*.app.bcbm.pt

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:bc:95:cb:47:23:3d:85:36:77:3c:ab:24:12:10:62 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.app.bcbm.pt

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bc:95:cb:47:23:3d:85:36:77:3c:ab:24:12:10:62
Serial Number (int): 2308417989553436584320341058358743138
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 9c:b6:b1:62:7b:46:f7:dc:0e:df:a8:5f:e9:8d:3d:c7:89:24:a3:6e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 2c:f7:7e:ff:cd:ea:06:b1:d0:6a:4a:87:16:6c:40:4c:95:6b:27:03
Fingerprint (sha256): 9f:80:bc:f7:69:06:3e:e7:55:47:04:a3:a9:8b:3b:60:13:3e:13:a4:91:65:bc:fb:40:03:46:46:4a:2a:57:61

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.app.bcbm.pt

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.app.bcbm.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.app.bcbm.pt
boacamaboamesa.pt
*.aws.impresa.pt
*.blitz.pt
*.tribuna.expresso.pt
expresso.pt
*.expresso.pt
*.impresa.pt
bcbm.pt
*.portal-informa.impresa.pt
*.sites.aws.impresa.pt
boacamaboamesa.expresso.pt
*.boacamaboamesa.expresso.pt
*.postal.pt
*.leitor.expresso.pt
*.beta.bcbm.pt
blitz.pt
*.bcbm.pt
*.boacamaboamesa.pt
postal.pt

Other certificates including the domain name bcbm.pt

(limited to 100 certificates)
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
boacamaboamesa.pt
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
bcbm.pt
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.bcbm.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.averdade.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.averdade.qas.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.bcbm.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
boacamaboamesa.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com

Certificate

The complete raw certificate details for *.app.bcbm.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ESId7K+JbtAVEg3X7w
8gaUIYBtlBYX46/HCL2chr2WZ9RpC+ITHkVaU5336bq4hcTefvhdMU7xCpB3m+Wn
sDBwNFU9brU8ebzMNWwfhMznKOZA0W7P+rHhsucP1t33F9un/26hFt5B+xhd4NFp
qNDoexaaKyRibg5yp8LhOgcfmJn7LrSYHqZm+su11oZZUkSdbiq4aPJJqKxyS5OL
MIa9USLFTjKN+c0E5xETrEiZghp32/1EPbmow1NXc+id4bqie29PEJzbFizgArfx
81H4/0JekqGN2izlvdYGWR5S0ogUJTuQOPVRzZSoYoKThQMumkSarqXLhvJzUvsk
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2308417989553436584320341058358743138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app.bcbm.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29240475433381317379965907492662555215887419311612381242359957776397799722530344203534720034908208628864728255116990175288275563569151425296029619168056603086185103120643656697174731589021879546184712711260373018579478717758405488423341109471249437177456549854082470003335492656569278693738262779193384508334024995793261842351389991914334340778832585522047709404355641427154186783769680494705287762899703187807586591888910448197876697856171521884401461234676919656802863361973505994596953168759104581981943561302633748884705345740274396997141801447858901409689011320626050591152363919774564558611360903371492396049467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cb6b1627b46f7dc0edfa85fe98d3dc78924a36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (357 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal-informa.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postal.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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