mkt.gourmetzinho.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:6a:e0:8e:f5:f3:23:fa:51:f2:97:b7:24:84:9e:ac:2d:df was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.gourmetzinho.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6a:e0:8e:f5:f3:23:fa:51:f2:97:b7:24:84:9e:ac:2d:df
Serial Number (int): 384817563986324127794077878571937869606367
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:b6:03:b1:7a:eb:95:c5:53:f8:47:07:09:26:15:86:63:d7:9d:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:54:0f:37:c2:b2:7e:77:aa:bd:80:93:a1:68:bd:1a:04:89:53:0d
Fingerprint (sha256): 72:8a:d4:05:28:d6:14:c7:94:b1:2d:14:bb:e4:4d:fa:58:8d:88:fe:26:73:cc:5f:00:8b:77:4f:be:cd:d7:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.gourmetzinho.com.br

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.gourmetzinho.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beatriz.mulherintencional.com
comunicados.escoladailha.com.br
egoi.anabeladapoca.com
egoi.mosellda.com
experiences.3fibers.ca
info.indaquafeira.pt
info.indaquamatosinhos.pt
info.indaquaoazemeis.pt
info.indaquastirsotrofa.pt
info.indaquavconde.pt
info.w3inova.com.br
instituto.implo.com.br
mkt.aborgesdoamaral.pt
mkt.about.pt
mkt.activesys.pt
mkt.ambiglobal.com
mkt.apimecbrasil.com.br
mkt.b2rocket.com.br
mkt.bancokeve.ao
mkt.belasartes.br
mkt.bet7partners.com
mkt.careclinics.pt
mkt.casadeinvestimentos.com
mkt.casadeinvestimentos.pt
mkt.cdlbrusque.org.br
mkt.cdmceabermudez.com
mkt.centraldaaposta.com.br
mkt.centromedicorp.org.br
mkt.comeromundo.pt
mkt.confeitariapeixinho.pt
mkt.consultoriadeportiva.es
mkt.coop.consum.es
mkt.domaineduvin.com.br
mkt.eirenegarcia.com
mkt.erasmusmais.pt
mkt.escoladailha.com.br
mkt.firescalemodeler.com
mkt.focanotopo.com.br
mkt.formaepreposparto.pt
mkt.fundacionlovaas.es
mkt.gourmetzinho.com.br
mkt.growthmentoring.com.br
mkt.gueixa.pt
mkt.guidocortes.com.br
mkt.hellopark.pt
mkt.isabelpedrososilva.pt
mkt.lcdas.es
mkt.librascomdeus.com
mkt.liftech.pt
mkt.maisformacao.com
mkt.manuelalves.pt
mkt.mulheres-ativas.com
mkt.musicrun.es
mkt.naturalfits.com.br
mkt.nhood.pt
mkt.nkconsultores.com.br
mkt.nocautesport.com.br
mkt.normax.pt
mkt.phyrius.pt
mkt.plbrasil.com.br
mkt.prodeincendio.com
mkt.qta.pt
mkt.racingtime.pt
mkt.realinvest.com.py
mkt.sarrabisco.net
mkt.scannface.pt
mkt.semetiqueta.com.br
mkt.shaker.pt
mkt.sub-gifts.pt
mkt.tiesports.pt
mkt.winedomain.com.br
mkt.xior.es
mkt2.sa-formacao.pt
news.gresart.com
newsletter.dogmashoes.com

Other certificates including the domain name gourmetzinho.com.br

(limited to 100 certificates)
mkt.furacaolive.com.br
mkt.furacaolive.com.br
mkt.elyteclass.com
gourmetzinho.com.br
mkt.furacaolive.com.br
www.gourmetzinho.com.br
www.gourmetzinho.com.br
gourmetzinho.com.br
mkt.furacaolive.com.br
mkt.furacaolive.com.br
mkt.furacaolive.com.br
mkt.bedivar.pt
mkt.furacaolive.com.br
www.gourmetzinho.com.br
mkt.furacaolive.com.br
mkt.bedivar.pt
www.gourmetzinho.com.br
mkt.furacaolive.com.br
gourmetzinho.com.br
mkt.furacaolive.com.br
www.gourmetzinho.com.br
mkt.bameletro.com.br
mkt.gourmetzinho.com.br
www.gourmetzinho.com.br
mkt.lal.org.uk
mkt.furacaolive.com.br
mkt.furacaolive.com.br
www.gourmetzinho.com.br
www.gourmetzinho.com.br
mkt.fitnesslim.com
gourmetzinho.com.br
www.gourmetzinho.com.br
mkt.furacaolive.com.br
gourmetzinho.com.br
mkt.fitnesslim.com
www.gourmetzinho.com.br
www.gourmetzinho.com.br
mkt.elyteclass.com
mkt.contek.pt
mkt.furacaolive.com.br
mkt.furacaolive.com.br
mkt.furacaolive.com.br
www.gourmetzinho.com.br
mkt.furacaolive.com.br
www.gourmetzinho.com.br
www.gourmetzinho.com.br
mkt.furacaolive.com.br
gourmetzinho.com.br
mkt.bameletro.com.br
mkt.furacaolive.com.br

Certificate

The complete raw certificate details for mkt.gourmetzinho.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9a2V0c6sHczqJQH1JS+n
8lupQHI+GNAnCnfjDtzWX/u3+6OqhSOmKmxIeb2aobOCCxMzMO4HgDeRgMGp6wuY
1fNXHnPIjTLKq5HqKm5GA+jkjgGXuHAZPqZo0996yVMuTmYh3vzwWhgNNipmtwXh
rEtnQ9HAKeCoMfF677FL2JGZlIpfhOR8Vo3Joo2pi12D0Twg3X/hJV/DAuDzCjqQ
qSq6uZ/8YecqQu1XR86xpSJHrINPVkK6gYy/AMxEifbhftZFLPqXihZ8QyxForUL
uDCSPtQOwm+uaqwBuMkqxjZ4dF1ZK+td54rix9wDIDWbfV0v9W6RrVJk2V3A7Qa/
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384817563986324127794077878571937869606367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 13:22:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 13:22:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.gourmetzinho.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31013982785190514448200051512551702177924843177869561641291286308959741898354845692386269409126135582110024613245259739023007549637120950490289008479417711705387614571440745131703461847304789221674156340486957841286904510377281792037781007845636011263302319758702482426059341812409007752020114545330241377137567647717570599201475883218087319482344761901679374804166866711658791065173468973313987214979944462584406523110376989311509536118885872289093641886418915837534329885352921401360438700301274270101499194574977006833807280894566626941835885076278879190945384619158487204458900305277774804269411695864777009446731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eb603b17aeb95c553f847070926158663d79dce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatriz.mulherintencional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicados.escoladailha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.anabeladapoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.mosellda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.3fibers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.indaquafeira.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.indaquamatosinhos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.indaquaoazemeis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.indaquastirsotrofa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.indaquavconde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.w3inova.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instituto.implo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aborgesdoamaral.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.about.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.activesys.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ambiglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apimecbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.b2rocket.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bancokeve.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.belasartes.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bet7partners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.careclinics.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casadeinvestimentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casadeinvestimentos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cdlbrusque.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cdmceabermudez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centraldaaposta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centromedicorp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comeromundo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.confeitariapeixinho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.consultoriadeportiva.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.coop.consum.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.domaineduvin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eirenegarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.erasmusmais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escoladailha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.firescalemodeler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.focanotopo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.formaepreposparto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fundacionlovaas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gourmetzinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.growthmentoring.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gueixa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.guidocortes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hellopark.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.isabelpedrososilva.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lcdas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.librascomdeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.liftech.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisformacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.manuelalves.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mulheres-ativas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.musicrun.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.naturalfits.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nhood.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nkconsultores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nocautesport.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.normax.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.phyrius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prodeincendio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.qta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.racingtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.realinvest.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sarrabisco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.scannface.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.semetiqueta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.shaker.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sub-gifts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tiesports.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.winedomain.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xior.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.sa-formacao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.gresart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.dogmashoes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb476635a000004030048304602210095e9e6bf8578cf9618b101c2b070ec04258d1c1c3f4e3a20d3024fe7ba00e83f022100e892cd77a214ced32de4d83e83b684e24fbf17062969c45df95f5e764209d490007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb4766358000004030047304502201da1c5fd838725864f87ec2854997211247d189922d232980e9fd839ec21860b022100861e13f3999aa795f541efc6fa35b17cf0e988d74b913b2e9d41248db6b7b346
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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