mkt.gears.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:2e:61:74:d7:bb:e5:bb:f6:8c:52:f8:ef:75:39:4f:4b:92 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.gears.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:61:74:d7:bb:e5:bb:f6:8c:52:f8:ef:75:39:4f:4b:92
Serial Number (int): 277119388471275466614808115254970243042194
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:8a:3d:cf:f1:bc:ca:a6:57:51:61:dc:fb:d7:d1:40:94:97:6b:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:20:fa:e8:69:ec:ff:d7:ba:7f:a2:37:93:0c:a3:88:ed:b8:a3:a1
Fingerprint (sha256): 07:c2:c6:8d:ee:7f:51:00:8a:dc:fb:84:23:b9:7f:96:36:40:91:ef:04:94:81:bc:ee:2c:1f:09:91:72:26:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.gears.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.gears.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunicacao.theatrocirco.com
contato.camtecnologia.com.br
eg.tarot-tirage.com
info.spacointerior.com.br
materiais.formacaonline.com
mkt-b.mktrip.com
mkt.a2gseguros.com.br
mkt.acivc.pt
mkt.advogado-pr.adv.br
mkt.aeamesp.org.br
mkt.agebb.com.br
mkt.airv.pt
mkt.ajaguiar.com
mkt.alphashirt.pt
mkt.amtools.pt
mkt.aquarismomarinho.com.br
mkt.artebel.pt
mkt.barbocol.pt
mkt.boletim.adv.br
mkt.brahmi.pt
mkt.brancacomercio.com.br
mkt.brindouro.com
mkt.byconsumerhealth.com
mkt.bywomenshealthcare.com
mkt.cabazesgourmet.com
mkt.castroelectronica.pt
mkt.celiajorgeteixeira.com
mkt.chefpanda.pt
mkt.ciejd.pt
mkt.ciiias.es
mkt.cm-alcanena.pt
mkt.colegioseal.com.br
mkt.contera.pt
mkt.coolpack.pt
mkt.corretor.digital
mkt.covioriente.co
mkt.criticaltechworks.com
mkt.digitalxperience.pt
mkt.domkapa.pt
mkt.economus.com.br
mkt.educadigital.org.br
mkt.egitron.pt
mkt.embalagensvip.com.br
mkt.esquicocriativo.com
mkt.executivedigest.pt
mkt.farmacia.pt
mkt.freudexplicado.com
mkt.gears.com.br
mkt.girosworld.com
mkt.gtmotive.net
mkt.guiadoconstrutor.com.br
mkt.guiamaritimo.com.br
mkt.h9j.com.br
mkt.iaexpert.com.br
mkt.iberregalos.com
mkt.ijca.org.br
mkt.institutoimersao.com.br
mkt.interescape.com
mkt.lastlap.pt
mkt.lotusxamanismo.com.br
mkt.lptechnologies.eu
mkt.machado-malcher.pt
mkt.madecentro.co
mkt.mastercnc.pt
mkt.medd-design.com
mkt.medis.co.mz
mkt.mensagens.trilhoperdido.com
mkt.milfarma.com.br
mkt.newchoice.com.br
mkt.oab-brusque.org.br
mkt.octoxb.com
mkt.outletbrindes.com
mkt.pizza44.pt
mkt.previnorte.com.br
mkt.protdesc.com.br
mkt.psicologo.com.br
mkt.psicologosberrini.com.br
mkt.regalospromocionalesoutlet.com
mkt.ribalta.com.br
mkt.sandraoliveira.net
mkt.santogal.info
mkt.saparada.com.br
mkt.science4you.pt
mkt.shark-helmets.com
mkt.sirtile.com
mkt.sitape.pt
mkt.skincc.eu
mkt.smotion.pt
mkt.soprodivinomusical.com.br
mkt.superafiliados.com
mkt.trophy-group.com
mkt.unesc.net
mkt.unicadeaux.com
mkt.unl.pt
mkt.valgo.es
mkt.vexillum.pt
mkt.zm.com.br
news.brandsibuy.com
news.marketeer.pt
paulamkt.sejaphd.com

Other certificates including the domain name gears.com.br

(limited to 100 certificates)
gears.com.br
mkt.eurosys.pt
dev.gears.com.br
mkt.gears.com.br
www.gears.com.br
monteseubox.gears.com.br
gears.com.br
mkt.timeforchangenow.com.br
mkt.segbox.com
monteseubox.gears.com.br
www.gears.com.br
dev.gears.com.br
gears.com.br
dev.gears.com.br
monteseubox.gears.com.br
gears.com.br
gears.com.br
gears.com.br
gears.com.br
mkt.spmastologia.com.br
www.gears.com.br
gears.com.br
monteseubox.gears.com.br
mkt.sejaphd.com
gears.com.br
dev.gears.com.br
monteseubox.gears.com.br
gears.com.br
dev.gears.com.br
mkt.spmastologia.com.br
gears.com.br
mkt.baeta.com.br

Certificate

The complete raw certificate details for mkt.gears.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINJzCCDA+gAwIBAgISAy5hdNe75bv2jFL473U5T0uSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDEwMjE4MDNaFw0yNDA1MzAwMjE4MDJaMBsxGTAXBgNVBAMT
EG1rdC5nZWFycy5jb20uYnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDICxSE9HUBlddmiwz5BJRtnhTmy1Uwn1litJiHTGazPk569NGUh18s/UnVBzTw
shiwGDlmuZgepKqJeDKA4gg4NsDxqYOFPPq6UpJA6mbwlf7AS0/SUhy9tKUosxYK
HpM6jd3eECCBr58E62kL32wk7YXgRxsIAvsGOpA5jHj+0fQWG3UqQPSkqo/NOo+/
9XmoxthiaMTMXak/l1x3lwDYq7CU+D1cqq81g0QBrLBBrddHWB3pTSM1JfmPxlVk
EiiTD82lPm3PEAm04Q43uUtXgjKIjzREYePE19Fhmi87fFKd4/Cct6A7kQiauz/D
mi8cmPJ3lN4XrZBrLx7rvTpXAgMBAAGjggpMMIIKSDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFFeKPc/xvMqmV1Fh3PvX0UCUl2ueMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIIIUQYDVR0RBIIISDCCCESCHGNvbXVuaWNhY2FvLnRoZWF0cm9jaXJjby5j
b22CHGNvbnRhdG8uY2FtdGVjbm9sb2dpYS5jb20uYnKCE2VnLnRhcm90LXRpcmFn
ZS5jb22CGWluZm8uc3BhY29pbnRlcmlvci5jb20uYnKCG21hdGVyaWFpcy5mb3Jt
YWNhb25saW5lLmNvbYIQbWt0LWIubWt0cmlwLmNvbYIVbWt0LmEyZ3NlZ3Vyb3Mu
Y29tLmJyggxta3QuYWNpdmMucHSCFm1rdC5hZHZvZ2Fkby1wci5hZHYuYnKCEm1r
dC5hZWFtZXNwLm9yZy5icoIQbWt0LmFnZWJiLmNvbS5icoILbWt0LmFpcnYucHSC
EG1rdC5hamFndWlhci5jb22CEW1rdC5hbHBoYXNoaXJ0LnB0gg5ta3QuYW10b29s
cy5wdIIbbWt0LmFxdWFyaXNtb21hcmluaG8uY29tLmJygg5ta3QuYXJ0ZWJlbC5w
dIIPbWt0LmJhcmJvY29sLnB0ghJta3QuYm9sZXRpbS5hZHYuYnKCDW1rdC5icmFo
bWkucHSCGW1rdC5icmFuY2Fjb21lcmNpby5jb20uYnKCEW1rdC5icmluZG91cm8u
Y29tghhta3QuYnljb25zdW1lcmhlYWx0aC5jb22CGm1rdC5ieXdvbWVuc2hlYWx0
aGNhcmUuY29tghZta3QuY2FiYXplc2dvdXJtZXQuY29tghhta3QuY2FzdHJvZWxl
Y3Ryb25pY2EucHSCGm1rdC5jZWxpYWpvcmdldGVpeGVpcmEuY29tghBta3QuY2hl
ZnBhbmRhLnB0ggxta3QuY2llamQucHSCDW1rdC5jaWlpYXMuZXOCEm1rdC5jbS1h
bGNhbmVuYS5wdIIWbWt0LmNvbGVnaW9zZWFsLmNvbS5icoIObWt0LmNvbnRlcmEu
cHSCD21rdC5jb29scGFjay5wdIIUbWt0LmNvcnJldG9yLmRpZ2l0YWyCEm1rdC5j
b3Zpb3JpZW50ZS5jb4IZbWt0LmNyaXRpY2FsdGVjaHdvcmtzLmNvbYIXbWt0LmRp
Z2l0YWx4cGVyaWVuY2UucHSCDm1rdC5kb21rYXBhLnB0ghNta3QuZWNvbm9tdXMu
Y29tLmJyghdta3QuZWR1Y2FkaWdpdGFsLm9yZy5icoIObWt0LmVnaXRyb24ucHSC
GG1rdC5lbWJhbGFnZW5zdmlwLmNvbS5icoIXbWt0LmVzcXVpY29jcmlhdGl2by5j
b22CFm1rdC5leGVjdXRpdmVkaWdlc3QucHSCD21rdC5mYXJtYWNpYS5wdIIWbWt0
LmZyZXVkZXhwbGljYWRvLmNvbYIQbWt0LmdlYXJzLmNvbS5icoISbWt0Lmdpcm9z
d29ybGQuY29tghBta3QuZ3Rtb3RpdmUubmV0ghtta3QuZ3VpYWRvY29uc3RydXRv
ci5jb20uYnKCF21rdC5ndWlhbWFyaXRpbW8uY29tLmJygg5ta3QuaDlqLmNvbS5i
coITbWt0LmlhZXhwZXJ0LmNvbS5icoITbWt0LmliZXJyZWdhbG9zLmNvbYIPbWt0
LmlqY2Eub3JnLmJyghtta3QuaW5zdGl0dXRvaW1lcnNhby5jb20uYnKCE21rdC5p
bnRlcmVzY2FwZS5jb22CDm1rdC5sYXN0bGFwLnB0ghlta3QubG90dXN4YW1hbmlz
bW8uY29tLmJyghVta3QubHB0ZWNobm9sb2dpZXMuZXWCFm1rdC5tYWNoYWRvLW1h
bGNoZXIucHSCEW1rdC5tYWRlY2VudHJvLmNvghBta3QubWFzdGVyY25jLnB0ghNt
a3QubWVkZC1kZXNpZ24uY29tgg9ta3QubWVkaXMuY28ubXqCH21rdC5tZW5zYWdl
bnMudHJpbGhvcGVyZGlkby5jb22CE21rdC5taWxmYXJtYS5jb20uYnKCFG1rdC5u
ZXdjaG9pY2UuY29tLmJyghZta3Qub2FiLWJydXNxdWUub3JnLmJygg5ta3Qub2N0
b3hiLmNvbYIVbWt0Lm91dGxldGJyaW5kZXMuY29tgg5ta3QucGl6emE0NC5wdIIV
bWt0LnByZXZpbm9ydGUuY29tLmJyghNta3QucHJvdGRlc2MuY29tLmJyghRta3Qu
cHNpY29sb2dvLmNvbS5icoIcbWt0LnBzaWNvbG9nb3NiZXJyaW5pLmNvbS5icoIi
bWt0LnJlZ2Fsb3Nwcm9tb2Npb25hbGVzb3V0bGV0LmNvbYISbWt0LnJpYmFsdGEu
Y29tLmJyghZta3Quc2FuZHJhb2xpdmVpcmEubmV0ghFta3Quc2FudG9nYWwuaW5m
b4ITbWt0LnNhcGFyYWRhLmNvbS5icoISbWt0LnNjaWVuY2U0eW91LnB0ghVta3Qu
c2hhcmstaGVsbWV0cy5jb22CD21rdC5zaXJ0aWxlLmNvbYINbWt0LnNpdGFwZS5w
dIINbWt0LnNraW5jYy5ldYIObWt0LnNtb3Rpb24ucHSCHW1rdC5zb3Byb2Rpdmlu
b211c2ljYWwuY29tLmJyghZta3Quc3VwZXJhZmlsaWFkb3MuY29tghRta3QudHJv
cGh5LWdyb3VwLmNvbYINbWt0LnVuZXNjLm5ldIISbWt0LnVuaWNhZGVhdXguY29t
ggpta3QudW5sLnB0ggxta3QudmFsZ28uZXOCD21rdC52ZXhpbGx1bS5wdIINbWt0
LnptLmNvbS5icoITbmV3cy5icmFuZHNpYnV5LmNvbYIRbmV3cy5tYXJrZXRlZXIu
cHSCFHBhdWxhbWt0LnNlamFwaGQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
BgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A
DS1yb+H61BcAAAGN+ATaHwAABAMASDBGAiEAltY0DRk/WsUMEq+JjkIGShIE/Ui4
VZaheV3fGlE/pK8CIQD6FjKgZ8tGcB2wgaPwAJULeO3tD7Xg8RaMC0dkgPRP4wB3
AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjfgE2mwAAAQDAEgw
RgIhAKRZdkb7ZBb+g+4k+ZhLcsWB9ous2kqiACA970icfuQ0AiEA+D4S7QFwBegu
iLS40JGAUFBLvGdnj6iAMjy6kSS7MHIwDQYJKoZIhvcNAQELBQADggEBAAYV1G8i
xQRqMNxorrRl2QrscxM3gpzTE+hzBCGPLl0vf4zs04K3WVCzktmuib4uCEe216zb
H1HN0pF2UI72qyyTLqw7BpIFbdDQBWR+2P+m9OJllsGJRv0RSE1nnDDjJ9N6wOXx
A7ukURWN85DmHJ/kdo7NvS4fkR4cf6IOzz4jYdAQ/uIcSi/kZS8RofsYzoig5n/Y
cNajT8gXI9PCrV7xsc8uXj4LfjyqGXRgJRhbH6F4AV+X/fprPq1vjQ7Fl9bG486c
/BcYp1pPQUgemQmbbrVVHllrIfrSa8LNRhR4wfNvgPPdJDVRU8C9ejVPHUtPh8H9
7RDPVeabRRPLYBo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAsUhPR1AZXXZosM+QSU
bZ4U5stVMJ9ZYrSYh0xmsz5OevTRlIdfLP1J1Qc08LIYsBg5ZrmYHqSqiXgygOII
ODbA8amDhTz6ulKSQOpm8JX+wEtP0lIcvbSlKLMWCh6TOo3d3hAgga+fBOtpC99s
JO2F4EcbCAL7BjqQOYx4/tH0Fht1KkD0pKqPzTqPv/V5qMbYYmjEzF2pP5dcd5cA
2KuwlPg9XKqvNYNEAaywQa3XR1gd6U0jNSX5j8ZVZBIokw/NpT5tzxAJtOEON7lL
V4IyiI80RGHjxNfRYZovO3xSnePwnLegO5EImrs/w5ovHJjyd5TeF62Qay8e6706
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277119388471275466614808115254970243042194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 02:18:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 02:18:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.gears.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25253124820656084733411453554481740740396907441899353222413563047901180671720967094519793815828042450414172998672486610348360612644790262485478478287314018028212272781638212719242278056343770716720180011572064161853444756024657625460837647050108436589023934120476649055930571646226333655540319120272252955130294632477271867666997471881795762798464094872135336573583034039342416997080713896532731440476409919771584564535371061075434139446165206378671378902527301398465757869378465712689017795834715122462555640626747303242720936030009185939430006190240542290457636131298037456791368172373924516829882512871670459218519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							578a3dcff1bccaa6575161dcfbd7d14094976b9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.theatrocirco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contato.camtecnologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eg.tarot-tirage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.spacointerior.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materiais.formacaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-b.mktrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.a2gseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acivc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advogado-pr.adv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aeamesp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agebb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.airv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ajaguiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alphashirt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amtools.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aquarismomarinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.artebel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.barbocol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boletim.adv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brahmi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brancacomercio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brindouro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.byconsumerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bywomenshealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabazesgourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.castroelectronica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.celiajorgeteixeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chefpanda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciejd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciiias.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-alcanena.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.colegioseal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contera.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.coolpack.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.corretor.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.covioriente.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.criticaltechworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalxperience.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.domkapa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.economus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.educadigital.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.egitron.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.embalagensvip.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esquicocriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.executivedigest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.farmacia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.freudexplicado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gears.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.girosworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gtmotive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.guiadoconstrutor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.guiamaritimo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.h9j.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iaexpert.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iberregalos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ijca.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.institutoimersao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.interescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lastlap.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusxamanismo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lptechnologies.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.machado-malcher.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.madecentro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mastercnc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.medd-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.medis.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mensagens.trilhoperdido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.milfarma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.newchoice.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oab-brusque.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.octoxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.outletbrindes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pizza44.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.previnorte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.protdesc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psicologo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psicologosberrini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.regalospromocionalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ribalta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sandraoliveira.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.santogal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saparada.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.science4you.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.shark-helmets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sirtile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sitape.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.skincc.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.smotion.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soprodivinomusical.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.superafiliados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.trophy-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unesc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unicadeaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unl.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valgo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vexillum.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.brandsibuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.marketeer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulamkt.sejaphd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df804da1f000004030048304602210096d6340d193f5ac50c12af898e42064a1204fd48b85596a1795ddf1a513fa4af022100fa1632a067cb46701db081a3f000950b78eded0fb5e0f1168c0b476480f44fe300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018df804da6c0000040300483046022100a4597646fb6416fe83ee24f9984b72c581f68bacda4aa200203def489c7ee434022100f83e12ed017005e82e88b4b8d0918050504bbc67678fa880323cba9124bb3072
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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