campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 04:23:09:69:86:c3:d1:53:9a:17:f4:6a:37:e0:e9:04:a6:28 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:09:69:86:c3:d1:53:9a:17:f4:6a:37:e0:e9:04:a6:28
Serial Number (int): 360371537545763205222658236435509939578408
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:ec:a6:ec:55:f0:5b:18:c1:82:23:e4:df:89:3e:c7:ea:3d:f4:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:14:9e:bb:62:2c:7b:bf:04:46:93:b7:9b:42:a3:81:b4:c2:06:f8
Fingerprint (sha256): 3c:78:c8:fd:22:99:92:cb:44:4b:93:e0:cc:3c:98:f3:91:b9:28:0e:23:7e:88:2d:97:0e:d1:6e:cd:2f:84:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
info.trademidia.com
marketing.severinomelo.com.br
mkt.admancriativa.com.br
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.balanzasmarques.es
mkt.bencaquintalgourmet.com.br
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.celvitae.com
mkt.ciadosbotoes.com.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conversacionesconbarriguitas.com
mkt.csoutdoors.pt
mkt.eacr.com.br
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.europesagem.com
mkt.ferramentasdecoaching.com
mkt.gloma.pt
mkt.grupojpm.pt
mkt.hoteisnet.net
mkt.iccjp.com
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.julianafonte.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.megaturviagens.com.br
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.noxautomacao.com.br
mkt.npibrasil.com
mkt.olicargo.com
mkt.omnibees.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.route66.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.serrasconsulting.pt
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.sucessoemvendas.pt
mkt.tejobrinde.pt
mkt.tresce.com
mkt.uaume.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.wearelogo.com
mkt.xzconsultores.pt
mkt.youline.com.br
mkt.youup.pt
mkt.zantia.com
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.liquidworks.com.br
news.musicanocoracao.pt
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.igoldenvisa.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pinayas.com
newsletter.timing.pt
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+eh6Gr6J31FUS/odQzg
yJyF00xA95XVJ0mqBPJsE5t3oj3OH1qmSWBcnhThQChO7RIQhPxgfH6CMTB5i5DF
G4f0kKfTv61Zgmq4Xjr2CcK3zhrEvwbsOsZpkq0WtJuAnaUcHk545LAnW1gow5dW
W3DQmd6B8/DD9pGDoH3Wju656Os3DweIOP/bGyrNciYLisg4leftsuaK6JaKZo2u
N2+SIIoKkRXr8y0yLKPhjefkG7ue4iAgKfMi1rKp9MB7MA4U4J/A85OJ7zmAzX8e
rc2aeSfHfkszuptgI3HI46Bd3R57zhcy3xusu3s3oelFuu1GUeBuSswzaUZDHUi9
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360371537545763205222658236435509939578408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 01:10:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-30 01:10:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23215832028318457189295711393544172058709900798966540445730719135491535314275349735779457013028832072834090782353771062637447007439491123636990236463645338641601100737796669973816500934786685537859302519838599289631294195134472920362445737059766813665760239065581460800371207401129741524645490799422181622932491342536417145306649797383835702168164488280099872759442295781460791263241699440775901334084065274045045002895164156229069001727918470078436187548467440889075635829583532143141761924063516561603565342476134961222810338145724516846705560031972683930956385783979628363128919412392220121586383861092055842864451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3aeca6ec55f05b18c18223e4df893ec7ea3df453
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bencaquintalgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.celvitae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciadosbotoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conversacionesconbarriguitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupojpm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hoteisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.julianafonte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.megaturviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.noxautomacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omnibees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.route66.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wearelogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.timing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182f6d0835c0000040300483046022100b025f9816935ce2fb53439713a58491e5209f07ddf8fe55d579c58850d9c3d40022100a164632c99a744b17c447c68779c4c20c9e25eed7fd3a324fb216ab062b43ec50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000182f6d084ab0000040300483046022100816996cce5414ed18334f1f8d35d4f2b3eb4c1937acf1897040c07d0fe09ab2c022100c4f5506baa4bb792f1be9285710a4a572a27781f13ac94bf923ad10e6cbbeb37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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