mkt.timeforchangenow.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:26:50:43:1a:0a:5c:73:cf:40:1c:a9:ad:fc:8d:68:c4:e3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.timeforchangenow.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:50:43:1a:0a:5c:73:cf:40:1c:a9:ad:fc:8d:68:c4:e3
Serial Number (int): 361486560321752507247558661975794382324963
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 82:17:ea:fb:4b:e1:ae:a0:64:1d:b6:3b:7a:47:1e:ce:80:1b:68:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:d3:b1:2d:15:dd:74:c9:89:59:18:73:eb:b6:21:80:8a:e0:b2:6a
Fingerprint (sha256): 1d:28:d7:56:7c:75:25:ff:9d:d8:63:2c:60:30:78:30:b4:70:9b:b3:93:b9:2d:2c:9e:d2:e3:b6:b9:68:d6:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.timeforchangenow.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.timeforchangenow.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunicacao.theatrocirco.com
contato.camtecnologia.com.br
eg.tarot-tirage.com
info.spacointerior.com.br
materiais.formacaonline.com
mkt-b.mktrip.com
mkt.a2gseguros.com.br
mkt.acivc.pt
mkt.aeamesp.org.br
mkt.airv.pt
mkt.ajaguiar.com
mkt.alphashirt.pt
mkt.amtools.pt
mkt.animacontabil.com.br
mkt.artebel.pt
mkt.barbocol.pt
mkt.brancacomercio.com.br
mkt.brindouro.com
mkt.byconsumerhealth.com
mkt.bywomenshealthcare.com
mkt.cabazesgourmet.com
mkt.castroelectronica.pt
mkt.chefpanda.pt
mkt.ciejd.pt
mkt.cm-alcanena.pt
mkt.colegioseal.com.br
mkt.contera.pt
mkt.coolpack.pt
mkt.corretor.digital
mkt.covioriente.co
mkt.criaplac.com
mkt.criticaltechworks.com
mkt.digitalxperience.pt
mkt.economus.com.br
mkt.ecp.ec
mkt.educadigital.org.br
mkt.egitron.pt
mkt.embalagensvip.com.br
mkt.esquicocriativo.com
mkt.executivedigest.pt
mkt.farmacia.pt
mkt.freudexplicado.com
mkt.gears.com.br
mkt.girosworld.com
mkt.grupobm.pt
mkt.gtmotive.net
mkt.guiadoconstrutor.com.br
mkt.guiamaritimo.com.br
mkt.h9j.com.br
mkt.iaexpert.com.br
mkt.iberregalos.com
mkt.icsporto.com
mkt.ijca.org.br
mkt.institutoimersao.com.br
mkt.interescape.com
mkt.lastlap.pt
mkt.lotusxamanismo.com.br
mkt.lptechnologies.eu
mkt.madecentro.co
mkt.maisdados.com.br
mkt.mastercnc.pt
mkt.medd-design.com
mkt.medis.co.mz
mkt.newchoice.com.br
mkt.oab-brusque.org.br
mkt.octoxb.com
mkt.outletbrindes.com
mkt.pizza44.pt
mkt.previnorte.com.br
mkt.prooptica.pt
mkt.protdesc.com.br
mkt.psicologo.com.br
mkt.psicologosberrini.com.br
mkt.regalospromocionalesoutlet.com
mkt.ribalta.com.br
mkt.sandraoliveira.net
mkt.saparada.com.br
mkt.science4you.pt
mkt.shark-helmets.com
mkt.sirtile.com
mkt.sitape.pt
mkt.smotion.pt
mkt.soprodivinomusical.com.br
mkt.spmastologia.com.br
mkt.steelground.pt
mkt.superafiliados.com
mkt.timeforchangenow.com.br
mkt.trophy-group.com
mkt.unesc.net
mkt.unicadeaux.com
mkt.unl.pt
mkt.valgo.es
mkt.vexillum.pt
mkt.wepad.pt
mkt.youbrand.company
mkt.zm.com.br
news.brandsibuy.com
news.marketeer.pt
nl.acp.pt
paulamkt.sejaphd.com

Other certificates including the domain name timeforchangenow.com.br

(limited to 100 certificates)
www.timeforchangenow.com.br
mkt.eurosys.pt
www.timeforchangenow.com.br
mkt.timeforchangenow.com.br
www.timeforchangenow.com.br
mkt.segbox.com
www.timeforchangenow.com.br
www.timeforchangenow.com.br
newsletter.openquest.pt
www.timeforchangenow.com.br
www.timeforchangenow.com.br
mkt.sejaphd.com
mkt.wellbcolchoes.com.br
www.timeforchangenow.com.br
mkt.baeta.com.br

Certificate

The complete raw certificate details for mkt.timeforchangenow.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbYjUt2Wnpb/uHmV80o
Op3V5jt+SgAnw+6jY0pGmpsYTO2LXqfSW/I4Bacl61Mqd54b0pdxjQei3I7dQiWr
0ykCUFAzDsloaMSEhixLC+nXGZJuqM/uwtmg0K8na6UnKeZNnqLr7JMIDIG9VnsN
jle3PMZA8BlFSjVGjzKop2ZofYJauXHByYMotVRp/FZdCNgX5HGkwJ1Qt/8GfrOr
A1l4FZ4T7RG2JAYcvyL7Wu/p8XzphY5coIWvLlZ4ULaX2FaB2Yzlnse5ps0RRlLS
l1IoFlRfanIA1dIuyc1k/oCepX12a4cqy/x+QhVAlrL/aIY1k2HfXNHnv6uLU8CQ
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361486560321752507247558661975794382324963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 10:05:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:05:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.timeforchangenow.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22505353702261575916330427234353478121842934292783552680169601844219155314110323243624891687024275718496830386265361888887613497642845603442486791175317790849200721456019757850343859593568936940560582996803230558602342086258300701856399909606216940020575977283626500655850556736427485024928642748010054050973111330320857599999841037058016900713820782067916532602169366396848797537238275247799555139839994068891480511180631372404884584007002623342353257088855766740707473514921483529929041110791281551469823642876279758471902528885712171899661399990839734988807091937436474274959520740960635055690420671509141347405873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8217eafb4be1aea0641db63b7a471ece801b6839
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2094 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.theatrocirco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contato.camtecnologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eg.tarot-tirage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.spacointerior.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materiais.formacaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-b.mktrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.a2gseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acivc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aeamesp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.airv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ajaguiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alphashirt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amtools.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.animacontabil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.artebel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.barbocol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brancacomercio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brindouro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.byconsumerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bywomenshealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabazesgourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.castroelectronica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chefpanda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciejd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-alcanena.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.colegioseal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contera.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.coolpack.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.corretor.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.covioriente.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.criaplac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.criticaltechworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalxperience.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.economus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ecp.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.educadigital.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.egitron.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.embalagensvip.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esquicocriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.executivedigest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.farmacia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.freudexplicado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gears.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.girosworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupobm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gtmotive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.guiadoconstrutor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.guiamaritimo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.h9j.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iaexpert.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iberregalos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.icsporto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ijca.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.institutoimersao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.interescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lastlap.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusxamanismo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lptechnologies.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.madecentro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisdados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mastercnc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.medd-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.medis.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.newchoice.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oab-brusque.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.octoxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.outletbrindes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pizza44.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.previnorte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prooptica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.protdesc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psicologo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psicologosberrini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.regalospromocionalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ribalta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sandraoliveira.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saparada.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.science4you.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.shark-helmets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sirtile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sitape.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.smotion.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soprodivinomusical.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spmastologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.steelground.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.superafiliados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.timeforchangenow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.trophy-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unesc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unicadeaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unl.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valgo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vexillum.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wepad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youbrand.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.brandsibuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.marketeer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.acp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulamkt.sejaphd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bae9b88680000040300463044022063715ceaea8da3f454249452c8599d1a2352dac3808e338900a7793b75edb57b0220093befaa51d27f24125a0d8f15df9a5c038edc1a9ae57fe0a71ee6c25f16ac7400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bae9b88a50000040300483046022100dfa5919e902ae4c09c0387679886622a02184f1a42ca30c57790f2ce0bd9a32d0221008be5619a9c536ec0b97004be00632aa59c5a8ad37cec4f97fd79a589a9b87280
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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