campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 04:10:61:75:96:06:f3:65:e9:0d:cf:09:7c:8b:3d:f7:7b:25 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:61:75:96:06:f3:65:e9:0d:cf:09:7c:8b:3d:f7:7b:25
Serial Number (int): 354023207255011724998710433402616058182437
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:31:fe:37:d0:4a:ce:46:ab:71:61:4e:12:b5:dc:ef:09:24:7a:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:7c:bd:30:d8:b1:54:fd:c8:ab:4b:62:c8:39:e9:27:fc:fe:11:94
Fingerprint (sha256): 3c:f5:de:79:86:6b:da:ff:40:83:93:c2:42:01:bb:40:a3:aa:83:5c:c2:25:0b:ca:af:d7:02:34:0a:20:fb:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.galius.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
info.trademidia.com
mail.newsletter.rtp.pt
mkt.abert.org.br
mkt.abimota.pt
mkt.academiapedrosousa.pt
mkt.afp.pt
mkt.alertaemprego.pt
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.balancasonline.com
mkt.balanzasmarques.es
mkt.bencaquintalgourmet.com.br
mkt.brasilbingo.com
mkt.brunosousa.pt
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.consum.es
mkt.csoutdoors.pt
mkt.e-primatur.com
mkt.eacr.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.europesagem.com
mkt.f1flash.com
mkt.ferramentasdecoaching.com
mkt.fotocristal-3d.pt
mkt.globelinkportugal.com
mkt.gloma.pt
mkt.harmonizando.com
mkt.hipnoterapiasocial.com.br
mkt.hotelbhally.com.br
mkt.imacustica.pt
mkt.infonews.com.pt
mkt.intersea.com.br
mkt.inv.pt
mkt.jogouganhou.com
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.maisamigas.com.br
mkt.mega-alcance.com
mkt.mobilscan.pt
mkt.mtb.es
mkt.nautika.com.br
mkt.noxautomacao.com.br
mkt.npibrasil.com
mkt.olicargo.com
mkt.pacsis.pt
mkt.pmspa.rj.gov.br
mkt.pontual.pt
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.route66.com.br
mkt.salesup.pt
mkt.serrasconsulting.pt
mkt.sinafresp.org.br
mkt.sindsep-pe.com.br
mkt.slr.pt
mkt.sobarroso.pt
mkt.sptf.pt
mkt.spzn.pt
mkt.tejobrinde.pt
mkt.uaume.com
mkt.unimedriocomunica.com.br
mkt.uonangola.com
mkt.uonequipamentos.com
mkt.uonsubastas.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.wsenglish.email
mkt.xzconsultores.pt
mkt.youup.pt
mkt.zantia.com
mkt.zonacerealista.com.br
mkt.zonaverde.pt
news.decenio.com
news.musicanocoracao.pt
news.standnacional.com
news.webmarketingpt.com
news.xd.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pinayas.com
newsletter.timing.pt
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWWehjWTMYOdY9r4spoG
+mOrD8bpaKjg5LW06Nw1hpSgxsTtWYBXGLXiLuN3itSYX71mAC51Bscl0v/gJr5f
C1e3s0XU2cYrSUwTy+wnmkwfdZmGEDV4wnXwYvSXp89OiykGxxfubJTeVrRxCn7a
aWlHj4UZEUXvS1oWHJzhD45voz6Sb6s9esBoHWjnIRxcw/b05iOYuTMU3nO3oHVV
W+U+zs/CgBY4/tw+nOGgKPAgejHbi6++9cy0mwlEOGRFOrS17wKgoF9Kc8GvCcvc
gCfxMyMSDjbpf2uz2ARxcGv1Hi0yjwIQjm8gXDNKp4HlEJYZZTrndLfyVSQxSUVB
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354023207255011724998710433402616058182437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 01:09:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 01:09:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22899243511455003263387505020376297550023654914986370690675981707206256758461895516350088141538495621091990950847923358810959055408624115270408976609328565263311331418827284412199114532878762802648172615991777999165582292353684189984677957195191074508122752423575938640486758348128833487603427186740869841346393965457184127854633307193194680807764708885331391129662711039945359679266295398222646659400554220289084917966224673459634029198937332858068442840002972686531729640510927361734630950825651230633698839231401383777241607351394996291160282758322132348004052108641157795576161564275834183049052599408449122812311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e31fe37d04ace46ab71614e12b5dcef09247a9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.galius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.newsletter.rtp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abert.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abimota.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiapedrosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alertaemprego.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balancasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bencaquintalgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brunosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.consum.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.e-primatur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.f1flash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fotocristal-3d.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globelinkportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.harmonizando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hipnoterapiasocial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelbhally.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imacustica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.infonews.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intersea.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisamigas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mobilscan.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mtb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nautika.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.noxautomacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pacsis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontual.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.route66.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sindsep-pe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.slr.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sptf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spzn.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.unimedriocomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonequipamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonsubastas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wsenglish.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonacerealista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standnacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.xd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.timing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001890f369f8d000004030048304602210098708f019c91c2c09b572c4ac29795df394cc1cc7c35b655f78f5d2bf71e40ac022100c674bb4ddb6a24f2f04ba46210d3d19017d5f8986b95a46d5207a11cee8ebbab007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001890f369f820000040300483046022100c93a0fc96bea64970cbcdba7b2dae52edc84346f1f2cfe38d5f6f7dda2038617022100f2ca731c3640d1106d3a4a773d38aaedcde8bc33f4af3450af9bbf3f4965879f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003e4acc93c3eb6da0f12ea0213cad528a3a7d64b5e1357fbd8fa1ea01a5002a4c50564c69e1a9a74502bd140d7accf92f2d2e40fe9b77b3472c90c30d9eed781893c6a96caf637ab7d37a00d8fec86067f3aea29722aefa187478fcbfd224d74b65c19d462d2f67044fca0bcbf4be7a0375f16946c778df7d900220a79ffc68802ea93e7208ecaafe974fa928885dbd06583f7ae1c51ae92cd05864478edde99c4dc4addf1f8b9e7a82477ef5895765837550936d5f736e699b7dc5f2a93e8982106580649f26586ea1724bbe00b471f252c6f593a8a6690edf0bfc27a2ba1a8e1d5f169fad9be146dcb69df87dd124d1d5151bab91673035526070e622fe5f7b