mkt.algarveraceresort.com

Issued by R3

About this certificate

This digital certificate with serial number 04:36:24:d1:12:65:65:62:be:2a:c8:40:07:c1:b0:64:e3:8e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.algarveraceresort.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:36:24:d1:12:65:65:62:be:2a:c8:40:07:c1:b0:64:e3:8e
Serial Number (int): 366873329311780149002348595091010773902222
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:54:fd:df:75:2c:32:25:c1:95:81:43:57:52:11:96:84:79:3b:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:70:09:34:b9:17:80:a2:44:38:52:68:57:98:63:a7:d7:66:5f:6f
Fingerprint (sha256): 61:56:e6:06:ce:ae:76:b0:b7:80:17:1e:8a:1d:4f:4c:1d:b1:ca:ec:de:66:5a:8e:f6:ef:f8:38:bc:c6:7c:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.algarveraceresort.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.algarveraceresort.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunicacao.aeva.org.pt
conteudo.bimexperts.com.br
egoi.email.forallphones.com
egoi.novatronica.com
expansao.tudobemseguros.com.br
info.fotosport.pt
mkt.1908lisboahotel.com
mkt.academiadofole.com
mkt.aclem.pt
mkt.advise2achieve.com
mkt.aerotexextintores.com.br
mkt.aldeiadoscapuchos.pt
mkt.algarveraceresort.com
mkt.altaroda.pt
mkt.alternativemedia.pt
mkt.amazingevolution.pt
mkt.arcadia.pt
mkt.assistenciafeminina.com.br
mkt.canalcooperativo.com.br
mkt.caoazultshirts.pt
mkt.carteiraexpress.com.br
mkt.castelomagico.pt
mkt.cdm.pt
mkt.chipbelem.com.br
mkt.cloudbasesport.com.br
mkt.colegiolatosensu.com.br
mkt.comoempreendernanet.com
mkt.conteudoativo.com.br
mkt.czarlisbonhotel.com
mkt.direcionalcontabeis.com.br
mkt.dohlerhomes.pt
mkt.dourocup.com
mkt.emporiodocesesalgados.com.br
mkt.engemetro.com
mkt.equilibrioconsultoria.com
mkt.escolhaempreender.com
mkt.eseguro.com.br
mkt.estudiodeimpacto.pt
mkt.facilconsulta.com
mkt.febral.com.br
mkt.forallphones.com
mkt.galaxpay.com.br
mkt.garbrasil.com.br
mkt.gececom.com.br
mkt.gestaodaessencia.com.br
mkt.gestaodebolso.com.br
mkt.grandideia.pt
mkt.ibracon.com.br
mkt.ideris.com.br
mkt.ifoodcorp.com.br
mkt.info.badireto.pt
mkt.intext.solutions
mkt.ipeg.org.br
mkt.isq.pt
mkt.kidsa.com
mkt.lisdente.pt
mkt.lojagiravida.com.br
mkt.lotusfineart.com.br
mkt.magicway.com.br
mkt.maosamigas-mg.org.br
mkt.mferreiraecosta.pt
mkt.miloandreo.com.br
mkt.miudo.pt
mkt.multienergy.com.br
mkt.nutriestilo.com.br
mkt.online.arcadia.pt
mkt.oportomedicalspa.com
mkt.pedemeia.pt
mkt.pestanagolf.com
mkt.por1sorriso.org
mkt.portogolfdestination.com
mkt.portugalbywine.com
mkt.probioticosbrasil.com.br
mkt.quickmassageportugal.com
mkt.quintadolorde.pt
mkt.quintamachados.com
mkt.qustomcnc.com
mkt.rafaelpiloto.com
mkt.rd7comunica.com
mkt.realup.com.br
mkt.rfmsomnii.com
mkt.rfontes.com
mkt.ricardomendoza.pt
mkt.rocketlabs.com.br
mkt.rupestre.cl
mkt.shake4u.com.br
mkt.spaceappsbh.com
mkt.speedparty.net
mkt.staples-mail.pt
mkt.synerhgon.com.br
mkt.tabataamaral.com.br
mkt.thelove.com.br
mkt.timetobe.pt
mkt.tuaterra.net.br
mkt.vistabeagle.com.br
mkt.vitalbuy.com
mkt.winebroker.pt
mkt.youandthesea.pt
mkt.zeroacucar.com.br
mkt1.ventacorporativagrupoaxo.com

Other certificates including the domain name algarveraceresort.com

(limited to 100 certificates)
algarveraceresort.com
mkt.agrobrasilia.com.br
mkt.agrobrasilia.com.br
mkt.batistacarioca.com.br
mkt.algarveraceresort.com
algarveraceresort.com
mkt.estudodoaudio.com.br
mkt.estudodoaudio.com.br
algarveraceresort.com
mkt.batistacarioca.com.br
mkt.algarveraceresort.com

Certificate

The complete raw certificate details for mkt.algarveraceresort.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGkhnmgELLmHDjlQ/y5y
Nv6pNk52ZOgvWB6aKQblu6xBl8I0K/JXZ8bLaZEiWmlPIVvoNZAvtq4BpVVneXwQ
xdiRf4/qkzo1j7qhfHkFoZLc6LX9w0PBG4mC1QaygWAOmDzVefAS4ty+u09iAesI
dSv7AWYNeM/PQZFbas9IIGAP3BP662Bwrzit47ad8eG+0rWtHpsSENpKB0jLUqXe
295zf1rkubrZWu4GPRezOfcDLXSb8yN4/VWTOybUX+lxEy0jLo0EJhjAlxLpZAkL
0678PcEWEueTgmisZ2LL2bU4d/Wl9Y/IOOPnivkkNl7cOC2aCqFiMuf4FvZhnGQ/
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366873329311780149002348595091010773902222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 17:34:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-30 17:34:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.algarveraceresort.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20249970982292404090380879267350081155581476008042155149682632137272942519890235456418991143084694181074302593387426594626016826391633597347712747229629327226334924159149104291454570625668374701916908886338770697729312102827416138195520608159655414831593137887428203653253738081549504085184784512829351331257407223383565385584345035592362795631113090650680385581184896464382537566102717036334691673567762050856189274267643646786950121790422733170532746040560278618291889578409785521863595108201382023289554347028150754820271234761472021782153541665258603155388643629170832477195990774396205249238162699369515017584569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e254fddf752c3225c19581435752119684793bab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2290 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.aeva.org.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudo.bimexperts.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.email.forallphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.novatronica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expansao.tudobemseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.fotosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.1908lisboahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiadofole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aclem.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advise2achieve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aerotexextintores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aldeiadoscapuchos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.algarveraceresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.altaroda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alternativemedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amazingevolution.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.assistenciafeminina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canalcooperativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.caoazultshirts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.carteiraexpress.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.castelomagico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cdm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.chipbelem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cloudbasesport.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.colegiolatosensu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comoempreendernanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conteudoativo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.czarlisbonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.direcionalcontabeis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dohlerhomes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dourocup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.emporiodocesesalgados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.engemetro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.equilibrioconsultoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escolhaempreender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.estudiodeimpacto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.facilconsulta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.febral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.forallphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.galaxpay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.garbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gececom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gestaodaessencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gestaodebolso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grandideia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibracon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ideris.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.info.badireto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intext.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ipeg.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.isq.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kidsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lisdente.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojagiravida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lotusfineart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.magicway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maosamigas-mg.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mferreiraecosta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miloandreo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.miudo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multienergy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nutriestilo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.online.arcadia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oportomedicalspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pedemeia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pestanagolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.por1sorriso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portogolfdestination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portugalbywine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.probioticosbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quickmassageportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintadolorde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.quintamachados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.qustomcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rafaelpiloto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rd7comunica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.realup.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfmsomnii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rfontes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ricardomendoza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rocketlabs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rupestre.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.shake4u.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spaceappsbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.speedparty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.staples-mail.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.synerhgon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tabataamaral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.thelove.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.timetobe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tuaterra.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vistabeagle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vitalbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.winebroker.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youandthesea.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zeroacucar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt1.ventacorporativagrupoaxo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c3d22cea90000040300473045022100a099404b7383cca4557a5d235ddc5fc2586c73ffd639ee2f5862149600547be002200b19ddb3612f631027a9a2441bde6d59fbf7e85fe9bb59d5d76d8a2222e98f6b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017c3d22cff60000040300483046022100c87462599da37538e25e04ac4df785b745b1c9b52c37dfb8df0a2f052b686614022100ec84dbeacb7498b753bf4e19c1471ba7beb5404d8c8a28809312d23ed76263a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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