campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 04:76:1f:c5:3d:c6:d7:73:a0:1b:c8:65:ce:85:44:10:68:ba was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:1f:c5:3d:c6:d7:73:a0:1b:c8:65:ce:85:44:10:68:ba
Serial Number (int): 388644693227043030088524859314145187621050
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:92:ce:2b:ee:db:32:f5:8f:e8:07:6a:c7:e0:d9:ae:a1:7d:66:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:ed:b6:c0:ad:f6:24:84:dc:53:78:ad:ce:de:de:db:dd:8f:c6:1e
Fingerprint (sha256): 04:96:4f:4b:20:7c:cc:fe:94:9e:5a:e5:7c:0e:40:51:8b:4b:e3:93:52:22:bd:fe:50:5e:f0:05:df:56:be:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.galius.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
info.trademidia.com
mail.newsletter.rtp.pt
mkt.abert.org.br
mkt.abimota.pt
mkt.academiapedrosousa.pt
mkt.afp.pt
mkt.alertaemprego.pt
mkt.aplicarconteudosaude.com.br
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.balancasonline.com
mkt.balanzasmarques.es
mkt.blueandgreen.com
mkt.brasilbingo.com
mkt.brunosousa.pt
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.centraldelhogar.com
mkt.consum.es
mkt.csoutdoors.pt
mkt.e-primatur.com
mkt.eacr.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.europesagem.com
mkt.f1flash.com
mkt.ferramentasdecoaching.com
mkt.fotocristal-3d.pt
mkt.galpenergia.com
mkt.globelinkportugal.com
mkt.gloma.pt
mkt.harmonizando.com
mkt.hipnoterapiasocial.com.br
mkt.imacustica.pt
mkt.incofios.net
mkt.intersea.com.br
mkt.inv.pt
mkt.jogouganhou.com
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.lojadasmeias.pt
mkt.maisamigas.com.br
mkt.mega-alcance.com
mkt.mobilscan.pt
mkt.mtb.es
mkt.npibrasil.com
mkt.olicargo.com
mkt.pacsis.pt
mkt.pmspa.rj.gov.br
mkt.pontual.pt
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.relacre.pt
mkt.route66.com.br
mkt.salesup.pt
mkt.serrasconsulting.pt
mkt.sindsep-pe.com.br
mkt.slr.pt
mkt.sobarroso.pt
mkt.sptf.pt
mkt.spzn.pt
mkt.tejobrinde.pt
mkt.uaume.com
mkt.uonangola.com
mkt.uonequipamentos.com
mkt.uonsubastas.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.worldacademy.pt
mkt.wsenglish.email
mkt.xzconsultores.pt
mkt.youup.pt
mkt.zantia.com
mkt.zonacerealista.com.br
mkt.zonaverde.pt
news.musicanocoracao.pt
news.standnacional.com
news.webmarketingpt.com
news.xd.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pinayas.com
newsletter.timing.pt
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBDTjtLYPQ+/w9+VzNS5
3Ul6zWM62D9B4uV0/jsC4AF/0flJ6dGlmQRga7ZUYe4XGfPpTI0vtxiOAmeDP0il
uo5qPtajjtB15xqBBrtRiUC4LuW3MSr5UCVon2euLKuvgLtDWF20/pc8u4gSQUhs
b/Zzd1sGr8Y6D7CnqcGOIyXAL7dP4QEQm8sGU4LFcA3AWtpRsL3J2tbXInvQTLWi
0+oONeJBvjoS8Imf8zoHPBJidPsMBoC/3mPu95DdzKxV4jDzrl8vzL0vUI5bnIb2
qyOxpPqnrL/WWTBPffm7Q2TZM1SMhHBDec2//mv2hqYE0I55RhD0obrd6UR/x45P
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388644693227043030088524859314145187621050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 15:35:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 15:35:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23741098739753616220497557124275858637047617385130531622947532296309282313779725607348651391352972564777480988978617538352421629435171200293338798858729145467773931681148356551134942648216964662443916433352178734862578490423313891865879261391399089085501194726166243089117550414700786059263726991251467730103603084267742782739831467719414012992847686938476822458451198184361261651508699250971442462940065815680832947122870042984663229184073985403394070538011161536817142907600771977127744703624699729842817476900664770651652247490904911254627264382720023456659464382485618360597370527463758037701716680864492552081167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8592ce2beedb32f58fe8076ac7e0d9aea17d66fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.galius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.newsletter.rtp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abert.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abimota.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiapedrosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alertaemprego.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aplicarconteudosaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balancasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blueandgreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brunosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centraldelhogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.consum.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.e-primatur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.f1flash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fotocristal-3d.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.galpenergia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globelinkportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.harmonizando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hipnoterapiasocial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imacustica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.incofios.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intersea.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojadasmeias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisamigas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mobilscan.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mtb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pacsis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontual.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.relacre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.route66.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sindsep-pe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.slr.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sptf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spzn.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonequipamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonsubastas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.worldacademy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wsenglish.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonacerealista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standnacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.xd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.timing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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