt
scm.tierone.pt
tierone.pt
webmail.tierone.pt
mx.tierone.pt

Certificate

The complete raw certificate details for tierone.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279656686260530425239930049285129201844247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-30 23:24:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-30 23:24:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tierone.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 609547016324180326656037595659129445720156089218766161839193375212722659969003209943172735357546689840628650150727393559220955557294621086109435480735166285752288679664988729963648638757570901486569563658506485720968289165042632414341229186921155374051546521271205287112941729881078990505914235027410606479167289703200064899962881204490135405703670168947405482737639825321538751477918878692614565353845684794512923481093815524249460954104202153492742849181638416293042092198798670200793474758911178562264442492605719762550288062855356620671447149740283892243044761478227002781727054449462780110040588056738087120563688963859552028018684166833384033351259993653206351382898241733395829767389308417083297982491239399578841352411205940064558919493334426653154630747401459732368362969682838465756375288545109318686211247233172657325962253712702265831970096656137910592312117580494140403534759959258083044636755202982442377892008539173288037333255606660418474334105674630817168760563485715441371185353819255114841554550246323713538308744738262771486614123451829908748128474618402948602409892897002328106553699043807437793418505331978008986053806241592404908997433903459567531567337358661740197742101924049690921167394593933285185656906501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69a970101aa8fb9374ebbe082451e08c067875c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifacts.tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm.tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tierone.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000176b62ee42d0000040300473045022021b59d0ba5d64065c5904d0393a9bfd8883ea753cce24d165ea5007b14e5839c022100d082690596afcd69a84782f7e9bfaee91938edda3d0d88b31f8b400c5000fe4e007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176b62ee443000004030046304402207eb3db49b675479400753facaf1e9f227447bfa94c35993f7b9493e4433bf8cc02206bd65261278dfa9d4f4f59f53a1c2f603c86104b961f11bb1ae24c957ba67c1e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f22a0722797c11a81c9a5a45d25417a0e315908ad54c81b1e66e8cb35a6f54385bf55d1835fd8d3398962fd632893b5f19398fbbd5f2c4ca666e527c932208604354f2823fc4013afba18a84893c284d32df2fde871934f698ec133ee35eb60e815e9b78dd514ded3b48a4b957b37b0073650daa7ab8ccc6da88f7989eaf5a9498e7bc040f7a4ed8a1ab512db2ad5a69cefb05eba885cba16e8b14021e73f56845aac270bf80b0126680e683fcce5a8b3a07ec2fc78115884f0c51dad97879deb1a258fb12830bb7680510c67d2b8c521dbbbaa42b0d1073de5a66d08360f45fd4f531ab611c491ecae37407bd272c2a0160576e63645b82d219a10cf59bc85