geniosetraquinas.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:33:0f:9c:1e:7b:96:f0:cd:3c:e4:d0:b1:00:9c:24:8a was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geniosetraquinas.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:33:0f:9c:1e:7b:96:f0:cd:3c:e4:d0:b1:00:9c:24:8a
Serial Number (int): 297474660367609117976245339199512438908042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:09:3a:b5:4a:ef:71:4d:45:75:89:b3:91:93:55:a9:45:3a:79:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:34:95:f8:e5:5b:9e:5e:d2:8a:d9:97:c3:58:ad:d5:a5:90:85:27
Fingerprint (sha256): fe:b3:27:a6:c9:ed:f2:0c:2a:ca:29:72:45:05:22:e9:db:9a:80:1f:a7:1c:0b:2c:49:30:95:44:d8:8e:66:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate geniosetraquinas.pt

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geniosetraquinas.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2get.pt
cpanel.2get.pt
cpanel.geniosetraquinas.pt
geniosetraquinas.2get.pt
geniosetraquinas.pt
getsafety.2get.pt
mail.2get.pt
mail.geniosetraquinas.pt
webdisk.2get.pt
webdisk.geniosetraquinas.pt
webmail.2get.pt
webmail.geniosetraquinas.pt
www.2get.pt
www.geniosetraquinas.2get.pt

Other certificates including the domain name geniosetraquinas.pt

(limited to 100 certificates)
panel.conectikids.cl
keylynk.com
geniosetraquinas.pt
www.moonlocker.org
uwen.ca
geniosetraquinas.pt
emvento.com
get-ride.pt
nordahl.vetspire.com
jamesstuddart.co.uk
polytangle.com
geniosetraquinas.pt
www.geniosetraquinas.2get.pt
www.portal.homecodec.com
alltecharab.com
nordahl.vetspire.com
stage.geniosetraquinas.pt
fptkd.sibrafe.com.br
upliftfitness.jp
www.viraeshop.com
fukuoka.linx.live
api.wizardtreasure.com
jamesstuddart.co.uk
www.locibook.com
geniosetraquinas.pt
mylifestoriesapp.com
geniosetraquinas.pt
geniosetraquinas.pt
ismailhsici.com
geniosetraquinas.pt
portal.pswfzteile.de
geniosetraquinas.pt
www.longcityjeans.store
www.physicalexam.online
wl.ueue.com.au
ismailhsici.com
www.epassikuva.fi
www.mytfshop.com
geniosetraquinas.pt
www.geniosetraquinas.pt
geniosetraquinas.pt
www.physicalexam.online
geniosetraquinas.pt
wl.ueue.com.au
bencoates.com.au
ismailhsici.com
geniosetraquinas.pt
www.torben.ammelt.com
yz.edm8.co
geniosetraquinas.pt

Certificate

The complete raw certificate details for geniosetraquinas.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h6hrrBU3CDmGWQs5Jdq
7Q48ke4NhaJP9WNoudldQw/zFfvUyAbWooqbZ8lPa1FNQTmk3BGDjOThj7f/hjXD
iAuaYOZBZjj0+MVAxIJayohP7DPUdG7eW4yCkWrSZmeiwGwYQVp4P7XloETH9yiC
OiP5EgsnbUObFZ7Ns5FHaBJZN+B4O0dI20y0ASfAxxwL0DQKO638vYBIzMvCjh1e
HJ4cABy6StpptwbEHk2xmCvjqmacz4LIBLOTsPAa/TYDZ9IZAXm/OodkdSVk3Yms
oNTwuZHtiPzEne5E0QpQ+qlFaeJx0OlkYVTA8VmX4pFoRo6wKRhS1acFbewTqeov
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297474660367609117976245339199512438908042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 03:42:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 03:42:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geniosetraquinas.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27535055473620893430678116494417056011556384964523476423277390338938392347991160792868513422276836518219721838701445798360607380459568669433534842491536987844925799025221791063084315622849833871164705057804658602203627301412367995085930140559003876562123796275207249176848715177186951364128407488505969710207958524936483114757984900169440871083710055729051146229880584494105605023354351709216353900028091040098016137289273099337920937650970133702460132836852850898209896585303193298591289115968427894990478650655608323956744465747675637069412087142128936556233508685439321572540500778019392224310728554431337563041691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b093ab54aef714d457589b3919355a9453a79f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.geniosetraquinas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniosetraquinas.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniosetraquinas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsafety.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geniosetraquinas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.geniosetraquinas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.geniosetraquinas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2get.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geniosetraquinas.2get.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef344270a0000040300473045022054a44fdd969d7497d156e18047cb0ea9abdf5b6d5d723c75107fe74c40a0fe06022100a145665a9ca09bc8b47f24788dd24ac924703f30355f7bbefa99e63b2e9d6d670077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef34427dc0000040300483046022100e61569f63005ffef4c680ccc22fa5e83c468f92ad12c3dc760b7135c440a3da90221009e04c1f4910bc2551c2c16d8ce9e0b067a9368916ef9d5855a822bf7a7485398
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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