campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7d:68:7c:da:ba:76:6a:e4:d8:71:ad:11:64:1a:20:58:7b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:68:7c:da:ba:76:6a:e4:d8:71:ad:11:64:1a:20:58:7b
Serial Number (int): 304011041653108517723906821270704251492475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:aa:52:6c:e8:10:34:c7:21:aa:3f:4a:fc:b1:54:29:90:55:50:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:fe:3a:24:bd:6a:6c:61:79:90:11:37:b6:5a:c4:7f:06:c8:08:a6
Fingerprint (sha256): 39:f7:f9:9e:11:a5:35:26:e6:46:ec:4d:99:0c:f2:b5:a8:cc:4b:7b:99:a8:c7:44:97:fb:9f:01:a6:c5:4b:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.galius.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
info.trademidia.com
mail.newsletter.rtp.pt
mkt.abert.org.br
mkt.abimota.pt
mkt.academiapedrosousa.pt
mkt.afp.pt
mkt.alertaemprego.pt
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.balancasonline.com
mkt.balanzasmarques.es
mkt.brasilbingo.com
mkt.brunosousa.pt
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.consum.es
mkt.csoutdoors.pt
mkt.e-primatur.com
mkt.eacr.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.europesagem.com
mkt.f1flash.com
mkt.ferramentasdecoaching.com
mkt.fotocristal-3d.pt
mkt.galpenergia.com
mkt.globelinkportugal.com
mkt.gloma.pt
mkt.harmonizando.com
mkt.hipnoterapiasocial.com.br
mkt.hotelbhally.com.br
mkt.imacustica.pt
mkt.intersea.com.br
mkt.inv.pt
mkt.jogouganhou.com
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.maisamigas.com.br
mkt.mega-alcance.com
mkt.mobilscan.pt
mkt.mtb.es
mkt.nautika.com.br
mkt.noxautomacao.com.br
mkt.npibrasil.com
mkt.olicargo.com
mkt.pacsis.pt
mkt.pmspa.rj.gov.br
mkt.pontual.pt
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.route66.com.br
mkt.salesup.pt
mkt.serrasconsulting.pt
mkt.sinafresp.org.br
mkt.sindsep-pe.com.br
mkt.slr.pt
mkt.sobarroso.pt
mkt.sptf.pt
mkt.spzn.pt
mkt.tejobrinde.pt
mkt.uaume.com
mkt.unimedriocomunica.com.br
mkt.uonangola.com
mkt.uonequipamentos.com
mkt.uonsubastas.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.wsenglish.email
mkt.xzconsultores.pt
mkt.youup.pt
mkt.zantia.com
mkt.zonacerealista.com.br
mkt.zonaverde.pt
news.decenio.com
news.musicanocoracao.pt
news.standnacional.com
news.webmarketingpt.com
news.xd.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pinayas.com
newsletter.timing.pt
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.socialtime.pt
nw1.altronix.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vH/1sl08qJY6sgSH9Fm
70ox35zPasxzirEqxMUUzYZmwjK9dNZGytNG9B9byAgSDMaE/hwCeYJ98FtMOFfi
qgGHdaEpmxOeTFMrLeyGxj/cghPhv+vn0BNJZO7EUvRDFmDUKi+h0/5ryr8N2C2/
VN9jovk3jBRp5ZxLOWt/1fuPkSBgOrBO+2Lzc9rUZUgEbLDaqjppn6hI+AK6xezu
dqFmPn9VmmCuhmj1UWEjQgMAeKeoDMACyXp2CDtnmwYvjVnWaEwvPN6sWnaAunAV
vnBhkWmrQB3ZyULJxhXXrBIQ/USepdKx0ARwku6ftWqJBIaQuJk+tGcn8XcRBgS1
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304011041653108517723906821270704251492475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 01:09:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 01:09:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26629378380432434776973728906413640652039414719230646914393616365424986277521458568697510166818553125493001951187889555868008351248986193826157236268622568880426925633304213314360577908648188787017279694706765788952989408993379277858343229801616739997697754671506288023282173503735056169357211965639789769204172543827372827636551425035283738474535350618008007977204764800641123300968605704339887041593140223357162582012691185381318606751097393860735811026112338476228481921712661471751121680701028091679218195100076511703872849291431758625993983089052697731957278398474070882339599444879110977018894613395666869990697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24aa526ce81034c721aa3f4afcb15429905550e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.galius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.newsletter.rtp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abert.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abimota.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiapedrosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alertaemprego.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balancasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brunosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.consum.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.e-primatur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.f1flash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fotocristal-3d.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.galpenergia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globelinkportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.harmonizando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hipnoterapiasocial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelbhally.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imacustica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intersea.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisamigas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mobilscan.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mtb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nautika.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.noxautomacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pacsis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontual.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.route66.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sindsep-pe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.slr.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sptf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spzn.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unimedriocomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonequipamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonsubastas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wsenglish.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonacerealista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standnacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.xd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.timing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw1.altronix.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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