anavieirapersonaltrainer.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:38:e3:df:41:19:ee:99:d2:66:26:df:1a:b0:83:c9:00:b3 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=anavieirapersonaltrainer.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:38:e3:df:41:19:ee:99:d2:66:26:df:1a:b0:83:c9:00:b3
Serial Number (int): 367807850232267341401939299975687427391667
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:f7:32:7f:9d:ec:bb:8b:e4:71:b1:32:c3:19:70:9d:77:88:61:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:07:1c:14:f4:db:90:7e:f7:5f:96:e0:4b:ca:23:38:2e:35:ec:93
Fingerprint (sha256): 7c:de:5f:58:cd:20:6d:71:df:d6:99:15:6a:41:1f:06:13:fc:4b:b7:7f:6e:3f:04:b5:2e:78:a8:79:fd:96:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate anavieirapersonaltrainer.pt

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anavieirapersonaltrainer.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anavieirapersonaltrainer.pt
autodiscover.anavieirapersonaltrainer.pt
cpanel.anavieirapersonaltrainer.pt
mail.anavieirapersonaltrainer.pt
webdisk.anavieirapersonaltrainer.pt
webmail.anavieirapersonaltrainer.pt
www.anavieirapersonaltrainer.pt

Other certificates including the domain name anavieirapersonaltrainer.pt

(limited to 100 certificates)
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt
anavieirapersonaltrainer.pt

Certificate

The complete raw certificate details for anavieirapersonaltrainer.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14GFcMHXle0P01PhOKbl
KgvawNPPf77Amn9LI8sftlf7kiMjYLlSoWUD0vD34myXuSgesllVAB2HRxfPE67c
gBu3exB2eHmeXty1J9KnW0saEdTh+aJD+QRKk0m8c7V8QeC9gFTIFXPrvUA7By7D
RovirmEO6Sno7VePx7aVgEvhW1EWabN6aXFnPBMXCsqXYudY3JWjf+wsDj94RhXl
Mf5Sns0h0YA9aAGO2oagtY0srj4ndiJnUp5eWV04/baze7lVtBO34EURySvqyM1E
VptaSKvTaGTFE/ttxiVa2CcjJ55Pl6A+ZwsrqzAOo0sLEn1MUtCbyhAWu1UO096E
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367807850232267341401939299975687427391667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 20:41:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 20:41:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anavieirapersonaltrainer.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27205104877401169560549616653047453469743321240870933231570833491292185559666944553971788384116373210829534244832672885354445473069344543646186505969460419109714564618517774122736418958813738546328226794842043166196314690728688763986184649996755170496192809152769055332385497438242819673376680523082645758015636048739473130160283083271215013521432785319379078500531812778077858007232271857281747379625491801303657509496872972646288883176746738313262972318170956400994461294433222599211363837694848261831105688830649105936665542328192466527799917672796873824335042680818082278839566267045256594720049898779729123509453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3f7327f9decbb8be471b132c319709d778861c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anavieirapersonaltrainer.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001664b5465530000040300483046022100ceba1ccbf5e2f6f3d1f9bf289c0a44cc533c6123b58d16804af6fbfcb3c06821022100afa438e4f12b6a84dd5a14c52778bde8d4bc6dc19b43ec2a271ab40fde0c7b2f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001664b546546000004030046304402204112353d9f66f36b5fa9b7c923c72b47e0aed613b51986fbe56c10da25dece5d02205439c39a7653195a0c879e4bf4518697cb59bc3a9102adf2143eedffd1c864ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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