mkt.admatosinhos.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:68:ac:17:c5:1d:4c:51:ca:4a:2f:9e:be:f8:82:d3:8a:fd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.admatosinhos.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:ac:17:c5:1d:4c:51:ca:4a:2f:9e:be:f8:82:d3:8a:fd
Serial Number (int): 384067260522877266989178538507889345268477
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:e6:66:64:08:1e:8d:83:d2:c7:5d:00:7b:f9:9b:5b:4a:18:cf:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:c8:03:be:31:ff:43:ae:9b:9b:2d:fd:fe:7a:c3:2b:17:8b:40:ac
Fingerprint (sha256): 08:8f:85:cc:34:26:8f:97:d4:c8:f8:71:c6:4c:16:df:45:9a:b9:14:e1:21:4a:79:f8:97:b0:dd:06:21:0a:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.admatosinhos.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.admatosinhos.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.duasparaum.com
avisos.moedagamer.com.br
campanhas.cca.com.br
cml.unimedcuritiba.com.br
conteudo.encantadoresdepacientes.com.br
egoi.hcpro.es
egoi.wiremaze.com
emailmkt.encantadoresdepacientes.com.br
listas.siteo.one
marketing.sistemadivinaprovidencia.org
mkt.18store.pt
mkt.4gaming.pt
mkt.academiamusical.com.pt
mkt.acbgbrasil.org
mkt.adene.pt
mkt.admatosinhos.pt
mkt.albinofsousa.com
mkt.aleksandrericardo.com.br
mkt.aran.pt
mkt.bazardovideo.biz
mkt.bazardovideo.pt
mkt.bdeimagem.com.br
mkt.boravivermelhor.com.br
mkt.brvmoveis.com.br
mkt.carglass.pt
mkt.casamariademagdala.org
mkt.catim.pt
mkt.cenedcursos.com.br
mkt.centrorevisionircs.it
mkt.comocontrolaradiabetes.com
mkt.costurea.es
mkt.createbusiness.es
mkt.crion.es
mkt.crion.pt
mkt.danielfunchal.com.br
mkt.deta.pt
mkt.dstsgps.com
mkt.edeba.pt
mkt.elementsmosaic.pt
mkt.elzaburu.es
mkt.endosfera.net
mkt.escoladopodcast.com
mkt.fcblegal.com
mkt.fne.pt
mkt.fourheka.pt
mkt.franchizone.com
mkt.funchalacademy.com.br
mkt.ganheagora.com
mkt.graficasobreirense.com
mkt.greenfever.pt
mkt.grupoautoindustrial.pt
mkt.icjp.pt
mkt.ifema.pt
mkt.impresa.pt
mkt.innovpoint.com
mkt.ionlab.com.br
mkt.ipnaturologia.com
mkt.josemigueljudice-arbitration.com
mkt.jpleitao.pt
mkt.kassanel.com
mkt.lavasecomoderno.com
mkt.livrarialello.pt
mkt.lvengine.com
mkt.mdaccula.com
mkt.mediatailors.pt
mkt.municipioseixal.com
mkt.mvituzzo.com.br
mkt.ndcengenharia.pt
mkt.nunopereirahairstudio.com
mkt.oep.pt
mkt.onne.pt
mkt.optec.pt
mkt.ordemdosengenheiros.pt
mkt.peticaodireito.com.br
mkt.plusrepair.com
mkt.rolear.pt
mkt.rolearmais.pt
mkt.sabseg.pt
mkt.salescoaching.com.br
mkt.santodecasa.net
mkt.scmedia.pt
mkt.seedgo.pt
mkt.shoppingvitoria.com.br
mkt.siaeg.com.br
mkt.siimgroup.pt
mkt.soupinto.com
mkt.sul.oep.pt
mkt.topeca.pt
mkt.tpf.pt
mkt.tu.purina.es
mkt.ufp.edu.pt
mkt.vaysanweb.com
mkt.velirh.com.br
mkt.vidanostrilhos.com.br
mkt.viversaudavel.pt
mkt.vpartner.pt
mkt.workview.pt
mkt.worldofdiscoveries.com
news.adstandvirtual.com
news.altamontanha.com

Other certificates including the domain name admatosinhos.pt

(limited to 100 certificates)
mkt.admatosinhos.pt
admatosinhos.pt
newsletter.warepro.pt
admatosinhos.pt
mkt.esdm.com.br
newsletter.warepro.pt
mkt.theplant.com.br
admatosinhos.pt
mkt.theplant.com.br
admatosinhos.pt
newsletter.warepro.pt
admatosinhos.pt
admatosinhos.pt
mkt.admatosinhos.pt
admatosinhos.pt
mkt.esdm.com.br
admatosinhos.pt

Certificate

The complete raw certificate details for mkt.admatosinhos.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRGbH/R7geP9gGbg0csn
rhQPoxA2et7rkHIPwoAIBbwv3omRIiKWSFWIkUuJe2S/rz4K6c69Seyk7YYA0nJX
ILzReJ/QXGSeP785XMLdflZHuXiO5Cr1iaRSlLGWJRwym/WfYUqD3J5p5eNFTaB+
gJdHr5mBwVyWHZeRa79bX//T7t+r8m/+uVO2FF3bFC65XLF9BNyGozCutsOX6SBf
EG77nxAMHjMfItFTP20CUglhd5CbdOomhPThLOUBU0or9Pyc8pH5eXx4D7JPDLu0
ks5g+z8Px72jO2qWEQJknW9xdT4aDGIopk4QBP+S9p815l0Pp1ZZRi38O6BKOjxF
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384067260522877266989178538507889345268477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 08:44:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 08:44:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.admatosinhos.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23362768239370328466411124625757345671513769243984111919559668499753246698543500797926161390571382486803479144309180237021839971722984910834426312314915642888367498886117853113930434817028053931493410442062144290847626793652656292924413764321726336074881350760925152497470494111238328576621506257000868112696869090190755464764584653158043786075770452479396816994386780555357978488207104893197037101444156803705146050529300927784117198967070156166208877597307157869674188789089454735844199603886816781197982296807649089612939116785542499756330455111859734191439928923871961024721494471889848057013587134320074936829311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35e66664081e8d83d2c75d007bf99b5b4a18cf75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.duasparaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisos.moedagamer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.cca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cml.unimedcuritiba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudo.encantadoresdepacientes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.hcpro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.wiremaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailmkt.encantadoresdepacientes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listas.siteo.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.sistemadivinaprovidencia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.18store.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.4gaming.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiamusical.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acbgbrasil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.adene.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admatosinhos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.albinofsousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aleksandrericardo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aran.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bazardovideo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bazardovideo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bdeimagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boravivermelhor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brvmoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.carglass.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casamariademagdala.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.catim.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cenedcursos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centrorevisionircs.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comocontrolaradiabetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.costurea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.createbusiness.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crion.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.danielfunchal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.deta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dstsgps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.edeba.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elementsmosaic.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elzaburu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.endosfera.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escoladopodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fcblegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fne.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fourheka.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.franchizone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.funchalacademy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ganheagora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.graficasobreirense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.greenfever.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupoautoindustrial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.icjp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifema.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.innovpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ionlab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ipnaturologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.josemigueljudice-arbitration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jpleitao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kassanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lavasecomoderno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.livrarialello.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lvengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mdaccula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediatailors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.municipioseixal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mvituzzo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ndcengenharia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nunopereirahairstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oep.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.onne.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.optec.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ordemdosengenheiros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.peticaodireito.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plusrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rolear.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rolearmais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sabseg.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salescoaching.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.santodecasa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scmedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seedgo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.shoppingvitoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.siaeg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.siimgroup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soupinto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sul.oep.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.topeca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tpf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tu.purina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ufp.edu.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vaysanweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.velirh.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vidanostrilhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.viversaudavel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vpartner.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.workview.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.worldofdiscoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.adstandvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.altamontanha.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b422bf8f40000040300473045022100b9fd9cc9416d3b312996db4b018c5f7fbce060c4da2a26795c40a13f14cf8eee022061a3df41f7270bdbaefa921d6ddf697e2fdbe52ab7bf722198d5e82898209da8007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b422bf8fe0000040300473045022100a7882ad8b5e6e66bc4590be024399aee99a205a059cd269ef3eb17fa4e9c769202207b19d45a4f66d1f9cd3344c062a3f2746b312d36c079f5acc22ca6be6a950edc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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