lusomelt.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:12:47:03:b2:e5:47:b1:c6:d0:fa:85:b4:41:f7:bc:a5:5b was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lusomelt.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:47:03:b2:e5:47:b1:c6:d0:fa:85:b4:41:f7:bc:a5:5b
Serial Number (int): 354668620724643530580510191305845190206811
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:fc:2c:53:fa:47:3f:70:f8:b8:63:70:a5:44:35:79:ab:56:46:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:e3:da:5e:82:c7:67:0f:86:bc:2c:80:2f:f5:db:87:9f:e8:89:91
Fingerprint (sha256): 70:31:74:38:6f:66:db:62:31:7e:2e:2d:7c:22:1c:6c:86:0d:ee:65:35:80:cb:c8:1f:e0:52:56:6c:e3:8f:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lusomelt.pt

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lusomelt.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.lusomelt.pt
cpanel.troisgest.pt
lusomelt.pt
lusomelt.tdoispontos.pt
mail.lusomelt.pt
mail.troisgest.pt
troisgest.pt
troisgest.tdoispontos.pt
webdisk.lusomelt.pt
webdisk.troisgest.pt
webmail.lusomelt.pt
webmail.troisgest.pt
www.lusomelt.pt
www.lusomelt.tdoispontos.pt
www.troisgest.pt
www.troisgest.tdoispontos.pt

Other certificates including the domain name lusomelt.pt

(limited to 100 certificates)
carbol.pt
lusomelt.pt
lusomelt.pt
lusomelt.pt
lusomelt.pt
lusomelt.pt
lusomelt.pt
carbol.pt
lusomelt.pt
lusomelt.pt
carbol.pt
trateco.pt
www.lusomelt.pt
lusomelt.pt
mail.lusomelt.pt
lusomelt.pt
www.lusomelt.pt
lusomelt.pt
carbol.pt

Certificate

The complete raw certificate details for lusomelt.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylRvQvMwrGNx0skmyzUT
ZUFp8xwLszZ4zykir4z8+M8AM+TlL206bXJzDgTX8x59i4MKvXl46IBg5VPtb2F/
ueHKy51E1T5WFj7Fgs9Nnb3fX8XV1lJJpylWhHxte2aZ5TTYDHoD/WzyP5FInTgQ
j8cqonL9iUCW0B1BlaET0DHeqU3rsqtt79i2FJ/cR13kuXiNwUlgT1deZREwv2u5
y1t9ucBtAuaJayB9LU9kS1hD4RVHMTOKDul3CTgK1yEK09k6egnlJUSFI9BISFRq
rvuhOnGLwq81bvWdHbLCPxyIFeQ+wi8Gr+sYXgzjMXocM+NGvFCYGnjAeWyyjHPu
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354668620724643530580510191305845190206811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 01:20:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 01:20:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lusomelt.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25541773863765451269113960420720951129614882925552580128272250871411024970375847976651679768010710314310401315540703734682962652120176727034041742228516511160266548826849287528088601378433079842868979481248008501893926550993139875027132448404869277677394344644069384266828715813884289351628840716478734216274163995750085525371373524790675465687242214525317658950230587314416732545180537261686681313662599976994464096304212559402334727212324110108095277488540134409869536234570710539240434011341377571348406324481301509886936284480508681059643417383161956999443131200293493626930043177764704408311206886211701196451503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21fc2c53fa473f70f8b86370a5443579ab564620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (340 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lusomelt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.troisgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusomelt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusomelt.tdoispontos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lusomelt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.troisgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troisgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troisgest.tdoispontos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lusomelt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.troisgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lusomelt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.troisgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusomelt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusomelt.tdoispontos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troisgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troisgest.tdoispontos.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016540890c51000004030047304502206c91b80ff9f1ba56a37742f3a9f3f83747e8fec7cf96cc9fc678f6f14e397c4f0221008c824f27e3e57e2ad1e9fad5d5a432fbb1228409dfbf9a7d610a5da2387bd83c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016540890e2e0000040300473045022100c0aa67e121d747645f6ea6f021b7c486ba9180f768080ca562e45104023c02bd02202d6c41de636f21ffd3d01cca866113b4c1e373f3ed92d844095334e8aa4ea611
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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