mkt.descobrimentos.com.pt

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:c3:8e:06:fb:69:9e:ce:34:94:5c:8a:ef:80:c6:e7:99 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.descobrimentos.com.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:c3:8e:06:fb:69:9e:ce:34:94:5c:8a:ef:80:c6:e7:99
Serial Number (int): 328292138618730063642511143630103260882841
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:ff:d4:1d:57:69:ea:2b:18:ea:a4:5b:9c:6e:1a:65:17:2a:68:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5e:94:0b:60:bf:4c:76:6f:fc:4c:7f:21:cb:6f:a0:e0:2b:6a:9d:a4
Fingerprint (sha256): 2e:88:71:65:b0:34:ff:d8:ce:a1:fa:45:b5:8c:9a:4b:20:c8:af:43:21:71:60:76:f9:e9:00:87:b8:c6:20:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.descobrimentos.com.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.descobrimentos.com.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunicacao.saudeocupacional.portoseguro.com.br
comunicacao.sauderelacionamento.portoseguro.com.br
egoimkt.smartmove.pt
ip.digitalgreen.pt
marketing.apdrone.pt
marketing.cazachic.com.br
marketing.certform.pt
mkt.4um.com.br
mkt.709mediaroom.com
mkt.activewhere.com
mkt.advid.pt
mkt.agilstore.pt
mkt.agris.pt
mkt.alegro.pt
mkt.almacla.pt
mkt.ampereenergy.pt
mkt.ancap.org.pt
mkt.apartidaria.pt
mkt.associacaobeselguense.pt
mkt.autoserver.com.br
mkt.bedivar.pt
mkt.belodigital.com
mkt.benericks.com.br
mkt.biocabaz.pt
mkt.casinosgrupovicca.com
mkt.cena-ste.org
mkt.cinanima.pt
mkt.cm-gaia.pt
mkt.cm-lourinha.pt
mkt.corinto-retail.com
mkt.dataset.pt
mkt.descobrimentos.com.pt
mkt.designeroutletalgarve.com
mkt.digitalpackage.com.co
mkt.din.pt
mkt.domplex.com
mkt.donum.pt
mkt.dude.pt
mkt.eqsglobal.com
mkt.estilotl.com.br
mkt.ezzeseguros.com.br
mkt.fabiohaagtype.com
mkt.farmaviva.com.br
mkt.feiraminas.com
mkt.flnegociosonline.com.br
mkt.fonsecaeflora.com
mkt.fundacaojles.org.br
mkt.fyre.pt
mkt.goncalagro.pt
mkt.i2sbrokers.pt
mkt.inovcorp.com
mkt.intercereais.com
mkt.irradiar.com.br
mkt.kuruka.com.br
mkt.luisparreirao.pt
mkt.marcialpons.com.br
mkt.megaflux.net
mkt.metronumbers.com
mkt.micongreso.es
mkt.mrterapias.pt
mkt.multtv.com.br
mkt.naivemarketing.com
mkt.nasbi.com
mkt.nascente.org.pt
mkt.newsuboi.com.br
mkt.novartisnoticias.pt
mkt.noveduc.pt
mkt.ordemdosarquitectos.org
mkt.panamar.pt
mkt.paralimpicos.pt
mkt.peak.pt
mkt.pecadoreal.com
mkt.pmh.pt
mkt.pontofresco.pt
mkt.premiershop.com.br
mkt.puzzles3dcastelosportugal.com
mkt.quebramar.com
mkt.renofase.com
mkt.rolawines.com
mkt.sabedoriacosmica.com
mkt.scemai.com
mkt.soultrade.com.br
mkt.spcertificados.com.br
mkt.spzc.pt
mkt.startupleiria.com
mkt.stcp.pt
mkt.talkd.com.br
mkt.themediabees.com
mkt.tnews.pt
mkt.torreense.com
mkt.tribalistikstore.com.br
mkt.tutigas.pt
mkt.umseisum.com
mkt.usecamisetas.com
mkt.vetlima.com
mkt.wasport.com.br
news.snpl.pt
nl.darajewels.com
registo.incurso.pt
servicoaocliente.remaxvantagem.pt

Other certificates including the domain name descobrimentos.com.pt

(limited to 100 certificates)
mkt.descobrimentos.com.pt
mkt.inbet.pt
mkt.contactus.pt

Certificate

The complete raw certificate details for mkt.descobrimentos.com.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINEzCCC/ugAwIBAgISA8TDjgb7aZ7ONJRciu+AxueZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDEwMjA1NDRaFw0yNDAxMzAwMjA1NDNaMCQxIjAgBgNVBAMT
GW1rdC5kZXNjb2JyaW1lbnRvcy5jb20ucHQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxiffYuMJjV6A9qIIuPJlgbV9m9UpKO0/bBGehKXzatED1n4R8
BW9qRtGPCrJAC5qpfGx6JeAANcKK2uw6Qmx+L9+/qCQ2NKnTeW6ljmcOST2lW9tB
jAbJQU6b9VfoQgSYfAGm6gD5HsvOwrxlgvl1PoxRgdku2BkMfryhMZojhzPNjrub
50+n//dSfKWrWk8KjmAAn5Exd8SXTc5BTDFNx3tVeJVuSS/VZAIhrTJPswsjo0Ba
UOEv3ec31mO+wD28L923N9+U3flGCjkaoEoPvdMww9yTpkMu2gi1jfFgcngNunzf
ziCnGSnnaNWv0E+9mrqD1Zu+1x6ryOFLDR2rAgMBAAGjggovMIIKKzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFND/1B1XaeorGOqkW5xuGmUXKmgjMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIINgYDVR0RBIIILTCCCCmCL2NvbXVuaWNhY2FvLnNhdWRl
b2N1cGFjaW9uYWwucG9ydG9zZWd1cm8uY29tLmJygjJjb211bmljYWNhby5zYXVk
ZXJlbGFjaW9uYW1lbnRvLnBvcnRvc2VndXJvLmNvbS5icoIUZWdvaW1rdC5zbWFy
dG1vdmUucHSCEmlwLmRpZ2l0YWxncmVlbi5wdIIUbWFya2V0aW5nLmFwZHJvbmUu
cHSCGW1hcmtldGluZy5jYXphY2hpYy5jb20uYnKCFW1hcmtldGluZy5jZXJ0Zm9y
bS5wdIIObWt0LjR1bS5jb20uYnKCFG1rdC43MDltZWRpYXJvb20uY29tghNta3Qu
YWN0aXZld2hlcmUuY29tggxta3QuYWR2aWQucHSCEG1rdC5hZ2lsc3RvcmUucHSC
DG1rdC5hZ3Jpcy5wdIINbWt0LmFsZWdyby5wdIIObWt0LmFsbWFjbGEucHSCE21r
dC5hbXBlcmVlbmVyZ3kucHSCEG1rdC5hbmNhcC5vcmcucHSCEm1rdC5hcGFydGlk
YXJpYS5wdIIcbWt0LmFzc29jaWFjYW9iZXNlbGd1ZW5zZS5wdIIVbWt0LmF1dG9z
ZXJ2ZXIuY29tLmJygg5ta3QuYmVkaXZhci5wdIITbWt0LmJlbG9kaWdpdGFsLmNv
bYIUbWt0LmJlbmVyaWNrcy5jb20uYnKCD21rdC5iaW9jYWJhei5wdIIZbWt0LmNh
c2lub3NncnVwb3ZpY2NhLmNvbYIQbWt0LmNlbmEtc3RlLm9yZ4IPbWt0LmNpbmFu
aW1hLnB0gg5ta3QuY20tZ2FpYS5wdIISbWt0LmNtLWxvdXJpbmhhLnB0ghZta3Qu
Y29yaW50by1yZXRhaWwuY29tgg5ta3QuZGF0YXNldC5wdIIZbWt0LmRlc2NvYnJp
bWVudG9zLmNvbS5wdIIdbWt0LmRlc2lnbmVyb3V0bGV0YWxnYXJ2ZS5jb22CGW1r
dC5kaWdpdGFscGFja2FnZS5jb20uY2+CCm1rdC5kaW4ucHSCD21rdC5kb21wbGV4
LmNvbYIMbWt0LmRvbnVtLnB0ggtta3QuZHVkZS5wdIIRbWt0LmVxc2dsb2JhbC5j
b22CE21rdC5lc3RpbG90bC5jb20uYnKCFm1rdC5lenplc2VndXJvcy5jb20uYnKC
FW1rdC5mYWJpb2hhYWd0eXBlLmNvbYIUbWt0LmZhcm1hdml2YS5jb20uYnKCEm1r
dC5mZWlyYW1pbmFzLmNvbYIbbWt0LmZsbmVnb2Npb3NvbmxpbmUuY29tLmJyghVt
a3QuZm9uc2VjYWVmbG9yYS5jb22CF21rdC5mdW5kYWNhb2psZXMub3JnLmJyggtt
a3QuZnlyZS5wdIIRbWt0LmdvbmNhbGFncm8ucHSCEW1rdC5pMnNicm9rZXJzLnB0
ghBta3QuaW5vdmNvcnAuY29tghRta3QuaW50ZXJjZXJlYWlzLmNvbYITbWt0Lmly
cmFkaWFyLmNvbS5icoIRbWt0Lmt1cnVrYS5jb20uYnKCFG1rdC5sdWlzcGFycmVp
cmFvLnB0ghZta3QubWFyY2lhbHBvbnMuY29tLmJyghBta3QubWVnYWZsdXgubmV0
ghRta3QubWV0cm9udW1iZXJzLmNvbYIRbWt0Lm1pY29uZ3Jlc28uZXOCEW1rdC5t
cnRlcmFwaWFzLnB0ghFta3QubXVsdHR2LmNvbS5icoIWbWt0Lm5haXZlbWFya2V0
aW5nLmNvbYINbWt0Lm5hc2JpLmNvbYITbWt0Lm5hc2NlbnRlLm9yZy5wdIITbWt0
Lm5ld3N1Ym9pLmNvbS5icoIXbWt0Lm5vdmFydGlzbm90aWNpYXMucHSCDm1rdC5u
b3ZlZHVjLnB0ghtta3Qub3JkZW1kb3NhcnF1aXRlY3Rvcy5vcmeCDm1rdC5wYW5h
bWFyLnB0ghNta3QucGFyYWxpbXBpY29zLnB0ggtta3QucGVhay5wdIISbWt0LnBl
Y2Fkb3JlYWwuY29tggpta3QucG1oLnB0ghJta3QucG9udG9mcmVzY28ucHSCFm1r
dC5wcmVtaWVyc2hvcC5jb20uYnKCIW1rdC5wdXp6bGVzM2RjYXN0ZWxvc3BvcnR1
Z2FsLmNvbYIRbWt0LnF1ZWJyYW1hci5jb22CEG1rdC5yZW5vZmFzZS5jb22CEW1r
dC5yb2xhd2luZXMuY29tghhta3Quc2FiZWRvcmlhY29zbWljYS5jb22CDm1rdC5z
Y2VtYWkuY29tghRta3Quc291bHRyYWRlLmNvbS5icoIZbWt0LnNwY2VydGlmaWNh
ZG9zLmNvbS5icoILbWt0LnNwemMucHSCFW1rdC5zdGFydHVwbGVpcmlhLmNvbYIL
bWt0LnN0Y3AucHSCEG1rdC50YWxrZC5jb20uYnKCFG1rdC50aGVtZWRpYWJlZXMu
Y29tggxta3QudG5ld3MucHSCEW1rdC50b3JyZWVuc2UuY29tghtta3QudHJpYmFs
aXN0aWtzdG9yZS5jb20uYnKCDm1rdC50dXRpZ2FzLnB0ghBta3QudW1zZWlzdW0u
Y29tghRta3QudXNlY2FtaXNldGFzLmNvbYIPbWt0LnZldGxpbWEuY29tghJta3Qu
d2FzcG9ydC5jb20uYnKCDG5ld3Muc25wbC5wdIIRbmwuZGFyYWpld2Vscy5jb22C
EnJlZ2lzdG8uaW5jdXJzby5wdIIhc2Vydmljb2FvY2xpZW50ZS5yZW1heHZhbnRh
Z2VtLnB0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLiNgVMgAA
BAMARzBFAiEAuthfq+t5VVRyeoDn6y8H9Nnbu9J5CaZLDnk8d1NUMHYCIH4945m+
xRsrrWfN75tG1J5zzTx4CT9AfIdXMiHmOhdHAHYA7s3QZNXbGs7FXLedtM0TojKH
Rny87N7DUUhZRnEftZsAAAGLiNgVAAAABAMARzBFAiEA0YMpLuzD3cYHTFryyOgA
tv29T7cxkv1ULkhRxNRxZjcCIF8JemSbaYgnRd7S2zxmxQJDhJ9FF64FZJ0hdrEe
QsszMA0GCSqGSIb3DQEBCwUAA4IBAQBTcuEvfCZJmrEXXGpaFgk6hrF3ohy2yV0M
QZ4YLOv0jkOwtWAaz1hIq/Pn9e8IGNDNMxN3mLbyJUM8af+6mENM4XPlGCQjCyBW
AyozC8r3Y1KmsY1ICeMcQUtO71jMZ9gEg70e1Ipm+YwMpSaZydC9ELtk1/A5T029
zx9sRbwIjuso53FEMDg7BjsfWhOqzjPCppFlZ/pkJRZoO4zW8oF3tosTaUtOX81L
LDTb6FElM+Faf20M8FBcdm0KIwXbclnGeMCBLulQKe/XpMyDxYMlqLuGNZD67OMm
lVcKjKTOp/MpciW2DQLD81ruhCsOh1uxvP038os1utLGk9b9k0Oi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYn32LjCY1egPaiCLjyZ
YG1fZvVKSjtP2wRnoSl82rRA9Z+EfAVvakbRjwqyQAuaqXxseiXgADXCitrsOkJs
fi/fv6gkNjSp03lupY5nDkk9pVvbQYwGyUFOm/VX6EIEmHwBpuoA+R7LzsK8ZYL5
dT6MUYHZLtgZDH68oTGaI4czzY67m+dPp//3Unylq1pPCo5gAJ+RMXfEl03OQUwx
Tcd7VXiVbkkv1WQCIa0yT7MLI6NAWlDhL93nN9ZjvsA9vC/dtzfflN35Rgo5GqBK
D73TMMPck6ZDLtoItY3xYHJ4Dbp8384gpxkp52jVr9BPvZq6g9Wbvtceq8jhSw0d
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328292138618730063642511143630103260882841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 02:05:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 02:05:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.descobrimentos.com.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22412214609768705574911895377972217545490072644961280380336775887736354429473034839860718310249675130540041095007507733610781088816331853541836609141165586957655150236660233633507204427457112801592840507886924185025264751749328060353206743280468827799430166187288477011280616443771205929984502813875004263378527715164045951940027038604530284865867351166822837105763689129362304181749700857050393187733093781494700100593933621254836743687648707175279121571299782090156795723404803647482726542400395993382188895400995589709864305418712539253813792098866830334320245983609923345586182369449241893366210404526513128807851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0ffd41d5769ea2b18eaa45b9c6e1a65172a6823
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2093 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.saudeocupacional.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.sauderelacionamento.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoimkt.smartmove.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.digitalgreen.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.apdrone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.cazachic.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.certform.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.4um.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.709mediaroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.activewhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advid.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agilstore.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agris.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alegro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.almacla.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ampereenergy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ancap.org.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apartidaria.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.associacaobeselguense.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autoserver.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bedivar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.belodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.benericks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.biocabaz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casinosgrupovicca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cena-ste.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cinanima.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-gaia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-lourinha.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.corinto-retail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dataset.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.descobrimentos.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designeroutletalgarve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalpackage.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.din.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.domplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.donum.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eqsglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estilotl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ezzeseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fabiohaagtype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.farmaviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.feiraminas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.flnegociosonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fonsecaeflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fundacaojles.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fyre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.goncalagro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.i2sbrokers.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inovcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intercereais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.irradiar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kuruka.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.luisparreirao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marcialpons.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.megaflux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.metronumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.micongreso.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mrterapias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.naivemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nasbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nascente.org.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.newsuboi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novartisnoticias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.noveduc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ordemdosarquitectos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.panamar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.paralimpicos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.peak.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pecadoreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmh.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontofresco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.premiershop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.puzzles3dcastelosportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quebramar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.renofase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rolawines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sabedoriacosmica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scemai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soultrade.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spcertificados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spzc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.startupleiria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stcp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.talkd.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.themediabees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tnews.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.torreense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tribalistikstore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tutigas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.umseisum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.usecamisetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vetlima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wasport.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.snpl.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.darajewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registo.incurso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicoaocliente.remaxvantagem.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b88d815320000040300473045022100bad85fabeb795554727a80e7eb2f07f4d9dbbbd27909a64b0e793c775354307602207e3de399bec51b2bad67cdef9b46d49e73cd3c78093f407c87573221e63a1747007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b88d815000000040300473045022100d183292eecc3ddc6074c5af2c8e800b6fdbd4fb73192fd542e4851c4d471663702205f097a649b69882745ded2db3c66c50243849f4517ae05649d2176b11e42cb33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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