Serviço de Validação on-line do Cartão de Cidadão 000143 - EC do Cartão de Cidadão

- Cartão de Cidadão -

Issued by Cartão de Cidadão 003

About this certificate

This digital certificate with serial number 19:f1:41:19:33:c0:28:eb:8f:2c:9b:07:25:df:a2:65 was issued on by SCEE - Sistema de Certificação Electrónica do Estado.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The commonName field of the subject MUST be less than 65 characters (RFC 5280: A.1)
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Cartão de Cidadão

Organization: Cartão de Cidadão
Organization unit: Serviços do Cartão de Cidadão
Organization unit: Validação on-line
Country: PT

SCEE - Sistema de Certificação Electrónica do Estado

Organization: SCEE - Sistema de Certificação Electrónica do Estado
Organization unit: ECEstado
Country: PT

This certificate will expire on

Certificate Details

Serial Number (hex): 19:f1:41:19:33:c0:28:eb:8f:2c:9b:07:25:df:a2:65
Serial Number (int): 34483363790874132994472593247745057381
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 26:c4:ab:be:b8:4b:55:9c:65:00:1d:0b:ae:0c:70:c5:d9:f3:ae:df
AuthorityKeyId: 3c:df:ca:b3:5a:3c:39:1e:8c:e6:e2:39:82:70:0a:89:ac:fd:2e:f6

Fingerprint (sha1): 98:bd:00:4e:77:5e:82:e0:62:de:85:38:28:8c:1d:fe:3c:c7:66:86
Fingerprint (sha256): af:8f:e6:37:58:c5:87:d0:6b:61:32:16:b8:a3:62:9b:d2:1d:e6:8e:2d:36:d8:3d:6d:9f:e7:33:6e:06:f8:56


Revocation information

OCSP Server: http://ocsp.root.cartaodecidadao.pt/publico/ocsp
CRL Distribution Point: http://pki.cartaodecidadao.pt/publico/lrc/cc_ec_cidadao_crl003_crl.crl

Check the revocation status for certificate Serviço de Validação on-line do Cartão de Cidadão 000143 - EC do Cartão de Cidadão

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Serviço de Validação on-line do Cartão de Cidadão 000143 - EC do Cartão de Cidadão

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment

Extended Key Usages

OCSP Signing

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Serviço de Validação on-line do Cartão de Cidadão 000143 - EC do Cartão de Cidadão in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma+kAIo9DSw+3B+RFPZ6
KOgfK/BnBSWTsD6yEOy2nIIuFz1Ut1OwJNGAso7lQt9qnf/l//DtY5SvPcs0fjUi
eg1Yfiw5LyMfTvw3cMQ3CzNcF9oqlMx9EHVNBXMwXBY308HcClRREnbhN1IZB2Jm
2ghvAxHF39t0vjWKxiWFG9lp7tMnWpRXI8wWcXzZ0yudh6f43NkUQ6k5Vbu0YD1e
ApzOxhWnstDBK7nshXDxpcN6GQF+dDfvBrJwxd4tGeSLrKH+q3WoEvFofv2Xzewd
QZ5mEi1q9SR2RBpvfKpMS4fYqCVK+h/pxCa5U7FXEJswbXQyG7Q2BfUxnSNULKH7
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34483363790874132994472593247745057381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SCEE - Sistema de Certificação Electrónica do Estado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ECEstado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cartão de Cidadão 003'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 10:58:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-10 18:15:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cartão de Cidadão'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Serviços do Cartão de Cidadão'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Validação on-line'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Serviço de Validação on-line do Cartão de Cidadão 000143 - EC do Cartão de Cidadão'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19401072284116888348852796803132490422731371630965864569857002279562859042544200471130482045871240450388416038636088439198053798868859489814849004441589610574769434403857626419970275858573063415606970935156931724058592648429854280683759039582996572591472852265053190562374199320136445704725138680584077088005058054935293986739740281578245002459331837420794851283204354304147232185036698312722337262811618676677010735974183789702276348598403280512605579647870731235528132169747358244091206544063218093717526841548796581181948933841812920774223533373142208922979686503015830281907204853353395677878525583503447992433639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3cdfcab35a3c391e8ce6e23982700a89acfd2ef6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.root.cartaodecidadao.pt/publico/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.620.1.1.1.2.4.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.cartaodecidadao.pt/publico/politicas/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.620.1.1.1.2.4.0.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.cartaodecidadao.pt/publico/politicas/cp.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.cartaodecidadao.pt/publico/lrc/cc_ec_cidadao_crl003_crl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26c4abbeb84b559c65001d0bae0c70c5d9f3aedf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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