kamedical.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e4:5b:1e:0a:97:6c:50:50:33:85:d7:c5:2c:4b:eb:36:d6 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kamedical.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:5b:1e:0a:97:6c:50:50:33:85:d7:c5:2c:4b:eb:36:d6
Serial Number (int): 339042353184597963048820851984522313152214
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:f4:aa:05:0c:c4:1c:40:43:9b:29:8a:94:58:d8:45:4b:31:79:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:55:59:06:ce:17:f9:d5:de:00:d9:5e:65:7e:7e:6f:dd:15:32:6c
Fingerprint (sha256): ee:34:e3:24:a9:d6:fa:91:52:e4:45:9e:ac:0d:6e:a5:92:05:81:f0:1f:53:f1:18:69:57:ee:ad:bb:7b:08:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kamedical.pt

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kamedical.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.espectraltelecom.pt
cpanel.kamedical.pt
cpcalendars.espectraltelecom.pt
cpcalendars.kamedical.pt
cpcontacts.espectraltelecom.pt
cpcontacts.kamedical.pt
espectraltelecom.pt
espectraltelecom.pt.tdoispontos.pt
kamedical.pt
kamedical.tdoispontos.pt
mail.espectraltelecom.pt
mail.kamedical.pt
webdisk.espectraltelecom.pt
webdisk.kamedical.pt
webmail.espectraltelecom.pt
webmail.kamedical.pt
www.espectraltelecom.pt
www.espectraltelecom.pt.tdoispontos.pt
www.kamedical.pt
www.kamedical.tdoispontos.pt

Other certificates including the domain name kamedical.pt

(limited to 100 certificates)
lusomelt.pt
lusomelt.pt
lusomelt.pt
carbol.pt
kamedical.pt
kamedical.pt
kamedical.pt
carbol.pt
carbol.pt
carbol.pt
kamedical.pt
carbol.pt
kamedical.pt
carbol.pt

Certificate

The complete raw certificate details for kamedical.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr22lXCLxUv2S1X4D3+e
bIhjwouO9GEzdNtVwxLeqxPy4O15O3pDSbtMrZE4QkCkqxqDlnGnjeK1FLPJsT3f
y52icF4yQGvEd/ow8wAkiqlaJsCOOrUngIjw7NjnW/TCIwBNRuNmiHjoA1oiKbWU
YgEyGER3iGrfpOH9cGwAUU/hQH1CaMSU5Oe5BnT4lui52/SZ4qqeMW/4jPsmp6pR
VFkCewyReZqyMnmNZqkAqYJIWQod4GsbZiqS4HqNSlMshnaPjMOtY2QlnBFjULHV
tGysY56+mUZxo/LSUhCFQzWJKgKWkNjmcdI3BUfQcbT3Ee8G9tr6+Q+H5d20t0ob
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339042353184597963048820851984522313152214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 03:44:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 03:44:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kamedical.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24583782237792982280149129179285029053327715212002603124425166721421028408788759472124146207488769728904816404377660540026349171690336751458827549744321161360097536442177695548525943922650342703367684021001964677438724482278711464879890209407318114761915814206777263287697763607053204751094091916167561110102973508433892090644348063302264340493920967065472643146362049985444926376812756625538635305531491080225571252592036874613837477819720690308965898310488104939049896833751415920909843823828124594978243998908804323672986728839296811478180985331882452191175205721239930385818078302870149255376368228642262778256223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20f4aa050cc41c40439b298a9458d8454b317961
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espectraltelecom.pt.tdoispontos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamedical.tdoispontos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espectraltelecom.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espectraltelecom.pt.tdoispontos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamedical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamedical.tdoispontos.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170998f2bd20000040300463044022027f41f2791135985517b4ade1e9b07198b560bef1ffd3072a4248c03d70a79da0220327cc781ee7c03d183fb05aa48c764ed17b8236832a66b3008592e2d3bc7ddeb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170998f2c0700000403004730450220473be398727035209dbbf299e95a6d62d6c240167f6bfaf7e9656459310b9179022100c4494316ac65c3714f513e1f802bd7cf659be0e16e55c914ae3d72294c00936d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004280f51665a16daa8574c45c2d9d20eefc5b1431d03c147a984048eba935253407dbed29f9826f8b042960263ce5972dfc37da1fc7a87d6a6df1feb157b2fde021198b954eed2be3e2da317f3d1a27f061bf8bc5ce4fca5b6ce77146c09d534c913b5d0f2696f1422093a099115ad1620aec2ccaf908f65d6c36940f1ca7c58e93b2fb50ef484b2e4e1a112b84f07ea39bfc296da741620c6e5d460636a1c884a7fc981467c2faa5ed9a8ba88cd8d993bcd9bf93aac943312468ea3e4e8bf1fa690c5b506911841de3db723fa98c8cf740895b920c9baf49368a033d846775b0012efbeaf7b0fcb822606de3cbb11ca923a73a4fb0b443c6873ab451d1cc33a2