tierone.pt

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:35:39:dd:b8:15:76:8f:e6:9d:3a:e0:09:a0:9b:3f:60 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tierone.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:35:39:dd:b8:15:76:8f:e6:9d:3a:e0:09:a0:9b:3f:60
Serial Number (int): 297817820597515839384540761898980285824864
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:a9:70:10:1a:a8:fb:93:74:eb:be:08:24:51:e0:8c:06:78:75:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:9d:cd:73:0e:ab:d6:b7:53:91:c5:b4:b3:ce:a8:ea:a3:82:b3:ff
Fingerprint (sha256): a1:6e:19:38:e3:44:86:e9:29:a0:3a:6e:e4:3b:50:d5:3c:87:bb:90:7a:b7:cd:61:c5:e1:c2:27:84:0e:be:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tierone.pt

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tierone.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artifacts.tierone.pt
lab.tierone.pt
scm.tierone.pt
tierone.pt
www.tierone.pt

Other certificates including the domain name tierone.pt

(limited to 100 certificates)

Certificate

The complete raw certificate details for tierone.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297817820597515839384540761898980285824864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 22:25:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 22:25:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tierone.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 609547016324180326656037595659129445720156089218766161839193375212722659969003209943172735357546689840628650150727393559220955557294621086109435480735166285752288679664988729963648638757570901486569563658506485720968289165042632414341229186921155374051546521271205287112941729881078990505914235027410606479167289703200064899962881204490135405703670168947405482737639825321538751477918878692614565353845684794512923481093815524249460954104202153492742849181638416293042092198798670200793474758911178562264442492605719762550288062855356620671447149740283892243044761478227002781727054449462780110040588056738087120563688963859552028018684166833384033351259993653206351382898241733395829767389308417083297982491239399578841352411205940064558919493334426653154630747401459732368362969682838465756375288545109318686211247233172657325962253712702265831970096656137910592312117580494140403534759959258083044636755202982442377892008539173288037333255606660418474334105674630817168760563485715441371185353819255114841554550246323713538308744738262771486614123451829908748128474618402948602409892897002328106553699043807437793418505331978008986053806241592404908997433903459567531567337358661740197742101924049690921167394593933285185656906501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69a970101aa8fb9374ebbe082451e08c067875c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifacts.tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm.tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tierone.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a00ab748b0000040300483046022100803ccc57e71f7acef2c46360604b6aad2c99d1fec1d1a6cb7f1cc37ccc74a6ce022100bb6bbb5558f19bfefacc20880e3b491684722bafb4f6c144641847d68d7d3139007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a00ab74cf000004030046304402207bf404011c1b83f175ded8e3e57a69b7f3cd948299b11ca32b70e4d51ae362fb0220590836defeaa4f927b32cf4a5370ac2728b5120daaae3cb933c2c62b1ae1cb84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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