campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7d:6b:33:81:75:34:98:86:f1:54:5c:c1:5e:1e:76:75:21 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:6b:33:81:75:34:98:86:f1:54:5c:c1:5e:1e:76:75:21
Serial Number (int): 304014648488803630647121843374683588031777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:0b:80:6d:fd:06:b0:60:a4:19:89:35:74:c4:1e:b6:d3:18:c9:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:d4:cd:c0:4f:b7:9c:ef:17:22:c2:81:35:7f:45:fe:0d:37:2a:13
Fingerprint (sha256): 0e:e7:6e:8a:3b:ef:f0:40:24:92:cb:b0:e2:b1:cf:6a:af:6d:f2:76:4b:b1:90:37:26:2d:68:fd:79:89:c7:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
com.mapamental.org
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
gstar.cadalist.com.br
info.trademidia.com
marketing.severinomelo.com.br
mkt.acountia.pt
mkt.admancriativa.com.br
mkt.atr.co.pt
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.ciadosbotoes.com.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conaroma.com.br
mkt.csoutdoors.pt
mkt.delgrani.com.br
mkt.eacr.com.br
mkt.ecommerceymarketing.es
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.eurocupon.pt
mkt.europesagem.com
mkt.ferramentasdecoaching.com
mkt.get-ao.com
mkt.gloma.pt
mkt.grupobrasmoto.com.br
mkt.hi-techwonder.com
mkt.iccjp.com
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.npibrasil.com
mkt.ntkglobal.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.primaverabss.com
mkt.proddigital.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.steppr.com.br
mkt.sucessoemvendas.pt
mkt.susanadamaso.com
mkt.tresce.com
mkt.uaume.com
mkt.valepinho.com.br
mkt.vascomarques.net
mkt.youup.pt
mkt.yunit.pt
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.liquidworks.com.br
news.lisbonhotelnews.com
news.musicanocoracao.pt
news.myclinique-nutricao-estetica.com
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.clinicadepele.com.br
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.empregosmanager.pt
newsletter.igoldenvisa.com
newsletter.imt.pt
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pendrives.pt
newsletter.pens.pt
newsletter.pinayas.com
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMwjCCC6qgAwIBAgISA31rM4F1NJiG8VRcwV4ednUhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MjExNTM5NDZaFw0yMTA3MjAxNTM5NDZaMB8xHTAbBgNVBAMT
FGNhbXBhbmhhcy5yaXNlbWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz6Oeb1z6OfVXoXUXizYSdV1FJ9yLCiam67RA1XQw87gscZRZQCC2pkGi
RsW9bcnaw3AQb11In/A5iVJKmmIxr1UGQwYyLfjyKSAlLlNlDB4p4OVnahIXG9cS
YrQDiJ0fiRWbROB12ExcypXjB1em2GlNI+F2cNHI+RKWJWAYEtGFxi2R6blb/Uz+
UEGFDSOYgV9mOfANCmhelQCzJQbAGGWO4PXxNkDXXPhaCJJnT16lH6qFHBveMzk8
9wsEPMFFt/p68mTK1OPJKqBc3qaYcPmSsTC93TaA9NyjKhSQ7mH2gKDdhVGoEyEA
q2FWu+mw6+k3XWq1b9IVWJ2jfiDlLwIDAQABo4IJ4zCCCd8wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBRWC4Bt/QawYKQZiTV0xB620xjJ4DAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCCKQGA1UdEQSCCJswggiXghRjYW1wYW5oYXMucmlzZW1hLmNvbYIS
Y29tLm1hcGFtZW50YWwub3JnghRlZ29pLmluZm8uYXNwYXJ0cy5wdIIWZWdvaS5p
bmZvLmF1dG9zdWVjby5wdIIUZWdvaS5pbmZvLmJpb3NhZmUucHSCEmVnb2kuaW5m
by5ub3JzLmNvbYIVZWdvaS5pbmZvLm9uZWRyaXZlLnB0ghVlZ29pLmluZm8udG9w
dHJ1Y2sucHSCDWVudmlvcy5pb2wucHSCFWdzdGFyLmNhZGFsaXN0LmNvbS5icoIT
aW5mby50cmFkZW1pZGlhLmNvbYIdbWFya2V0aW5nLnNldmVyaW5vbWVsby5jb20u
YnKCD21rdC5hY291bnRpYS5wdIIYbWt0LmFkbWFuY3JpYXRpdmEuY29tLmJygg1t
a3QuYXRyLmNvLnB0ghNta3QuYnJhc2lsYmluZ28uY29tghRta3QuYnV6aW9zLnJq
Lmdvdi5icoIWbWt0LmNhYm9mcmlvLnJqLmdvdi5icoIXbWt0LmNpYWRvc2JvdG9l
cy5jb20uYnKCE21rdC5jbGlja3N1bW1pdC5vcmeCGW1rdC5jbGluaWNhZGFlZHVj
YWNhby5jb22CE21rdC5jb25hcm9tYS5jb20uYnKCEW1rdC5jc291dGRvb3JzLnB0
ghNta3QuZGVsZ3JhbmkuY29tLmJygg9ta3QuZWFjci5jb20uYnKCGm1rdC5lY29t
bWVyY2V5bWFya2V0aW5nLmVzghJta3QuZXJnb21ldHJpY2EucHSCFm1rdC5lc3Bh
Y292aXRhbC5jb20uYnKCEG1rdC5ldXJvY3Vwb24ucHSCE21rdC5ldXJvcGVzYWdl
bS5jb22CHW1rdC5mZXJyYW1lbnRhc2RlY29hY2hpbmcuY29tgg5ta3QuZ2V0LWFv
LmNvbYIMbWt0Lmdsb21hLnB0ghhta3QuZ3J1cG9icmFzbW90by5jb20uYnKCFW1r
dC5oaS10ZWNod29uZGVyLmNvbYINbWt0LmljY2pwLmNvbYIKbWt0Lmludi5wdIIT
bWt0LmpvZ291Z2FuaG91LmNvbYIXbWt0Lmp1ZGljZW9ubGluZS5jb20uYnKCFm1r
dC5sYXlvdXRjcmlhdGl2by5jb22CFm1rdC5saW5rZWRwb3J0dWdhbC5jb22CEm1r
dC5tYW1jYXJ0LmNvbS5icoIPbWt0Lm1hcmthbW9zLnB0ghFta3QubWVkaWFwYWNr
LmNvbYIUbWt0Lm1lZ2EtYWxjYW5jZS5jb22CD21rdC5tdWx0aS1kaS5wdIIQbWt0
Lm15cGV0c2hvcC5wdIIRbWt0Lm5waWJyYXNpbC5jb22CEW1rdC5udGtnbG9iYWwu
Y29tghNta3Qub3Nnb2xpYXJkb3MuY29tghdta3QucGFwZWxhcmlhc2FncmVzLmNv
bYITbWt0LnBtc3BhLnJqLmdvdi5icoIObWt0LnByZXZvaXIucHSCFG1rdC5wcmlt
YXZlcmFic3MuY29tghZta3QucHJvZGRpZ2l0YWwuY29tLmJygg5ta3Quc2FsZXN1
cC5wdIIQbWt0LnNlYWdlbmN5Lm9yZ4IUbWt0LnNpbmFmcmVzcC5vcmcuYnKCEG1r
dC5zb2JhcnJvc28ucHSCE21rdC5zdGFudG9uY2hhc2UucHSCEW1rdC5zdGVwcHIu
Y29tLmJyghZta3Quc3VjZXNzb2VtdmVuZGFzLnB0ghRta3Quc3VzYW5hZGFtYXNv
LmNvbYIObWt0LnRyZXNjZS5jb22CDW1rdC51YXVtZS5jb22CFG1rdC52YWxlcGlu
aG8uY29tLmJyghRta3QudmFzY29tYXJxdWVzLm5ldIIMbWt0LnlvdXVwLnB0ggxt
a3QueXVuaXQucHSCEG1rdC56b25hdmVyZGUucHSCD25ld3MuYXByb2Zlci5wdIIQ
bmV3cy5kZWNlbmlvLmNvbYIMbmV3cy5mZWVkLnB0ghluZXdzLmltcGV0dXN1bmRl
cndlYXIuY29tghduZXdzLmxpcXVpZHdvcmtzLmNvbS5icoIYbmV3cy5saXNib25o
b3RlbG5ld3MuY29tghduZXdzLm11c2ljYW5vY29yYWNhby5wdIIlbmV3cy5teWNs
aW5pcXVlLW51dHJpY2FvLWVzdGV0aWNhLmNvbYIXbmV3cy53ZWJtYXJrZXRpbmdw
dC5jb22CD25ld3Mud2lubmluZy5wdIIZbmV3c2xldHRlci1wdC51c2JzcG90LmNv
bYIfbmV3c2xldHRlci5jbGluaWNhZGVwZWxlLmNvbS5icoIYbmV3c2xldHRlci5j
bWN2aXN1YWwuY29tghhuZXdzbGV0dGVyLmRldXRlci5jb20uYnKCH25ld3NsZXR0
ZXIuZWNvbW1lcmNlbmV3cy5jb20uYnKCHW5ld3NsZXR0ZXIuZW1wcmVnb3NtYW5h
Z2VyLnB0ghpuZXdzbGV0dGVyLmlnb2xkZW52aXNhLmNvbYIRbmV3c2xldHRlci5p
bXQucHSCFG5ld3NsZXR0ZXIubmVzdGxlLnB0ghRuZXdzbGV0dGVyLm9naWx2eS5w
dIITbmV3c2xldHRlci5vaWtvcy5wdIIXbmV3c2xldHRlci5vcmlkcmVpYS5jb22C
F25ld3NsZXR0ZXIucGVuZHJpdmVzLnB0ghJuZXdzbGV0dGVyLnBlbnMucHSCFm5l
d3NsZXR0ZXIucGluYXlhcy5jb22CFm5ld3NsZXR0ZXIudXNic3BvdC5jb22CFm5l
d3NsZXR0ZXIudmFsc291c2EucHSCJG5ld3NsZXR0ZXJzLmFzYy1hZHZhbmNlZHNr
aW5jYXJlLmNvbYIZbmV3c2xldHRlcnMuc29jaWFsdGltZS5wdIIYcHJpbWF2ZXJh
LmNyZWF0ZWluZm9yLnB0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlWhipLKaoL2Cq
vfVLMDUwjYEN2GKXLzMHeXQe5mx+birzR6YQB50sDriEI3DHc7l9BhN8Gg6usJR6
6O6Xyhu/obgW2VYRMhdMWfCLEUaP0LI5gAHc//w25lcNGTY8a9wIrnQ8t45+Ae2N
HTxPmhpHKvMHzzN4wHoYC+u/H3NuO7hsNCPK45b9z0xqw7YYwtZCmDvZwYRvZ2no
S0prSC8j1KvcqCpY/CSgogSrM/VOaK0PguZ4d0JwZVnz+Ao7xe+GzYgXzrORKyAq
Z5kK0eGfSV/HxGfPdjR696DYlYpFGn7WagI+HPzjdly45etr/Iu6GgvZrLQAQ5V8
V87Kzcwn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Oeb1z6OfVXoXUXizYS
dV1FJ9yLCiam67RA1XQw87gscZRZQCC2pkGiRsW9bcnaw3AQb11In/A5iVJKmmIx
r1UGQwYyLfjyKSAlLlNlDB4p4OVnahIXG9cSYrQDiJ0fiRWbROB12ExcypXjB1em
2GlNI+F2cNHI+RKWJWAYEtGFxi2R6blb/Uz+UEGFDSOYgV9mOfANCmhelQCzJQbA
GGWO4PXxNkDXXPhaCJJnT16lH6qFHBveMzk89wsEPMFFt/p68mTK1OPJKqBc3qaY
cPmSsTC93TaA9NyjKhSQ7mH2gKDdhVGoEyEAq2FWu+mw6+k3XWq1b9IVWJ2jfiDl
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304014648488803630647121843374683588031777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-21 15:39:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-20 15:39:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26212012608153663519783570941679262055161374262745687807362331914637844328816656559968065677714264165026074456713235225328013597800905736692248833284718555146699189408381699682537577567781227944469689006232678938954174032225444807311306021417337465788233059773610712350611328276943127805384609132329314654685283897091804281023871375998189197084070615288155199190118766769082881220184022031012725107804151312987803023295519601110574662031454636545113690501901838119393263429022696865377665940307136611206113347092386301281425383273913856461020542335281295470183266737843791398576517355541956702895934399679212680176943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							560b806dfd06b060a419893574c41eb6d318c9e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.mapamental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstar.cadalist.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acountia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciadosbotoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conaroma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.delgrani.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ecommerceymarketing.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.get-ao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupobrasmoto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hi-techwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ntkglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.primaverabss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.steppr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.susanadamaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valepinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yunit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.lisbonhotelnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.myclinique-nutricao-estetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.clinicadepele.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.empregosmanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.imt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pendrives.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pens.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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