parfrontal-energias.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:20:72:f7:85:d4:78:19:d5:76:0b:ca:c9:61:cc:25:c5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=parfrontal-energias.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:20:72:f7:85:d4:78:19:d5:76:0b:ca:c9:61:cc:25:c5
Serial Number (int): 317866862942221788884611512843493805139397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:4e:c1:79:dc:a2:a6:05:2f:14:40:0f:45:b8:b4:9c:8e:6f:61:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:86:b4:7a:11:0c:94:03:c3:f5:8e:2a:dd:83:d8:0d:02:7e:59:dd
Fingerprint (sha256): 8a:d4:81:95:5b:50:71:6b:02:cf:e3:90:ab:53:04:a4:0e:44:4c:3d:22:4a:0c:20:7a:a8:f6:6c:ce:9e:5e:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate parfrontal-energias.pt

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parfrontal-energias.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

parfrontal-energias.pt
www.parfrontal-energias.pt

Other certificates including the domain name parfrontal-energias.pt

(limited to 100 certificates)
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt
parfrontal-energias.pt

Certificate

The complete raw certificate details for parfrontal-energias.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317866862942221788884611512843493805139397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 16:44:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 16:44:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parfrontal-energias.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940480260746290107670332032465640043300904347211848720940603773637903088752313459100318979548446411884240279601335947029897589846607199127867556425706417612010647384833990934628508544617223619435361798032358640768613765229130532076755613225004248063288063138414286319661621411340998782455811832531111739162801772968245961297211435627551873398289595534425340197515681362661195096590155437955908617516755945026206982476399166194391958796366471710028916035339190814545310229499179208322241982079945912078808266557860933246252391496711236705484878771989579626258516043191685404245039558867711558091257411318118039947629048170293222271566049340341108595286081530710658006454623084395189178110228681915391052052516615937291917988314626480754236919124416271329632492838682760070244848332672220419286895793748065659286504494383750759602359757748544867743206132798662191919415448876212303609196882840422529510699284728209692925297642191613184375217787312211019920309237691294294149888458157761385590956866394833449258753836100584046392713213422027720612400553547994080214963916062982345179470315940200300738870910994558200374964403411659447459234387845955109285801729347124297096548796644337903184519786849909337751545751082165194411830638179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							694ec179dca2a6052f14400f45b8b49c8e6f614d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parfrontal-energias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parfrontal-energias.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162b0a8a98300000403004730450221009c1350d8868bcac549719f39fafd2f210fcf91fb03ff6f8894bb9b1dc037ab3802202b22b9ee69c15ab2941785e1718254eee64f2a4d7767f4fbdc1da72d7c1dac20007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162b0a8a98d00000403004730450220013a96045410b6b4226a3f5e65ae7b534452e3df56c42720e36198c2b1b0c7250221008e960f1cb599cc1f10e2eaf0da5bd282d90cad259e925d694eff0dc3cab56cd3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005edc87e9f60180d88ec81ef3956d9c1822bd202ad765e0f622cb5a473eedf68b1a64d2fb5dbac3d57418c3e4731c7d72e38cdcd549e6990a45f6033881dc55b58558343ac0c23cec9338962f676ddbdb2ac60db05730d3aeeaa354763f93ed7cd31fa710afdc54707277c3135dc4532e1aae37e7bb6fce3db3d8221b68b14a5223eb032e5c1993498fac593b08165fafc0f189a0ba03d214b6aef6461c5f770426a01d6aea4e6e67979f67416addd4e785ff408d3a04e490f4a1982e84b564c37431ddeac1cbe4e936fbd3c17f6edc011a7460292b7710ecc6b8a865bda38e61c990b4614a72e98849ccf4ccbbc8fa4fae3a681309e0e3bd011f9d109890e30c