newsletter.fotosport.pt

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:cb:48:5b:2c:a2:24:c5:e3:3f:13:a1:20:d2:4e:1c:43 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=newsletter.fotosport.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:cb:48:5b:2c:a2:24:c5:e3:3f:13:a1:20:d2:4e:1c:43
Serial Number (int): 337830316963324602295804694246049645993027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:23:af:e5:57:76:7f:12:e8:9e:9c:31:3e:ac:8e:ef:b8:4f:14:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:f9:22:f6:fa:d4:5b:f9:41:2e:e9:bc:40:ae:07:f9:13:dc:95:4c
Fingerprint (sha256): 4e:15:d6:0c:67:b4:0e:7e:06:91:10:4d:d7:d4:00:65:5c:5d:f3:cd:14:e8:5e:71:aa:d2:07:38:fa:43:01:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newsletter.fotosport.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsletter.fotosport.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brodcast.mkt.ca-seguros.pt
contato.amm-mg.org.br
egoi.eventshake.app
export.neosante-hs.com
fp.fnac.pt
go.cm-mertola.pt
info.mkt.maistecnologia.com
info.newsletters-abreu.com
info.sesconblumenau.org.br
info.smxlogistics.com
informacoes.euroindy.com
inst.al.ms.gov.br
mkt.adegamayor.pt
mkt.aetice.pt
mkt.agencias.meioemensagem.com.br
mkt.agriocasion.com
mkt.agromaquinaria.es
mkt.amafalda.com.br
mkt.aphort.com
mkt.bebescomamor.pt
mkt.belavista.sempli.com.br
mkt.besttimetour.com
mkt.blueticketnews.pt
mkt.bragaconta.com
mkt.braver.pt
mkt.burza.com.br
mkt.canaltech.com.br
mkt.cm-aljezur.pt
mkt.codifactus.pt
mkt.construsitebrasil.com.br
mkt.crcgo.org.br
mkt.cristema.com
mkt.designforyou.pt
mkt.digitaisdosucesso.com.br
mkt.emviagem.pt
mkt.espacoluz.pt
mkt.europamundo.com.br
mkt.future-health.care
mkt.future-healthcare.eu
mkt.gruber.ind.br
mkt.gtmweb.com.br
mkt.hfhotels.com
mkt.hotinker.pt
mkt.ibecc.com.br
mkt.ideiapack-online.pt
mkt.imperiodossentidos.com
mkt.kingteste.com.br
mkt.knotkids.com
mkt.leiria-fatima.pt
mkt.lokirepresentacoes.pt
mkt.marcogouveia.pt
mkt.memiranda.pt
mkt.minucor.com.br
mkt.murilomunhao.com
mkt.nneventos.com.br
mkt.nwangola.com
mkt.oneeyedfilms.com
mkt.osher.com.br
mkt.parceiros.meioemensagem.com.br
mkt.plrprofissional.com
mkt.projetorentabilizacao.com.br
mkt.promediacion.com
mkt.psdb.org.br
mkt.rangel.com
mkt.repsolmove.com
mkt.rethinksolucoes.com.br
mkt.riscozero.info
mkt.romeroysimon.com
mkt.sacradalmas.uy
mkt.sanahotels.info
mkt.sanro.com
mkt.saudeprime.pt
mkt.schultz.com.pt
mkt.scml.pt
mkt.seteco.com.br
mkt.setemargens.com
mkt.snqtb.pt
mkt.sosconsumidor.com.br
mkt.sove.pt
mkt.ticketline.pt
mkt.transnautica.pt
mkt.tzseguros.com.br
mkt.tzsystems.com.br
mkt.vegascard.com.br
mkt.veiculos.meioemensagem.com.br
mkt.viaserumos.pt
mkt.vitalcard.com.br
mkt.vivamelhor.pt
mkt.wecreateyou.biz
mkt.you.com.pt
mkt.youlikeitstore.com
mkt.yourhotels.com.pt
mktbr.npdbrasil.com
news.norsafe.pt
news.phdisplays.com.br
news.standvirtual.com
newsletter.autocabomonte.pt
newsletter.fotosport.pt
newsletter.telepizza.pt
spa.enjoylife.pestana.com

Other certificates including the domain name fotosport.pt

(limited to 100 certificates)
newsletter.fotosport.pt
www.fotosport.pt
mkt.agrobrasilia.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
egoi.novatronica.com
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
mkt.agrobrasilia.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.batistacarioca.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.nutriestilo.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.algarveraceresort.com
mkt.dohlerhomes.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.estudodoaudio.com.br
newsletter.fotosport.pt
egoi.novatronica.com
newsletter.fotosport.pt
mkt.estudodoaudio.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.dohlerhomes.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
mkt.batistacarioca.com.br
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt
newsletter.fotosport.pt
mkt.algarveraceresort.com
newsletter.fotosport.pt
newsletter.fotosport.pt
newsletter.fotosport.pt
www.fotosport.pt

Certificate

The complete raw certificate details for newsletter.fotosport.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZjCCDE6gAwIBAgISA+DLSFssoiTF4z8ToSDSThxDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDEwMjAxNTdaFw0yNDAxMzAwMjAxNTZaMCIxIDAeBgNVBAMT
F25ld3NsZXR0ZXIuZm90b3Nwb3J0LnB0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwkW2QNO+tv9NSh7447qKsw7kdXX8STTSfHD1EJ2bOnFEVXiLNv3e
Zmd/F2ATTji93oIercUuZxnREMImhm6FWnIwYEsFbVERzM1lZyIyNT0HoIZQfAAv
fLVtUYXlppPvmSppDlM4l7Vw1qBTXU5rsnWozsOZbPV0VOM19ZHlBJwW56W3YE/f
Tud+cERmj0sVPGjJgxT8AV7LPwS/7zLe2EGyf+CxpX0B2HIjQ/mTXwd8E2g8Av20
zMYFQWmDcrVD7LcErzgd9qa/+iuotkTlWn7ItHEgvMHY2FW1rvYHE1/qkxsvh2/V
S4KWXs+gCmaspt/IpJtFmKomUlZZuxFW4wIDAQABo4IKhDCCCoAwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBR1I6/lV3Z/EuienDE+rI7vuE8U7DAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCCIsGA1UdEQSCCIIwggh+ghpicm9kY2FzdC5ta3QuY2Etc2Vn
dXJvcy5wdIIVY29udGF0by5hbW0tbWcub3JnLmJyghNlZ29pLmV2ZW50c2hha2Uu
YXBwghZleHBvcnQubmVvc2FudGUtaHMuY29tggpmcC5mbmFjLnB0ghBnby5jbS1t
ZXJ0b2xhLnB0ghtpbmZvLm1rdC5tYWlzdGVjbm9sb2dpYS5jb22CGmluZm8ubmV3
c2xldHRlcnMtYWJyZXUuY29tghppbmZvLnNlc2NvbmJsdW1lbmF1Lm9yZy5icoIV
aW5mby5zbXhsb2dpc3RpY3MuY29tghhpbmZvcm1hY29lcy5ldXJvaW5keS5jb22C
EWluc3QuYWwubXMuZ292LmJyghFta3QuYWRlZ2FtYXlvci5wdIINbWt0LmFldGlj
ZS5wdIIhbWt0LmFnZW5jaWFzLm1laW9lbWVuc2FnZW0uY29tLmJyghNta3QuYWdy
aW9jYXNpb24uY29tghVta3QuYWdyb21hcXVpbmFyaWEuZXOCE21rdC5hbWFmYWxk
YS5jb20uYnKCDm1rdC5hcGhvcnQuY29tghNta3QuYmViZXNjb21hbW9yLnB0ghtt
a3QuYmVsYXZpc3RhLnNlbXBsaS5jb20uYnKCFG1rdC5iZXN0dGltZXRvdXIuY29t
ghVta3QuYmx1ZXRpY2tldG5ld3MucHSCEm1rdC5icmFnYWNvbnRhLmNvbYINbWt0
LmJyYXZlci5wdIIQbWt0LmJ1cnphLmNvbS5icoIUbWt0LmNhbmFsdGVjaC5jb20u
YnKCEW1rdC5jbS1hbGplenVyLnB0ghFta3QuY29kaWZhY3R1cy5wdIIcbWt0LmNv
bnN0cnVzaXRlYnJhc2lsLmNvbS5icoIQbWt0LmNyY2dvLm9yZy5icoIQbWt0LmNy
aXN0ZW1hLmNvbYITbWt0LmRlc2lnbmZvcnlvdS5wdIIcbWt0LmRpZ2l0YWlzZG9z
dWNlc3NvLmNvbS5icoIPbWt0LmVtdmlhZ2VtLnB0ghBta3QuZXNwYWNvbHV6LnB0
ghZta3QuZXVyb3BhbXVuZG8uY29tLmJyghZta3QuZnV0dXJlLWhlYWx0aC5jYXJl
ghhta3QuZnV0dXJlLWhlYWx0aGNhcmUuZXWCEW1rdC5ncnViZXIuaW5kLmJyghFt
a3QuZ3Rtd2ViLmNvbS5icoIQbWt0LmhmaG90ZWxzLmNvbYIPbWt0LmhvdGlua2Vy
LnB0ghBta3QuaWJlY2MuY29tLmJyghdta3QuaWRlaWFwYWNrLW9ubGluZS5wdIIa
bWt0LmltcGVyaW9kb3NzZW50aWRvcy5jb22CFG1rdC5raW5ndGVzdGUuY29tLmJy
ghBta3Qua25vdGtpZHMuY29tghRta3QubGVpcmlhLWZhdGltYS5wdIIZbWt0Lmxv
a2lyZXByZXNlbnRhY29lcy5wdIITbWt0Lm1hcmNvZ291dmVpYS5wdIIQbWt0Lm1l
bWlyYW5kYS5wdIISbWt0Lm1pbnVjb3IuY29tLmJyghRta3QubXVyaWxvbXVuaGFv
LmNvbYIUbWt0Lm5uZXZlbnRvcy5jb20uYnKCEG1rdC5ud2FuZ29sYS5jb22CFG1r
dC5vbmVleWVkZmlsbXMuY29tghBta3Qub3NoZXIuY29tLmJygiJta3QucGFyY2Vp
cm9zLm1laW9lbWVuc2FnZW0uY29tLmJyghdta3QucGxycHJvZmlzc2lvbmFsLmNv
bYIgbWt0LnByb2pldG9yZW50YWJpbGl6YWNhby5jb20uYnKCFG1rdC5wcm9tZWRp
YWNpb24uY29tgg9ta3QucHNkYi5vcmcuYnKCDm1rdC5yYW5nZWwuY29tghJta3Qu
cmVwc29sbW92ZS5jb22CGm1rdC5yZXRoaW5rc29sdWNvZXMuY29tLmJyghJta3Qu
cmlzY296ZXJvLmluZm+CFG1rdC5yb21lcm95c2ltb24uY29tghJta3Quc2FjcmFk
YWxtYXMudXmCE21rdC5zYW5haG90ZWxzLmluZm+CDW1rdC5zYW5yby5jb22CEW1r
dC5zYXVkZXByaW1lLnB0ghJta3Quc2NodWx0ei5jb20ucHSCC21rdC5zY21sLnB0
ghFta3Quc2V0ZWNvLmNvbS5icoITbWt0LnNldGVtYXJnZW5zLmNvbYIMbWt0LnNu
cXRiLnB0ghhta3Quc29zY29uc3VtaWRvci5jb20uYnKCC21rdC5zb3ZlLnB0ghFt
a3QudGlja2V0bGluZS5wdIITbWt0LnRyYW5zbmF1dGljYS5wdIIUbWt0LnR6c2Vn
dXJvcy5jb20uYnKCFG1rdC50enN5c3RlbXMuY29tLmJyghRta3QudmVnYXNjYXJk
LmNvbS5icoIhbWt0LnZlaWN1bG9zLm1laW9lbWVuc2FnZW0uY29tLmJyghFta3Qu
dmlhc2VydW1vcy5wdIIUbWt0LnZpdGFsY2FyZC5jb20uYnKCEW1rdC52aXZhbWVs
aG9yLnB0ghNta3Qud2VjcmVhdGV5b3UuYml6gg5ta3QueW91LmNvbS5wdIIWbWt0
LnlvdWxpa2VpdHN0b3JlLmNvbYIVbWt0LnlvdXJob3RlbHMuY29tLnB0ghNta3Ri
ci5ucGRicmFzaWwuY29tgg9uZXdzLm5vcnNhZmUucHSCFm5ld3MucGhkaXNwbGF5
cy5jb20uYnKCFW5ld3Muc3RhbmR2aXJ0dWFsLmNvbYIbbmV3c2xldHRlci5hdXRv
Y2Fib21vbnRlLnB0ghduZXdzbGV0dGVyLmZvdG9zcG9ydC5wdIIXbmV3c2xldHRl
ci50ZWxlcGl6emEucHSCGXNwYS5lbmpveWxpZmUucGVzdGFuYS5jb20wEwYDVR0g
BAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25
gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYuI1J5xAAAEAwBHMEUCIEFua8Ax
nMVWv3k0f/0cYrPoIA8G92ZT1BPgd9DmrXKBAiEA0v9M+SlKnFi+GtQhO1x40Nav
LwBgaz7n6vRS5YlDp2kAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6
dAAAAYuI1J8SAAAEAwBHMEUCID24TWPc/pDSLIBUVupD2gf9eHCcMb+uRd70dR90
vXN4AiEAtYqm2YNhPwU6kLTIrzMdZ5vSJ8qfAFHG9iUvvL06vY0wDQYJKoZIhvcN
AQELBQADggEBAGFZvNdFBErw35HMmv4AX0xy4ArKi8orXdNQoZMjSOBN++8dMdYN
4wya2vGVpz42nBLb6xVAhD6A5NwkeibEgWCrpfbsnqWwdnZ7OknjTtYIa+Kppzqj
G/oeBBHBWYDSBext3ngaDj/X0Go38rnc4Cx1ka1Eb8qTVc8Z0ffpcgg3x+u+Y25p
GRAWO10yJpKcwHv7StazsGZwZ5Rorh5/MOOUq+xqf9bUv2ozDhhg4J/Q3exVqQZO
yhS+EsCppYvylGgTK9t3qjfobPBBHDTAHqWbmp9uIxvfOryoSGl3Nk5IaLPGXfzr
9lNCpSWy0xWRMQc8kAZoFsFvZwhT/+zRqn8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkW2QNO+tv9NSh7447qK
sw7kdXX8STTSfHD1EJ2bOnFEVXiLNv3eZmd/F2ATTji93oIercUuZxnREMImhm6F
WnIwYEsFbVERzM1lZyIyNT0HoIZQfAAvfLVtUYXlppPvmSppDlM4l7Vw1qBTXU5r
snWozsOZbPV0VOM19ZHlBJwW56W3YE/fTud+cERmj0sVPGjJgxT8AV7LPwS/7zLe
2EGyf+CxpX0B2HIjQ/mTXwd8E2g8Av20zMYFQWmDcrVD7LcErzgd9qa/+iuotkTl
Wn7ItHEgvMHY2FW1rvYHE1/qkxsvh2/VS4KWXs+gCmaspt/IpJtFmKomUlZZuxFW
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337830316963324602295804694246049645993027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 02:01:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 02:01:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsletter.fotosport.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24524607395682721201773304928716446110448924125438482974625028858611313078444792705657745037759802158485174527939994114402282252758190573559006685597862071840594663321234096398302067886780547227474622456753449045045098241548643180959843377792189153696833714573225023846549343040753208389063068560928469261997041163892179231448041573109891128164102050088361860076514376670781817681810911092835055341295931587333925710722182898489634126863818371422049797981671313883540365744242296932550641895159594962940272319334836759644586614441797914544922290470152805508262899008242034097264225398367482501264959969107510515816163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7523afe557767f12e89e9c313eac8eefb84f14ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brodcast.mkt.ca-seguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contato.amm-mg.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.eventshake.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'export.neosante-hs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.fnac.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.mkt.maistecnologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.newsletters-abreu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.sesconblumenau.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.smxlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informacoes.euroindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inst.al.ms.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.adegamayor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aetice.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agencias.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agriocasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agromaquinaria.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amafalda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aphort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bebescomamor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.belavista.sempli.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.besttimetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blueticketnews.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bragaconta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.braver.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.burza.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canaltech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-aljezur.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.codifactus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.construsitebrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crcgo.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cristema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designforyou.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitaisdosucesso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emviagem.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacoluz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europamundo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.future-health.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.future-healthcare.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gruber.ind.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gtmweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hfhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotinker.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibecc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ideiapack-online.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imperiodossentidos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingteste.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.knotkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.leiria-fatima.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lokirepresentacoes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marcogouveia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.memiranda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.minucor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.murilomunhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nneventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nwangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oneeyedfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.parceiros.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plrprofissional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.projetorentabilizacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.promediacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psdb.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.repsolmove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rethinksolucoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.riscozero.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.romeroysimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sacradalmas.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudeprime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.schultz.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scml.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seteco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.setemargens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.snqtb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sosconsumidor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sove.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ticketline.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.transnautica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tzseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tzsystems.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vegascard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.veiculos.meioemensagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.viaserumos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vitalcard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vivamelhor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wecreateyou.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.you.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youlikeitstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yourhotels.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktbr.npdbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.norsafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.phdisplays.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.autocabomonte.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.fotosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.telepizza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spa.enjoylife.pestana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b88d49e7100000403004730450220416e6bc0319cc556bf79347ffd1c62b3e8200f06f76653d413e077d0e6ad7281022100d2ff4cf9294a9c58be1ad4213b5c78d0d6af2f00606b3ee7eaf452e58943a76900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b88d49f12000004030047304502203db84d63dcfe90d22c805456ea43da07fd78709c31bfae45def4751f74bd7378022100b58aa6d983613f053a90b4c8af331d679bd227ca9f0051c6f6252fbcbd3abd8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006159bcd745044af0df91cc9afe005f4c72e00aca8bca2b5dd350a1932348e04dfbef1d31d60de30c9adaf195a73e369c12dbeb1540843e80e4dc247a26c48160aba5f6ec9ea5b076767b3a49e34ed6086be2a9a73aa31bfa1e0411c15980d205ec6dde781a0e3fd7d06a37f2b9dce02c7591ad446fca9355cf19d1f7e9720837c7ebbe636e691910163b5d3226929cc07bfb4ad6b3b06670679468ae1e7f30e394abec6a7fd6d4bf6a330e1860e09fd0ddec55a9064eca14be12c0a9a58bf29468132bdb77aa37e86cf0411c34c01ea59b9a9f6e231bdf3abca8486977364e4868b3c65dfcebf65342a525b2d3159131073c90066816c16f670853ffecd1aa7f