newsletter.fotosport.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:93:57:1c:0e:b9:d7:1d:98:6e:d8:4c:07:4a:d2:bd:35 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=newsletter.fotosport.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:93:57:1c:0e:b9:d7:1d:98:6e:d8:4c:07:4a:d2:bd:35
Serial Number (int): 431673890070031224797954702914300150988085
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:b3:2a:41:66:10:45:ea:14:ec:3f:bd:a9:ed:9f:68:9d:60:e0:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:4d:0a:4b:1f:88:e4:ef:75:af:5e:06:53:2b:28:9d:cb:04:f7:e7
Fingerprint (sha256): 43:bb:8c:73:33:b2:11:b7:42:1f:b6:56:5c:5e:bf:61:16:aa:c2:8a:54:90:61:c9:f1:63:74:18:e5:ce:15:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newsletter.fotosport.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsletter.fotosport.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brodcast.mkt.ca-seguros.pt
contato.amm-mg.org.br
egoi.eventshake.app
export.neosante-hs.com
fp.fnac.pt
go.cm-mertola.pt
info.mkt.maistecnologia.com
info.newsletters-abreu.com
info.sesconblumenau.org.br
info.smxlogistics.com
informacoes.euroindy.com
inst.al.ms.gov.br
mkt.adegamayor.pt
mkt.aetice.pt
mkt.agencias.meioemensagem.com.br
mkt.agriocasion.com
mkt.agromaquinaria.es
mkt.amafalda.com.br
mkt.aphort.com
mkt.bebescomamor.pt
mkt.belavista.sempli.com.br
mkt.besttimetour.com
mkt.blueticketnews.pt
mkt.bragaconta.com
mkt.braver.pt
mkt.burza.com.br
mkt.canaltech.com.br
mkt.cm-aljezur.pt
mkt.codifactus.pt
mkt.construsitebrasil.com.br
mkt.crcgo.org.br
mkt.cristema.com
mkt.designforyou.pt
mkt.digitaisdosucesso.com.br
mkt.emviagem.pt
mkt.espacoluz.pt
mkt.europamundo.com.br
mkt.future-health.care
mkt.future-healthcare.eu
mkt.gruber.ind.br
mkt.gtmweb.com.br
mkt.hfhotels.com
mkt.hotinker.pt
mkt.ibecc.com.br
mkt.ideiapack-online.pt
mkt.imperiodossentidos.com
mkt.kingteste.com.br
mkt.knotkids.com
mkt.leiria-fatima.pt
mkt.marcogouveia.pt
mkt.memiranda.pt
mkt.minucor.com.br
mkt.murilomunhao.com
mkt.nneventos.com.br
mkt.nwangola.com
mkt.oneeyedfilms.com
mkt.osher.com.br
mkt.parceiros.meioemensagem.com.br
mkt.plrprofissional.com
mkt.pratiquenet.com.br
mkt.projetorentabilizacao.com.br
mkt.promediacion.com
mkt.psdb.org.br
mkt.rangel.com
mkt.repsolmove.com
mkt.rethinksolucoes.com.br
mkt.riscozero.info
mkt.romeroysimon.com
mkt.sacradalmas.uy
mkt.sanahotels.info
mkt.sanro.com
mkt.saudeprime.pt
mkt.schultz.com.pt
mkt.scml.pt
mkt.seteco.com.br
mkt.setemargens.com
mkt.snqtb.pt
mkt.sosconsumidor.com.br
mkt.sove.pt
mkt.ticketline.pt
mkt.transnautica.pt
mkt.tzseguros.com.br
mkt.tzsystems.com.br
mkt.vegascard.com.br
mkt.veiculos.meioemensagem.com.br
mkt.viaserumos.pt
mkt.vitalcard.com.br
mkt.vivamelhor.pt
mkt.wecreateyou.biz
mkt.you.com.pt
mkt.youlikeitstore.com
mkt.yourhotels.com.pt
mktbr.npdbrasil.com
news.norsafe.pt
news.phdisplays.com.br
news.standvirtual.com
newsletter.autocabomonte.pt
newsletter.fotosport.pt
newsletter.telepizza.pt
spa.enjoylife.pestana.com

Other certificates including the domain name fotosport.pt

(limited to 100 certificates)
newsletter.fotosport.pt
www.fotosport.pt
mkt.agrobrasilia.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
egoi.novatronica.com
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
mkt.agrobrasilia.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.batistacarioca.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.nutriestilo.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.algarveraceresort.com
mkt.dohlerhomes.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.estudodoaudio.com.br
newsletter.fotosport.pt
egoi.novatronica.com
newsletter.fotosport.pt
mkt.estudodoaudio.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.dohlerhomes.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.batistacarioca.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
newsletter.fotosport.pt
mkt.algarveraceresort.com
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt

Certificate

The complete raw certificate details for newsletter.fotosport.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRp3YOFCXJbvdCrjiYTU
ks8BE1+iHBXpy+gEhQ+g9RHd0SeJL33kX+Yz8POtFzTA6D0n41OBHEWqUu9MzFRF
IlXmMP0p3IbJr0kaXCwIGoUu0eQnQXjhAQI8C0bFR4Fy/FNQFx3BCAKMqKNZDcY3
BeaPUDGBC9lvk81VSImB4LmU/o8G5dBXsLBblXkASgx64/lf8l/LC/ZeLFil6Sg0
7lxp7sUdZ+TI3WRNqU66u1oBzdTYbq4E300GqDqNZeYyVxqaeu0Cs8THCMTdw/4M
Y6VdK9PNyJd4BkgKmy7J8ctW5bFii2iTbf6o9/JBsoFRVVJk4PD6dhntkPekv4fk
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431673890070031224797954702914300150988085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 14:41:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 14:41:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsletter.fotosport.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22357231008799101691346338858193097529968846233622416366126255464996299434815522870323571036540477479562797277316663366443996143861684401205039520140259738741616693120707015736585862095298309009174840151229903313593797467999229999677910556418674292490284084887456793496969869145961378559475642470019057207455031996814493167502394143638283856300384197842918638152112913368691422377303728764230297768944550201449580693545921188404031223622515776887305437340725852915944649480802126265703526127418840507269580770083820259538284925196953218862437008890187137066779007963684912694438181324993805519149821239412545909417047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84b32a41661045ea14ec3fbda9ed9f689d60e04a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brodcast.mkt.ca-seguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contato.amm-mg.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.eventshake.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'export.neosante-hs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.fnac.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.mkt.maistecnologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.newsletters-abreu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.sesconblumenau.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.smxlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informacoes.euroindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inst.al.ms.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.adegamayor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aetice.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agencias.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agriocasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agromaquinaria.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amafalda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aphort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bebescomamor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.belavista.sempli.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.besttimetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blueticketnews.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bragaconta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.braver.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.burza.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canaltech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-aljezur.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.codifactus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.construsitebrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crcgo.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cristema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designforyou.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitaisdosucesso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emviagem.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacoluz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europamundo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.future-health.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.future-healthcare.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gruber.ind.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gtmweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hfhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotinker.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibecc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ideiapack-online.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imperiodossentidos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingteste.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.knotkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.leiria-fatima.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marcogouveia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.memiranda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.minucor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.murilomunhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nneventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nwangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oneeyedfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.parceiros.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plrprofissional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pratiquenet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.projetorentabilizacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.promediacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psdb.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.repsolmove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rethinksolucoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.riscozero.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.romeroysimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sacradalmas.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudeprime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.schultz.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scml.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seteco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.setemargens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.snqtb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sosconsumidor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sove.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ticketline.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.transnautica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tzseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tzsystems.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vegascard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.veiculos.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.viaserumos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vitalcard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vivamelhor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wecreateyou.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.you.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youlikeitstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yourhotels.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktbr.npdbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.norsafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.phdisplays.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.autocabomonte.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.fotosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.telepizza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spa.enjoylife.pestana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4dc00449000004030047304502201f712ab3c44a91e9c9e4718ab600e8b9fa311d89e12ec6e5dee9bc268d2cd61b022100f5381df723bb0844576c459fb6141b8f712e0c2204091a2ca579976652d733610076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4dc004590000040300473045022100e0f50509bcf359806a7192ffdae41dad42a7e804e90d05be659480c918aad16302201111c954c111003cf76446875d5e6f6e67a051e5279e3877626c50e758fa8add
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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