DV SSL/TLS Certificate for www.newsletter.cergold.pt

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.newsletter.cergold.pt DV SSL/TLS Certificate

This certificate with serial number 06:f1:1f:6e:ae:82:97:23:72:cb:f2:e6:59:7e:c8:67:e4:8a for www.newsletter.cergold.pt was issued on by Let's Encrypt.

With 7 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.newsletter.cergold.pt provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:f1:1f:6e:ae:82:97:23:72:cb:f2:e6:59:7e:c8:67:e4:8a
Serial Number (int): 604723546778517128050759531920603488969866
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 16:1b:a2:ca:4f:94:b4:db:db:1b:6e:33:a1:2a:25:eb:b9:db:74:da
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 09:f3:08:81:3d:63:34:fb:5f:cb:21:f6:10:50:5e:be:4d:d7:78:21
Fingerprint (SHA-256): 71:d5:9b:1e:fa:85:23:93:e8:b2:ca:2b:01:b0:bd:c1:32:b2:10:49:79:f7:f4:be:d3:42:a4:84:01:d9:9d:c3

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/11.crl

Check the revocation status for certificate www.newsletter.cergold.pt
7
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.newsletter.cergold.pt

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.cergold.pt
cergold.pt
www.backoffice.cergold.pt
www.catalogos.cergold.pt
www.crm.cergold.pt
www.newsletter.cergold.pt
www.servernode.cergold.pt

X.509 Certificate

The complete raw X.509 certificate details for www.newsletter.cergold.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISBvEfbq6ClyNyy/LmWX7IZ+SKMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTE1MDQyNDQyWhcNMjUwODEzMDQyNDQxWjAkMSIwIAYDVQQD
Exl3d3cubmV3c2xldHRlci5jZXJnb2xkLnB0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1hlbwmdfQdGJQqsQiWoRJjhhAKA9TYx9bZGPO3Ibf6jRbLfX
HbT6C6jTKClqn/G3RPnMnIpjgtTPzVw8YePZ9CJyVzsC1b8Jzll9VzM2y/hnpbuU
oV0Ab8U4hyAo+PMym18MlAJwCqfQC27V4QSxkPbGvRFti+84kpsfAkbCLjAubA4b
/KvQ7V6DaWe6/lM3w9tCOsXjikbp/iOmvAY3pnydutf/rREQnsYqfDuNm7Wg6E8l
EWcsoZqfHsjurWYgNYgaU0weZmV7+Pe5+r9KkZTjWLoqdubbqLRcOXaq39y2xaIv
b06fKwVaZ494G8ckk+eH59CiYFJ03MHMy1wktQIDAQABo4ICqzCCAqcwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQWG6LKT5S029sbbjOhKiXrudt02jAfBgNVHSMEGDAW
gBS7vMNHpeS8qcbDpHIMEI2iNeHI6DAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUH
MAKGF2h0dHA6Ly9yMTAuaS5sZW5jci5vcmcvMIGkBgNVHREEgZwwgZmCDCouY2Vy
Z29sZC5wdIIKY2VyZ29sZC5wdIIZd3d3LmJhY2tvZmZpY2UuY2VyZ29sZC5wdIIY
d3d3LmNhdGFsb2dvcy5jZXJnb2xkLnB0ghJ3d3cuY3JtLmNlcmdvbGQucHSCGXd3
dy5uZXdzbGV0dGVyLmNlcmdvbGQucHSCGXd3dy5zZXJ2ZXJub2RlLmNlcmdvbGQu
cHQwEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDov
L3IxMC5jLmxlbmNyLm9yZy8xMS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA
dwDtPEvW6AbCpKIAV9vLJOI4Ad9RL+3EhsVwDyDdtz4/4AAAAZbSZY4jAAAEAwBI
MEYCIQCGCRcfw+Gfn0SAPdVbsNxpqcwDnN/oIAlqKefQF8Bb9wIhAIl/55hToY4G
bBuyaGzr9zpYZBpfRhbJnaLFp+X4wkdgAHYADeHyMCvTDcFAYhIJ6lUu/Ed0fLHX
6TDvDkIetH5OqjQAAAGW0mWdzwAABAMARzBFAiAp97MFL1m0qEQ8WJfzREliDkis
M++pZnprOZEcEmWblwIhAMDKxUBhrGo1o9r7bmxqe5zmcs+LZZPxL8Uua8hYb3XX
MA0GCSqGSIb3DQEBCwUAA4IBAQC5/FynZl7FfF9kpXkQgIliVG7f6681XERa4Egn
FC4Yb5IKgfgNkORTDBht9ilaDMS1JitIaRu81+UVWPCT9UxiS55fZuteAuEpQQ4Z
7EHsk9GpsbrjVIisfWQDkmv6YLi1R8wA2oVck3hNEJM6aCDfcsKk41P4mMnjs5f0
Tl+4Vk64CfnpflOLj0f9YlL9JRClUKZUsTfrl7Sq8J2fIDF4g8lViKPIGEr5Cii4
fOV2cJfOPiyyfnC4fYdBS8B7b5JlFqh51pJAwq6Q+vRw7LwmeHch3ENqp2pwgqUQ
4m/cF9GQA/31o7GmG7f4ZrkryGnRhAqN7rMmZCJTcRkJO544
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hlbwmdfQdGJQqsQiWoR
JjhhAKA9TYx9bZGPO3Ibf6jRbLfXHbT6C6jTKClqn/G3RPnMnIpjgtTPzVw8YePZ
9CJyVzsC1b8Jzll9VzM2y/hnpbuUoV0Ab8U4hyAo+PMym18MlAJwCqfQC27V4QSx
kPbGvRFti+84kpsfAkbCLjAubA4b/KvQ7V6DaWe6/lM3w9tCOsXjikbp/iOmvAY3
pnydutf/rREQnsYqfDuNm7Wg6E8lEWcsoZqfHsjurWYgNYgaU0weZmV7+Pe5+r9K
kZTjWLoqdubbqLRcOXaq39y2xaIvb06fKwVaZ494G8ckk+eH59CiYFJ03MHMy1wk
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 604723546778517128050759531920603488969866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 04:24:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-13 04:24:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newsletter.cergold.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27027501973149448269856652114323909548725822381114977788213063693893698264522788708470170225042078619473372964253265186695834413668188003011790829807413303650247737560837010828491544698760508577786028169502688852371562145326279942426851020588300123959446416310893281173677559610021512316427890505496831535075934826794222723541336829015280727739242530776432811412262850719114086020312782158211208722901009712249162715943862309672291912562586301216631959195344800036871394264854522536234339445150165531854139410235873218519447493548921274845965050825072713053221459967063878375151760789190915025437641180187545489384629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							161ba2ca4f94b4dbdb1b6e33a12a25ebb9db74da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cergold.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cergold.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backoffice.cergold.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalogos.cergold.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crm.cergold.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsletter.cergold.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servernode.cergold.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/11.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000196d2658e2300000403004830460221008609171fc3e19f9f44803dd55bb0dc69a9cc039cdfe820096a29e7d017c05bf7022100897fe79853a18e066c1bb2686cebf73a58641a5f4616c99da2c5a7e5f8c247600076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196d2659dcf0000040300473045022029f7b3052f59b4a8443c5897f34449620e48ac33efa9667a6b39911c12659b97022100c0cac54061ac6a35a3dafb6e6c6a7b9ce672cf8b6593f12fc52e6bc8586f75d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b9fc5ca7665ec57c5f64a57910808962546edfebaf355c445ae04827142e186f920a81f80d90e4530c186df6295a0cc4b5262b48691bbcd7e51558f093f54c624b9e5f66eb5e02e129410e19ec41ec93d1a9b1bae35488ac7d6403926bfa60b8b547cc00da855c93784d10933a6820df72c2a4e353f898c9e3b397f44e5fb8564eb809f9e97e538b8f47fd6252fd2510a550a654b137eb97b4aaf09d9f20317883c95588a3c8184af90a28b87ce5767097ce3e2cb27e70b87d87414bc07b6f926516a879d69240c2ae90faf470ecbc26787721dc436aa76a7082a510e26fdc17d19003fdf5a3b1a61bb7f866b92bc869d1840a8deeb3266422537119093b9e38