mkt.lal.org.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:99:13:1e:68:4b:51:d4:ad:37:79:e2:aa:e9:c0:a0:22:c5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.lal.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:13:1e:68:4b:51:d4:ad:37:79:e2:aa:e9:c0:a0:22:c5
Serial Number (int): 400537759082108277307211533088854972048069
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:21:49:13:86:92:d0:be:87:1f:5e:96:d0:07:64:cd:de:fe:58:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:46:1f:99:e7:21:4c:6f:dc:e5:a5:0d:2b:6b:d5:0d:61:ae:f3:f0
Fingerprint (sha256): 7a:52:c6:1a:2a:e8:f5:ef:67:68:98:11:15:4e:86:3a:ca:d4:be:04:ed:e7:9c:c9:81:30:1e:23:31:de:2c:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.lal.org.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.lal.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

br.institutokoziner.com
comunicacao.careclinics.pt
conteudo.sabialaranjeiracoffee.com.br
conteudos.amapojeans.com.br
esg-egoi.blendon.com.br
info.inature.pt
lp-abarth.carby.pt
lp-audi.carby.pt
lp-dacia.carby.pt
lp-ds.carby.pt
lp-fiat.carby.pt
lp-hyunday.carby.pt
lp-jeep.carby.pt
lp-mitsubishi.carby.pt
lp-nissan.carby.pt
lp-opel.carby.pt
lp-peugeot.carby.pt
lp-renault.carby.pt
lp-seat.carby.pt
lp-skoda.carby.pt
lp-volkswagen.carby.pt
lp.aservicoda.adm.br
lp.blogsicoobcredpit.com.br
lp.bomsaldo.com.br
lp.dreamportugal.pt
lp.hendo.pt
lp.institutovn.com.br
lp.jornaloancora.com.br
lp.magnificobrindes.com.br
lp.misturadeamor.pt
lp.parahotel.com.br
lp.simecor.pt
lp.tdmark.pt
lp.telheiro-goncalves.pt
lp.vidadeoracao.com.br
lp.yanaiatacadista.com.br
marketing.adr.pt
marketing.ambidata.com
marketing.hrgroup.pt
marketing.labsummit.com
marketing.tdmark.pt
mk.gourmenu.pt
mkt.alicouro.pt
mkt.beesby.com
mkt.cadeinor.com
mkt.crpg.pt
mkt.duaspele.com.br
mkt.fabrindex.pt
mkt.grupolusiaves.pt
mkt.homestep.pt
mkt.incomef.com
mkt.kitescolarsaopaulo.com.br
mkt.lal.org.uk
mkt.likegarden.pt
mkt.mimonatura.pt
mkt.necho.pt
mkt.saudemolecular.com
mkt.wiabiliza.pt
mkt2.normax.pt
mktng.vilavitaparc.com
mktpage.monterei.com
orquestra.orquestradoalgarve.com
pag.phyrius.pt
page.e-campagne.com
page.gatomoderno.com.br
page.projetos2030.pt
page.soundsgood.pt
page.wb.com.br
pages.academiadopersonaltrainer.com
pages.advogado-pr.adv.br
pages.aemangualde.com
pages.airtouch.pt
pages.ajbarroso.pt
pages.caldasdastaipas.com
pages.desafiodos150dias.com
pages.dircampe.com.br
pages.estudioolho.com
pages.ewaves.pt
pages.falconjobs.pt
pages.filtrilo.com.br
pages.grupojorgeoculista.pt
pages.gruporia.pt
pages.jabeira.pt
pages.koetoficial.com
pages.legalmca.com
pages.oysterresortwear.com
pages.particuladigital.pt
pages.pingoo.casa
pages.sciaena.org
pages.selfab.pt
pages.vistagavia.com.br
pagina.gourmetzinho.com.br
pagina.mundoemartes.com.br
paginas.imoveispaiva.com.br
paginas.telelimp.com.br
pg.canalqueroaprender.com.br
pg.fabricademenus.com.br
signup.onstorm.pt
site.meuexagerado.com.br
sorteio.miixshop.com.br

Other certificates including the domain name lal.org.uk

(limited to 100 certificates)
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
mkt.lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
mkt.contek.pt
staging.lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk

Certificate

The complete raw certificate details for mkt.lal.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4raTSdyewCIlV65UI39f
pkBxQb1FxkFYHTWjMBOLm1L4v5VUeuE22IWjTty9f1522OjbCevQzkMGwKU3Ul5e
/sy/sEQxgDKUbuv8SUZ7sN8pchI5lak4Zse+eUwOnJw0N55lh9dJg8oYGKivt6eq
CivPq1TVtuzBpS9+OEeWvAM2oNB0+xWqGIj0H2PzvdGAuHaltcbtBpC4vpqXyIWO
pIdlGEDub5BGCT5VEpCjAPU/Lf782H75UX+tFqoJ2VLicD0jS7i8p+X9kFkDhvIb
XWLC4y63YPoT5R82dF6dsnuEJXDkTN0AXYgaGkaOB4kbSFpDUGiEiLxgBdOenRn1
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400537759082108277307211533088854972048069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 03:18:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 03:18:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.lal.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28619888180850036778233358442968047468101602063119910117568883291363700043261880219777518180232386298586534818369214398248026830572233381806837651358701326165069395924988232814703130529212421364424256913220700786080461706273637617068635681784337839291320412072945059638353913412962364698373271297021966436178507269797348916667127035970587424973562992550161131238099625707176033613481142725175686936023473843255347452335101234521047367764474380008199309345707526516661187634160035785171690436574047774192893427851568016572221654585661530870749861128772897556721361169584036086405346078608466651903089950001730625861007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992149138692d0be871f5e96d00764cddefe5858
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.institutokoziner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.careclinics.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudo.sabialaranjeiracoffee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudos.amapojeans.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esg-egoi.blendon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.inature.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-abarth.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-audi.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-dacia.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-ds.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-fiat.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-hyunday.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-jeep.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-mitsubishi.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-nissan.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-opel.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-peugeot.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-renault.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-seat.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-skoda.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-volkswagen.carby.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.aservicoda.adm.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.blogsicoobcredpit.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.bomsaldo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.dreamportugal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.hendo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.institutovn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.jornaloancora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.magnificobrindes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.misturadeamor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.parahotel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.simecor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.tdmark.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.telheiro-goncalves.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.vidadeoracao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.yanaiatacadista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.adr.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.ambidata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.hrgroup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.labsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.tdmark.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.gourmenu.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alicouro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.beesby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cadeinor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crpg.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.duaspele.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fabrindex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupolusiaves.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.homestep.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.incomef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kitescolarsaopaulo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.likegarden.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mimonatura.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.necho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudemolecular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wiabiliza.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.normax.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktng.vilavitaparc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktpage.monterei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orquestra.orquestradoalgarve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pag.phyrius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.e-campagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.gatomoderno.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.projetos2030.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.soundsgood.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.wb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.academiadopersonaltrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.advogado-pr.adv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.aemangualde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.airtouch.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.ajbarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.caldasdastaipas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.desafiodos150dias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.dircampe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.estudioolho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.ewaves.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.falconjobs.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.filtrilo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.grupojorgeoculista.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.gruporia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.jabeira.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.koetoficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.legalmca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.oysterresortwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.particuladigital.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.pingoo.casa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.sciaena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.selfab.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.vistagavia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagina.gourmetzinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagina.mundoemartes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paginas.imoveispaiva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paginas.telelimp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.canalqueroaprender.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.fabricademenus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.onstorm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.meuexagerado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorteio.miixshop.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cc33e814a0000040300473045022033521cb8f933695e64cd686fb2d53187bce98089167c3735cb966fb227f5f49d022100d110cac7a27926f3583c3d8b0ffd50a9957f4b129bf0a1e1e2bd65ee0cd5c7c70077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc33e81430000040300483046022100a0acb38f3d2fa61b4573fdf48d7f1fa756815057f447e8c1acab74179deb22e4022100b5eac090aeef3c01b801b5c089d0e92b8f190e77ffab0e2d7d44bcaab27e95a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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