newsletter.openquest.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:79:9e:3f:45:09:b2:91:e3:3c:bd:e1:0d:56:8d:2a:b6:63 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=newsletter.openquest.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:9e:3f:45:09:b2:91:e3:3c:bd:e1:0d:56:8d:2a:b6:63
Serial Number (int): 389833656662765225881306684767973566756451
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:7c:52:49:92:74:cb:b3:b1:2d:2c:ee:a5:30:1c:79:ee:39:5d:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:e6:83:4c:12:cb:1d:08:fb:b4:0e:5c:eb:58:ff:77:e8:f9:e2:ff
Fingerprint (sha256): 54:d1:33:51:99:ed:c4:63:3e:a3:d6:60:74:eb:f8:7e:f9:40:ba:eb:8e:48:6c:cd:36:c3:9b:c0:c3:79:26:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newsletter.openquest.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsletter.openquest.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egoi.jornaleconomico.pt
emailling.sage.pt
farmacias.pasteur.com.co
mailing.anje.pt
mailing.garrafeiranacional.pt
mkt.abho.org.br
mkt.aeppublicidade.com.br
mkt.aepweb.com.br
mkt.agecefrio.com.br
mkt.agi-news.com
mkt.anasousa.pt
mkt.aph.pt
mkt.argex.pt
mkt.aspifor.pt
mkt.baeta.com.br
mkt.blueticket.com.br
mkt.bobike.com
mkt.brunozanotti.com.br
mkt.cae.org.ec
mkt.cm-beja.pt
mkt.cofreprevidencia.pt
mkt.criaplac.com
mkt.cucapesca.com
mkt.cursolab.org.br
mkt.ecp.ec
mkt.energisacliente.com.br
mkt.eng.com.br
mkt.estacao-imagem.com
mkt.eurosys.pt
mkt.globaldis.pt
mkt.greeniberica.pt
mkt.grupobm.pt
mkt.grupopreceram.pt
mkt.gtmotive.com
mkt.gyptec.eu
mkt.haco-etiquetas.pt
mkt.hotelmoliceiro.pt
mkt.icsporto.com
mkt.inda.org.br
mkt.infosimposium.com
mkt.inspirainvestimentos.com.br
mkt.iqos.pt
mkt.jorgeoculista.pt
mkt.leroymerlin.pt
mkt.lojadacriacao.com.br
mkt.lojapro.pt
mkt.ltm.pt
mkt.luquips.com.br
mkt.maisdados.com.br
mkt.marketingdigitalemcurso.com
mkt.martassoares.com
mkt.maviripa.pt
mkt.medicapilar.pt
mkt.meiamaratonaestradareal.com
mkt.montanheiros.com
mkt.mtbrandao.com
mkt.musica-esp.pt
mkt.nan.pt
mkt.news-ageas.com
mkt.nucleodata.pt
mkt.polisport.com
mkt.preceram.pt
mkt.prooptica.pt
mkt.repletodevida.pt
mkt.restauranterubro.com
mkt.sadabandeira.com
mkt.saturnonet.com
mkt.saudeonline.pt
mkt.sbao.com.br
mkt.segbox.com
mkt.sejaphd.com
mkt.senge.org.br
mkt.sesmed.com.br
mkt.sindisider.org.br
mkt.siro.pt
mkt.sociedadeadvogados.eu
mkt.spmastologia.com.br
mkt.steelground.pt
mkt.tecsinapse.com.br
mkt.timeforchangenow.com.br
mkt.usf-an.pt
mkt.valgo.info
mkt.vicaima.pt
mkt.visiolab.com.br
mkt.wordseo.com.br
mkt.wortex.com.br
mkt.wundermanlab.com
mkt.youbrand.company
news.aerlis.pt
news.armazensronfe.pt
newsletter.assp.pt
newsletter.berlotlisboa.com
newsletter.crivelli.com.br
newsletter.intermarche.pt
newsletter.multipublicacoes.pt
newsletter.openquest.pt
newsletter.ship4you.pt
newsletter.zilian.com
nl.acp.pt
website.aki.pt

Other certificates including the domain name openquest.pt

(limited to 100 certificates)
dns.openquest.pt
ssl.openquest.pt
admin.openquest.pt
openquest.pt
libs.openquest.pt
webmail.openquest.pt
mailing.gncellar.com
www.openquest.pt
mailing.gncellar.com
dns.openquest.pt
www.openquest.pt
panel2.openquest.pt
webmail.openquest.pt
admin.openquest.pt
mailing.gncellar.com
web04.openquest.pt
libs.openquest.pt
web04.openquest.pt
www.openquest.pt
panel.openquest.pt
www.openquest.pt
panel2.openquest.pt
webmail.openquest.pt
ssl.openquest.pt
dns.openquest.pt
webmail.openquest.pt
web04.openquest.pt
ssl.openquest.pt
ssl.openquest.pt
slideshow.openquest.pt
mailing.gncellar.com
mailing.gncellar.com
panel2.openquest.pt
libs.openquest.pt
ssl.openquest.pt
webmail.openquest.pt
openquest.pt
openquest.pt
admin.openquest.pt
openquest.pt
openquest.pt
openquest.pt
dns.openquest.pt
openquest.pt
www.openquest.pt
openquest.pt
dns.openquest.pt
www.openquest.pt
newsletter.openquest.pt
webmail.openquest.pt
webmail.openquest.pt
panel2.openquest.pt
ssl.openquest.pt
ssl.openquest.pt
mailing.gncellar.com
openquest.pt
ssl.openquest.pt
panel2.openquest.pt
libs.openquest.pt
panel2.openquest.pt
ssl.openquest.pt
libs.openquest.pt
ssl.openquest.pt
www.openquest.pt
mailing.gncellar.com
panel2.openquest.pt
libs.openquest.pt
libs.openquest.pt
admin.openquest.pt
openquest.pt
web04.openquest.pt
www.openquest.pt
dns.openquest.pt
admin.openquest.pt
web04.openquest.pt
openquest.pt
panel2.openquest.pt
admin.openquest.pt
openquest.pt
admin.openquest.pt
panel2.openquest.pt
openquest.pt
www.openquest.pt
admin.openquest.pt
webmail.openquest.pt
libs.openquest.pt
webmail.openquest.pt
ssl.openquest.pt
www.openquest.pt
webmail.openquest.pt
webmail.openquest.pt
dns.openquest.pt
admin.openquest.pt
openquest.pt
admin.openquest.pt
openquest.pt
web04.openquest.pt
www.openquest.pt
ssl.openquest.pt
openquest.pt

Certificate

The complete raw certificate details for newsletter.openquest.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuizdqetaOgALBYVRB3XU
zrnpUjSgAlF3vN7y2R+LMyG9Hxm7rZZ4xbN8Z+Y/kpCd4L3HwE9VP6B6Fga9621Z
znTU2c5+XDfIXUv2KAZkghubWX40I4yZ+FayC1GE0ppIwG1C9LH7jw7W0ipmpacm
6sqlXjOCmM8L1Dl3cHORooZoBjgO3MwMxMwZo6WcRzkr+IttUslDBCiLZKgbG+wz
WPS1EVGDw0Cchujr43ba+sUFLpuu6MaslPM2V1MHUeqOMhJ1mEs7FGWIQb/Cqk/b
ewAmw7s9h7/LiAUXBkBE5pOqB21ibK7uvIFRDmFpz1Ik8QzyZwkMfM1V9iB7ALrS
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389833656662765225881306684767973566756451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 02:08:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 02:08:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsletter.openquest.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23502448910742680072185176008888742359780579397399091448270384516704743145064825318869858767441312908348385442201293088767364127140562304367467045138070331144452852076869626929716810790795368891586052169941705729224473782715798364917949791375494262922906159024701713625224363680290299334622386131939058928664969680100851024054398028056327595292162860187971209758173427926833807373164754133114211288907322883814832416540515782476530174075772188157851376635312686410040759775942720246162135903528715043880894073068102207856117744087687119466303028572894997394648433899192605377988419219369818649068338933252593934848743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb7c52499274cbb3b12d2ceea5301c79ee395d3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.jornaleconomico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailling.sage.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmacias.pasteur.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.anje.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.garrafeiranacional.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abho.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aeppublicidade.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aepweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agecefrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agi-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.anasousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aph.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.argex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aspifor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.baeta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blueticket.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bobike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brunozanotti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cae.org.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cm-beja.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cofreprevidencia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.criaplac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cucapesca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cursolab.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ecp.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.energisacliente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eng.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estacao-imagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurosys.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globaldis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.greeniberica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupobm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupopreceram.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gtmotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gyptec.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.haco-etiquetas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelmoliceiro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.icsporto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inda.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.infosimposium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inspirainvestimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iqos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jorgeoculista.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.leroymerlin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojadacriacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojapro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ltm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.luquips.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisdados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marketingdigitalemcurso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.martassoares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maviripa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.medicapilar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.meiamaratonaestradareal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.montanheiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mtbrandao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.musica-esp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nan.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.news-ageas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nucleodata.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.polisport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.preceram.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prooptica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.repletodevida.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.restauranterubro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sadabandeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saturnonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudeonline.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sbao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.segbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sejaphd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.senge.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sesmed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sindisider.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.siro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sociedadeadvogados.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spmastologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.steelground.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tecsinapse.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.timeforchangenow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.usf-an.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valgo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vicaima.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.visiolab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wordseo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wortex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wundermanlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youbrand.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aerlis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.armazensronfe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.assp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.berlotlisboa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.crivelli.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.intermarche.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.multipublicacoes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.openquest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ship4you.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.zilian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.acp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.aki.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df7fbbbc50000040300473045022025ca2ecab0b6ffa343f754f49b27634b4db69aca70c79972ea843f4a31994f63022100e8935d27db91bbadd49c4bc5e8ecf92056ebe4120570ecc43be009dd0603d03f007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df7fbbbae000004030046304402204b4536b19c4277fdb3d1065a0a6ddb551ebbf3f8125394294fc8a9ad605ddf2b0220664e7d36a2399def32a9eac9ac842ef6795dc3b93f5a2fb233065f64289126d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005fedaf1084e35e9ff306ffcda0c02010dde740dc136c8c6c4c902a280271053301eb18f3e15a298b88da0567f32c9819f9587d3e4b01cb24f6e7d2ce9c49bc25f3f970a4d7e048f91c5ac2d14a9da5baeb3721c0e5311f406f318b48f5405f8abf3b00dcc781cf4dfcc5b26a23d3fbb96aaf6d871d434928a3beac6103861e40cb782ac4cbd041fdf7a360abed4b426f8ca14bb126450580a04293f17a357f1ee9019135c05fe7b5f0e71a2958fd6c088cc35f7154da1b5551a9fd4e6d668c71df5b5a7a7941f6f0f09695fcbdff316f2a35c4338c8f7561042f3b0871fd0fc8970f52a9d78c38539258da0abe68e9e896c45f40dd10a47ceca257a519836593