litigation.abreuadvogados.com

- Abreu & Associados - Sociedade de Advogados, SP, R.L. -

Issued by MULTICERT SSL Certification Authority 001

About this certificate

This digital certificate with serial number 0f:ee:e0:61:6a:5b:be:96:01:37:21:8c:83:7c:c6:61 was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Abreu & Associados - Sociedade de Advogados, SP, R.L.

Organization: Abreu & Associados - Sociedade de Advogados, SP, R.L.
Organization unit: Certificado SSL/TLS
Locality: Lisboa
Country: PT

MULTICERT - Serviços de Certificação Electrónica S.A.

Organization: MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Certification Authority
Country: PT

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ee:e0:61:6a:5b:be:96:01:37:21:8c:83:7c:c6:61
Serial Number (int): 21178737566904332234341515222501344865
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:87:d3:48:f2:4b:1a:f8:b3:fc:9a:39:80:f0:b5:ab:85:f5:ed:03
AuthorityKeyId: b0:02:39:52:0a:4f:73:9a:c8:d9:81:45:36:5d:11:9d:5f:23:39:97

Fingerprint (sha1): d0:5b:3e:da:0f:be:e2:31:7b:f2:0b:11:db:7e:6c:9f:60:af:59:6d
Fingerprint (sha256): d9:6a:42:34:d5:1f:4f:42:07:f6:5b:78:d4:6e:25:5b:fe:19:b1:6d:90:df:73:6f:42:9c:2e:f9:3b:92:55:c7

Issuing Certificate URL: http://pki.multicert.com/cert/SSL_CA01.cer

Revocation information

OCSP Server: http://ocsp.multicert.com/ocsp
CRL Distribution Point: http://pki.multicert.com/crl/crl_ssl001.crl

Check the revocation status for certificate litigation.abreuadvogados.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for litigation.abreuadvogados.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

litigation.abreuadvogados.com

Other certificates including the domain name abreuadvogados.com

(limited to 100 certificates)
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
webmail2010.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
webmail2010.abreuadvogados.com
remoto.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
marketing.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
webmail2010.abreuadvogados.com
mkt.valorcar.pt

Certificate

The complete raw certificate details for litigation.abreuadvogados.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneeEfmXKwbZgU7V23TR9
U5DqKBqlQ5+NKug3QWwNsg2YxZF4wUcR0ahMahGoX+3ltenUypDweNHDeDZ8y2s6
IuNsRb1zswtRRDstNrUo9cEjmuvarFr6DAn3X0l+KtTSSXdSCaESbpWhaKj+0HKP
zMKnynk5zNWxyQ43ARlv4y7n8Gxy4DMQRL2TGZukr9LCyff849z1BBFrGhlXQqe5
ik9pdJuqEf1Gi3WB0kTGdKqWgEZdBopH6Mkn81hPzl1w42wWRSzHE0z3LJWmbLQe
6b87jACRHWnP/ukQbhS2lsmmifbYFJIauE7vVhUnCQzDNYuPYCGxUgfnZO89OG/Z
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21178737566904332234341515222501344865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT SSL Certification Authority 001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 17:35:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lisboa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Abreu & Associados - Sociedade de Advogados, SP, R.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado SSL/TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'litigation.abreuadvogados.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19933579440396916564626183072204278652345701892385634857948566131117025220511994445560538016302863323716280755479286314709067144338128825377778589203727145739825307167219778390529985118241883489068801750731301369613753631956667067698700172498958206030047226663283888041478592868215862391213776430856101928364091482991092363808763914619163007004075515147834304171531052658256338794947329905318132651344995392439915646782922184058796356737528104547744074603854892791303148025385143952846793605381622484561116886862926313616083061044292864407765471466441540129935076260577119121030283637283617573127790679060004601846253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b00239520a4f739ac8d98145365d119d5f233997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/cert/SSL_CA01.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001_delta.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litigation.abreuadvogados.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.1.17
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.multicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b387d348f24b1af8b3fc9a3980f0b5ab85f5ed03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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