mkt.agrobrasilia.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:97:2e:e7:6b:df:c0:9c:7d:c9:37:ee:7e:12:98:22:a2:d7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.agrobrasilia.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:2e:e7:6b:df:c0:9c:7d:c9:37:ee:7e:12:98:22:a2:d7
Serial Number (int): 399894127228428440384531806397671336485591
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:96:f7:65:eb:18:1e:5a:6d:7a:f1:30:44:9a:f1:6b:26:6a:e9:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:d0:2a:11:89:f6:73:29:08:ac:f3:7b:46:98:c5:ce:a0:b3:a3:8f
Fingerprint (sha256): 3b:91:ae:1a:ff:a1:23:de:0d:0b:8f:62:b1:52:67:47:18:4b:34:d3:2c:b4:41:5d:9c:66:3f:5e:16:2f:db:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.agrobrasilia.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.agrobrasilia.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunicacao.aeva.org.pt
conteudo.bimexperts.com.br
egoi.email.forallphones.com
egoi.novatronica.com
email.teleaccion.com
info.fotosport.pt
mkt.1908lisboahotel.com
mkt.3daxis.com.br
mkt.3rcbrindes.com.br
mkt.academiadofole.com
mkt.aclem.pt
mkt.agrobrasilia.com.br
mkt.algarveraceresort.com
mkt.altaroda.pt
mkt.amazingevolution.pt
mkt.annabarroseventos.com.br
mkt.antoniorocha.net
mkt.arcadia.pt
mkt.bazardesportivo.com
mkt.brindescolumbia.com.br
mkt.caoazul.com
mkt.caoazultshirts.pt
mkt.cardosoveiculos.com.br
mkt.carteiraexpress.com.br
mkt.castelomagico.pt
mkt.cdm.pt
mkt.centronagual.es
mkt.comms.gulfdirect.me
mkt.comoplantarsaude.com
mkt.conteudoativo.com.br
mkt.direcionalcontabeis.com.br
mkt.docsbarcelona.com
mkt.dohlerhomes.pt
mkt.emporiodocesesalgados.com.br
mkt.engemetro.com
mkt.equilibrioconsultoria.com
mkt.escovasfidalga.com.br
mkt.estudodoaudio.com.br
mkt.evidenciahoteis.com
mkt.facilconsulta.com
mkt.febral.com.br
mkt.festivaldoarrozcarolino.pt
mkt.fiction-ingredient.pt
mkt.forallphones.com
mkt.funpro.com.br
mkt.galaxpay.com.br
mkt.garbrasil.com.br
mkt.gececom.com.br
mkt.gestaodaessencia.com.br
mkt.gestaodebolso.com.br
mkt.grandideia.pt
mkt.gruposerseguro.com
mkt.hotelfontesanta.pt
mkt.hotelgolfmarvimeiro.pt
mkt.hotelpauldomar.pt
mkt.ibracon.com.br
mkt.ideris.com.br
mkt.ifoodcorp.com.br
mkt.imperiodobanho.com.br
mkt.intext.solutions
mkt.inversionesmilenium.com
mkt.ipeg.org.br
mkt.isq.pt
mkt.itapemirim.com.br
mkt.kidsa.com
mkt.lisdente.pt
mkt.lojagiravida.com.br
mkt.lotusfineart.com.br
mkt.magiccolor.com.br
mkt.mferreiraecosta.pt
mkt.mulherdeelite.com.br
mkt.multienergy.com.br
mkt.nutriestilo.com.br
mkt.oportomedicalspa.com
mkt.placidvillage.com
mkt.por1sorriso.org
mkt.portogolfdestination.com
mkt.portugalbywine.com
mkt.probioticosbrasil.com.br
mkt.properito.com.br
mkt.quickmassageportugal.com
mkt.qustomcnc.com
mkt.rfmsomnii.com
mkt.rocketlabs.com.br
mkt.rupestre.cl
mkt.sincor-rj.org.br
mkt.speedparty.net
mkt.synerhgon.com.br
mkt.tabataamaral.com.br
mkt.tecnimexgroup.com
mkt.timetobe.pt
mkt.tuaterra.net.br
mkt.unisat.com.br
mkt.vistabeagle.com.br
mkt.vitalbuy.com
mkt.winebroker.pt
mkt.wwengenharia.eng.br
mkt.youandthesea.pt
mkt.zeroacucar.com.br
mkt1.ventacorporativagrupoaxo.com

Other certificates including the domain name agrobrasilia.com.br

(limited to 100 certificates)
agrobrasilia.com.br
mkt.agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
mkt.agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
sitenovo.agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br
agrobrasilia.com.br

Certificate

The complete raw certificate details for mkt.agrobrasilia.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrKqfke7g5ZdToRetVfg
j4iIrOJtqsLfurEJFP4t3TSMuJ9cVkGp3bfVmalu8uHF4TtsClqN9K69ZT7RkmGQ
Gnf95PQuiiENsGJd72d3auwVtRVjqCq+qnWaqqtz/f0r5Cz3E8ZsZO3Fm+OtmO2Y
QvdYfW/EkiXG6nCM2G5+iNfp50jWU+si3Bcj8jQQr3nXae5LXjn+MhwkgIswXfLB
NkVPQ0UbU/fa3ee5gt2bF/0VkVlZUoeBtvAYjCL063dqVhev/8oPwX/IfLzardfE
ygfg2ZIjFsf29vxx88fva/mIjCXz1qMxRc1ODz8PWl7MoRZKPb02G6sgJlcH8d3h
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399894127228428440384531806397671336485591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-01 03:19:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-30 03:19:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.agrobrasilia.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20033755667663805646487628872871802491573045329796730447684115390070264463465454861989111222362150102841102361216059413874811896820454091968847008092548888844937926538255767363896569857506969945481253218402927726997667779191537992400066740695499209847824425411791634273901849065624535550821822496066591749249979244020388209833900202692892722121283172889572837173505245924387030286549889923051953953420255524600564248387609745068087995056793051571457322955930197486391743581620995410495365918415947509233402576205279486289708179367677037927591696243645055203178501639635054734410016267722757076296680363716580627833311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e896f765eb181e5a6d7af130449af16b266ae9d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.aeva.org.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudo.bimexperts.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.email.forallphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.teleaccion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.fotosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.1908lisboahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.3daxis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.3rcbrindes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiadofole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aclem.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agrobrasilia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.algarveraceresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.altaroda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amazingevolution.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.annabarroseventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.antoniorocha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bazardesportivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brindescolumbia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.caoazul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.caoazultshirts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cardosoveiculos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.carteiraexpress.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.castelomagico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cdm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centronagual.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comms.gulfdirect.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comoplantarsaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conteudoativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.direcionalcontabeis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.docsbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dohlerhomes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emporiodocesesalgados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.engemetro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.equilibrioconsultoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escovasfidalga.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estudodoaudio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.evidenciahoteis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.facilconsulta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.febral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.festivaldoarrozcarolino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fiction-ingredient.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.forallphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.funpro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.galaxpay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.garbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gececom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gestaodaessencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gestaodebolso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grandideia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gruposerseguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelfontesanta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelgolfmarvimeiro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelpauldomar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibracon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ideris.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imperiodobanho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intext.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inversionesmilenium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ipeg.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.isq.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.itapemirim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kidsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisdente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojagiravida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusfineart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.magiccolor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mferreiraecosta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mulherdeelite.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multienergy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nutriestilo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oportomedicalspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.placidvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.por1sorriso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portogolfdestination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portugalbywine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.probioticosbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.properito.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quickmassageportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.qustomcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfmsomnii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rocketlabs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rupestre.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sincor-rj.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.speedparty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.synerhgon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tabataamaral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecnimexgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.timetobe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tuaterra.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unisat.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vistabeagle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vitalbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.winebroker.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wwengenharia.eng.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youandthesea.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zeroacucar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt1.ventacorporativagrupoaxo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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