Serviço de Validação on-line do Cartão de Cidadão 000138 - EC do Cartão de Cidadão

- Cartão de Cidadão -

Issued by Cartão de Cidadão 003

About this certificate

This digital certificate with serial number 27:03:8c:f6:27:63:90:b5:d6:be:b8:a6:ac:33:7a:42 was issued on by SCEE - Sistema de Certificação Electrónica do Estado.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The commonName field of the subject MUST be less than 65 characters (RFC 5280: A.1)
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Cartão de Cidadão

Organization: Cartão de Cidadão
Organization unit: Serviços do Cartão de Cidadão
Organization unit: Validação on-line
Country: PT

SCEE - Sistema de Certificação Electrónica do Estado

Organization: SCEE - Sistema de Certificação Electrónica do Estado
Organization unit: ECEstado
Country: PT

This certificate will expire on

Certificate Details

Serial Number (hex): 27:03:8c:f6:27:63:90:b5:d6:be:b8:a6:ac:33:7a:42
Serial Number (int): 51858327765850095683302992401499650626
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ef:c3:d8:8e:4f:2e:3c:79:4c:85:5e:fe:05:52:ff:52:b1:ce:52:5d
AuthorityKeyId: 3c:df:ca:b3:5a:3c:39:1e:8c:e6:e2:39:82:70:0a:89:ac:fd:2e:f6

Fingerprint (sha1): 5e:ea:57:66:c6:19:09:f8:b2:d4:bd:22:16:aa:ca:28:52:92:2b:52
Fingerprint (sha256): 6f:ea:e3:c6:65:d8:6e:e9:08:96:c7:37:e0:ed:ef:a8:af:1a:91:06:96:11:07:47:78:8e:b6:c3:03:60:c1:07


Revocation information

OCSP Server: http://ocsp.root.cartaodecidadao.pt/publico/ocsp
CRL Distribution Point: http://pki.cartaodecidadao.pt/publico/lrc/cc_ec_cidadao_crl003_crl.crl

Check the revocation status for certificate Serviço de Validação on-line do Cartão de Cidadão 000138 - EC do Cartão de Cidadão

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Serviço de Validação on-line do Cartão de Cidadão 000138 - EC do Cartão de Cidadão

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment

Extended Key Usages

OCSP Signing

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Serviço de Validação on-line do Cartão de Cidadão 000138 - EC do Cartão de Cidadão in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKeO18L7tCjbNzF6CvRs
ztPKup6t9fBNzx2RByK1ybJPjTIbCcpMyf8fOLJWEi64eDYsLnO8Yo5O3QRDsxXz
hdyFvERWg1n+giadsfeSvhJeFf8fWtnTl+PQ5bo1ZrDD8zZZAE+6a8TXf68UsNr2
AKzKqk/ycBK0qoDAuFiUqcmfp6x471dBreyhTy+jYW3JmuXfidbe+9vBwlMkzmSv
g3M1fWIBel1jdK9sm6HKUKRCFx+fx2SIYEmXGlIAKINOw7oCjYTvN2kRlL+/Ei6z
sH3RhNWNPEJ3YwQOlur67ZKenDBaf6/4snd3Av2wU/GJRmMle2Ai8GTnB0qWuzzi
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51858327765850095683302992401499650626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SCEE - Sistema de Certificação Electrónica do Estado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ECEstado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cartão de Cidadão 003'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-19 09:24:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-10 18:15:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cartão de Cidadão'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Serviços do Cartão de Cidadão'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Validação on-line'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Serviço de Validação on-line do Cartão de Cidadão 000138 - EC do Cartão de Cidadão'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22300567593356925784833531927091128701663557960384820236589242663826335574770903689588072231468073848163127526587698284212563779706225903309330064122527513651963830891675718652670040330884477501553555155243035969541878517630998281766018549852891103994886206701164426733978527260518197337024761985042608497024688925544312433106129074207437425660901098114931826335643921319400611158332299883973820987038398990773243049783835944315783936970016234240221871600389204936414287524893182943347879715426059501485506309724430518220409464474628888199626225300464097800938009110096439453092863424753701120953463373245028530709021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3cdfcab35a3c391e8ce6e23982700a89acfd2ef6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.root.cartaodecidadao.pt/publico/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.620.1.1.1.2.4.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.cartaodecidadao.pt/publico/politicas/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.620.1.1.1.2.4.0.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.cartaodecidadao.pt/publico/politicas/cp.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.cartaodecidadao.pt/publico/lrc/cc_ec_cidadao_crl003_crl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efc3d88e4f2e3c794c855efe0552ff52b1ce525d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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