postal.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:ea:d2:ec:d0:5f:7e:ec:0d:fd:d1:69:22:99:e0:d5:e3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=postal.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:ea:d2:ec:d0:5f:7e:ec:0d:fd:d1:69:22:99:e0:d5:e3
Serial Number (int): 314052476837616904721376958949591894513123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:42:6f:6d:52:44:8f:dd:58:74:91:a0:b5:8e:10:9f:a1:0e:75:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:81:10:ac:d5:89:69:d3:eb:65:a4:fe:02:a5:0d:17:11:88:77:91
Fingerprint (sha256): 8a:83:3e:bd:21:bc:ce:df:49:1a:08:5d:cf:0b:04:5c:ca:70:2d:d4:7f:2f:24:05:7a:04:52:73:e3:fb:e3:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate postal.pt

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for postal.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.postal.pt
postal.pt

Other certificates including the domain name postal.pt

(limited to 100 certificates)
postal.pt
*.app.bcbm.pt
postal.pt
postal.pt
postal.pt
postal.pt
postal.pt
*.advnce.sic.pt
postal.pt
*.app.bcbm.pt
*.averdade.qas.impresa.pt
*.advnce.sic.pt
postal.pt
postal.pt
*.app.bcbm.pt
*.app.bcbm.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
postal.pt
postal.pt
postal.pt
postal.pt
*.app.bcbm.pt
*.app.bcbm.pt
postal.pt
*.app.bcbm.pt
*.averdade.qas.impresa.pt
postal.pt
postal.pt
postal.pt
*.app.bcbm.pt
*.averdade.qas.impresa.pt
postal.pt
*.app.bcbm.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.app.bcbm.pt
postal.pt
postal.pt
postal.pt
*.averdade.qas.impresa.pt
*.averdade.qas.impresa.pt
sni.cloudflaressl.com
*.app.bcbm.pt
*.app.bcbm.pt
postal.pt
postal.pt
*.app.bcbm.pt
postal.pt
postal.pt
sni.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
postal.pt
*.app.bcbm.pt
*.app.bcbm.pt
*.app.bcbm.pt
*.app.bcbm.pt
*.app.bcbm.pt
postal.pt
*.app.bcbm.pt
*.advnce.sic.pt
postal.pt
postal.pt
*.app.bcbm.pt
postal.pt
postal.pt
*.averdade.qas.impresa.pt
*.averdade.qas.impresa.pt
*.app.bcbm.pt
*.app.bcbm.pt
postal.pt
*.app.bcbm.pt

Certificate

The complete raw certificate details for postal.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314052476837616904721376958949591894513123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 02:17:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 02:17:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'postal.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809377566447687024571153548580734575860961511536027653334225771644398506917694937765636830552749654004390286696790895302317063558962901157668432549371751621584198420290075555719110812573864868574320282202085667380626785412575919744316932849021926095428041424307565557556274500597286942321776596755205345283007180705676175510602283524875503117793140496628285778426823729786338546700641423866786436079897195884963129101801042531357093432309364578493839752503500193820832403605812685424133107644409468996283804002628732353632866316376084209106111229071569268107780041022033828781424007551840382961753938873135873873096366606379665091256654106004474273640942307003386074444236774610747535032649172809375403362482112102428570541577925485333184720331781148092705842459163148933870553445193993735830851066391262405834483413810379663932348457468455673915220311777957130143167063801483314158004227712122281995085113903425746179603661306879724202960944862913079036936253065367758580309057738783540729439762284971927757146265026800729076708092530022059713802633608819449212881474474623049264591422912821438948185832632441816077261447283662595780938805576851738779339493137260187568561452006284000009693049430167813118440003296233711626231546091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94426f6d52448fdd587491a0b58e109fa10e758b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postal.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f7e023bec0000040300483046022100e29b925a559f617bdf847712dbe98d87fb2772b993b8949e88ef59e396a3ca26022100d2e99b1b60cb9fa553ae5edde113e5017c4e4ed33e94808c1964bd7a10ba127b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7e023bdd0000040300463044022032d0289ff65810a5e2e6e8a76a8d2056d7a6149147d4529f14081f2c5da03503022026ee87d461e986708bc25e2d1041e496d27132c5292ffa861704bc621c432f20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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