mkt.nutriestilo.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:21:70:8d:fe:50:df:47:92:fc:d5:4b:d5:52:83:56:8d:fc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.nutriestilo.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:70:8d:fe:50:df:47:92:fc:d5:4b:d5:52:83:56:8d:fc
Serial Number (int): 359828072642956313882966052143441898802684
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:ff:48:5a:9e:3d:c8:b7:db:c7:51:ce:3c:15:25:53:93:99:f1:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:d4:bc:41:86:92:b0:c7:1a:f9:af:a5:fd:eb:3f:d7:bd:c7:4b:60
Fingerprint (sha256): 54:a9:1f:00:73:f1:85:76:45:f4:8c:fc:5e:f5:e9:5e:b7:85:4e:09:de:2b:d5:83:9e:60:c4:20:4c:38:97:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.nutriestilo.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.nutriestilo.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunic.piracanjuba.com.br
comunicacao.aeva.org.pt
comunicacao.arsnorte.min-saude.pt
expansao.tudobemseguros.com.br
faturadigital.cm-mertola.pt
info.fotosport.pt
mkt.advise2achieve.com
mkt.aerotexextintores.com.br
mkt.afabricadevendas.com.br
mkt.agenciacanopus.com.br
mkt.aldeiadoscapuchos.pt
mkt.altaroda.pt
mkt.alternativemedia.pt
mkt.amifrigo.pt
mkt.amorfizbolo.com
mkt.arcadia.pt
mkt.arsnorte.min-saude.pt
mkt.assistenciafeminina.com.br
mkt.babyliberdade.com
mkt.blocomais.com.br
mkt.bolinhodemelgourmet.com.br
mkt.canalcooperativo.com.br
mkt.castelomagico.pt
mkt.chipbelem.com.br
mkt.cloudbasesport.com.br
mkt.colegiolatosensu.com.br
mkt.conhecimentopartilhado.com.br
mkt.contabilistaplay.com.br
mkt.contatosdigital.com.br
mkt.crja.com.br
mkt.czarlisbonhotel.com
mkt.dermadoctor.com.br
mkt.designtimecoworking.com
mkt.elyanagoncalves.com.br
mkt.eseguro.com.br
mkt.estudiodeimpacto.pt
mkt.fator5.net
mkt.fechometalusa.com
mkt.franco.pt
mkt.frutaimperfeita.com.br
mkt.fsdown.org.br
mkt.galaxpay.com.br
mkt.gececom.com.br
mkt.grandideia.pt
mkt.ibracon.com.br
mkt.ifoodcorp.com.br
mkt.info.badireto.pt
mkt.infolk.ga
mkt.kidsa.com
mkt.kingwine.com.br
mkt.linavet.com.br
mkt.lisbondigitalschool.com
mkt.lisdente.pt
mkt.lmobile.pt
mkt.lotusfineart.com.br
mkt.magicway.com.br
mkt.massucatotreinamentos.com
mkt.mferreiraecosta.pt
mkt.miloandreo.com.br
mkt.miolito.com
mkt.miudo.pt
mkt.mstore.pt
mkt.multienergy.com.br
mkt.nortemed.pt
mkt.novatronica.com
mkt.nutriestilo.com.br
mkt.online.arcadia.pt
mkt.oportomedicalspa.com
mkt.pajunet.com.br
mkt.pestanagolf.com
mkt.phrlegal.com
mkt.portalconhecer.com.br
mkt.programadorespartano.com.br
mkt.quickmassageportugal.com
mkt.quintadolorde.pt
mkt.quintamachados.com
mkt.qustomcnc.com
mkt.radiantecentroeducacional.com.br
mkt.rafaelpiloto.com
mkt.rd7comunica.com
mkt.rfmsomnii.com
mkt.rfontes.com
mkt.ricardomendoza.pt
mkt.rocketlabs.com.br
mkt.sanahotels.com
mkt.spaceappsbh.com
mkt.spatiacomporta.com
mkt.speednetworking.com.pt
mkt.staples-mail.pt
mkt.synerhgon.com.br
mkt.tabataamaral.com.br
mkt.tecvoz.com.br
mkt.tempus.pt
mkt.timetobe.pt
mkt.totumsport.es
mkt.tuaterra.net.br
mkt.vistabeagle.com.br
mkt.xtreme.pt
mkt.zucchetti-spain.es
ofertas.estiloeconforto.com.br

Other certificates including the domain name nutriestilo.com.br

(limited to 100 certificates)
corujaacademy.com
nutriestilo.com.br
nutriestilo.com.br
mkt.agrobrasilia.com.br
nutriestilo.com.br
corujaacademy.com
egoi.novatronica.com
mkt.agrobrasilia.com.br
nutriestilo.com.br
mkt.nutriestilo.com.br
nutriestilo.com.br
mkt.algarveraceresort.com
mkt.dohlerhomes.pt
corujaacademy.com
corujaacademy.com
mkt.estudodoaudio.com.br
egoi.novatronica.com
mkt.estudodoaudio.com.br
nutriestilo.com.br
nutriestilo.com.br
mkt.dohlerhomes.pt
corujaacademy.com
nutriestilo.com.br
corujaacademy.com
nutriestilo.com.br
corujaacademy.com
mkt.algarveraceresort.com
corujaacademy.com

Certificate

The complete raw certificate details for mkt.nutriestilo.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaOfj/K+PTWD1BPz+6pE
4N/24HUy0n3hqRNmj1WCj+ONe511Fckqh0pQtd0MdtBhpwvfioOKK/8uBuRqCWBt
9EcuPDa0TwVD8gyeeySlmht0tthu6TfSZUP0giztjdZjULI9c2yXEhtaUgU78BKx
UaBNJqy3Dnp+f7EvrKbNdAFEwyYzYvHTfIC+hSenai4tUwv8D3ghdLfPV2qRk408
fXOykp87l2yqRMwv+vb7ag9nBWBCZ6ZNN8Vy49J2lERUA/652pZ3qzJsUBL2cHyc
DH6UbpjNOsi3mqmX7o8WS401dbhT/c0ZlgyOdUNHFGNPD5jZTNWm0Oaq6aLZRYLJ
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359828072642956313882966052143441898802684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 02:08:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-30 02:08:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.nutriestilo.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25454584949783371799958898650138447717122890463357397021593099413630781370537661920114193252053154001989885466098343882121157586348040297852563224024104460819550790742633094044332395563959122265705750917663396886228058196250489697177562694906050913158439424907087699667999863166787400979416291862112480213852224507429956524756646125716962670080621230991549576376766752910043222774140675935276241565298958029596527545872219397767464371086273206140203929758514255448176791788844764338098357567554593156403190473479353548684063683984944803055856684678340659805248750676417968861220110259279563114890835849320955151304997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3cff485a9e3dc8b7dbc751ce3c1525539399f1bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunic.piracanjuba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.aeva.org.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expansao.tudobemseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faturadigital.cm-mertola.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.fotosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advise2achieve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aerotexextintores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afabricadevendas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agenciacanopus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aldeiadoscapuchos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.altaroda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alternativemedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amifrigo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amorfizbolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arsnorte.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.assistenciafeminina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.babyliberdade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blocomais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bolinhodemelgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canalcooperativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.castelomagico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chipbelem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cloudbasesport.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.colegiolatosensu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conhecimentopartilhado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contabilistaplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contatosdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.czarlisbonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dermadoctor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.designtimecoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.elyanagoncalves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estudiodeimpacto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fator5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fechometalusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.franco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.frutaimperfeita.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fsdown.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.galaxpay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gececom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grandideia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibracon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.info.badireto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.infolk.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kidsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kingwine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linavet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisbondigitalschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisdente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lmobile.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusfineart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.magicway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.massucatotreinamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mferreiraecosta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miloandreo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miolito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miudo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mstore.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multienergy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nortemed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nutriestilo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.online.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oportomedicalspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pajunet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pestanagolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.phrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portalconhecer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.programadorespartano.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quickmassageportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintadolorde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintamachados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.qustomcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiantecentroeducacional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rafaelpiloto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rd7comunica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfmsomnii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfontes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ricardomendoza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rocketlabs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sanahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spaceappsbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spatiacomporta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.speednetworking.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.staples-mail.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.synerhgon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tabataamaral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecvoz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tempus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.timetobe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.totumsport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tuaterra.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vistabeagle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xtreme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zucchetti-spain.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofertas.estiloeconforto.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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