campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:71:38:e5:e2:04:a5:20:b4:da:d0:ef:72:7e:71:8a:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:71:38:e5:e2:04:a5:20:b4:da:d0:ef:72:7e:71:8a:c4
Serial Number (int): 401683691161433961862475062599909624613572
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:81:d4:89:ce:cf:4f:d4:67:b7:90:a4:37:56:8f:20:14:e3:00:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:71:c0:fe:86:4c:ea:98:83:bd:f4:d4:44:7b:33:46:9d:b9:06:dd
Fingerprint (sha256): 7a:a0:53:e5:a4:ca:5c:63:4c:b7:ab:53:6d:e7:d3:37:a6:de:ec:68:7c:ec:f8:f7:93:e9:90:58:18:51:29:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
com.mapamental.org
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
gstar.cadalist.com.br
info.trademidia.com
marketing.severinomelo.com.br
mkt.acountia.pt
mkt.admancriativa.com.br
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.celvitae.com
mkt.ciadosbotoes.com.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conaroma.com.br
mkt.conversacionesconbarriguitas.com
mkt.csoutdoors.pt
mkt.eacr.com.br
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.ferramentasdecoaching.com
mkt.get-ao.com
mkt.gloma.pt
mkt.hi-techwonder.com
mkt.hoteisnet.net
mkt.iccjp.com
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.julianafonte.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.megaturviagens.com.br
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.npibrasil.com
mkt.ntkglobal.com
mkt.omnibees.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.serrasconsulting.pt
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.sucessoemvendas.pt
mkt.tejobrinde.pt
mkt.tresce.com
mkt.uaume.com
mkt.vascomarques.net
mkt.xzconsultores.pt
mkt.youline.com.br
mkt.youup.pt
mkt.yunit.pt
mkt.zantia.com
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.liquidworks.com.br
news.musicanocoracao.pt
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.empregosmanager.pt
newsletter.igoldenvisa.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pendrives.pt
newsletter.pinayas.com
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzlgCHcsYNopSHz/7OEB
x6uBz6rSR8Q7hFoqdATDzK5V3vI+HlLjAv7inpH6VWXb1fp7ayRDQiN7MpFiEG++
z+/xl/2VxdWQnAvp54ySfOFIW4lQlTTTn6hL6jn22usy1+juC2Sx9G9u6xkkcuMD
1llTOLHQ+swYTdewTWciykZL8m21yMJyiCVQ6ichA+k9psQ4eUiaDuZj/aP2+vL1
/qSoHHvyz1FNaLaDNUg0VvfmfiRzsn14SQlxPpQt6wsZZ50r+Goo4PTsarW41pJg
+GbysfY3LGSlfZGvwFQKqnpBGnTrK6bSajrTZX3U0QsflU2ig3+06USdfQ7sfo7/
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401683691161433961862475062599909624613572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-01 02:16:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-01 02:16:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24644762199061445616027980015230182692622382948444240490892507544103473543751921594273370932279926695640376220417015821335755279651086034374330185742821661412578880191095319334631554220938742783772100587129606296921749571296564975534859024182585679190427363988342137890349767124980959119009386578113394558436686535000261880448253229086069036839605583210597362888886738426163775483656405252758683677637726901705770664244887669653310013189316332429730500120868654540807605200824872000982430950533185693987430216035333576274901529801444534702935380346882503107996368586557966621138267825977932577941541398492372911718351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b781d489cecf4fd467b790a437568f2014e3007f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.mapamental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstar.cadalist.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acountia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.celvitae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciadosbotoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conaroma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conversacionesconbarriguitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.get-ao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hi-techwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hoteisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.julianafonte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.megaturviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ntkglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omnibees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yunit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.empregosmanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pendrives.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e13a38fec0000040300483046022100ba284937db59d33e0968e155c347b9258936a15ba6bf2703de58737d8a88b64f022100b316651cdd6fe3eaad8d7ee86e1625deaef8ba1edfb82de712b2b2833f6d287c0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e13a38fdc0000040300483046022100d38a5cf939efbc72121c2e83b3c94884a1dea03b03a8ee320dd7758a2c17dffa022100f6abb06f0daeb674ded7c0f0645fb216009c81efd098e63fb4a56b838b6ff48c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a8e1b6a5561c313ea13b14890b9d5d2ea1cf612dffbef6dac42d1930d1cdb2c7184e8d01357393f0eb4f59f46d6ae6476323b291cab5e484eb9bbdde4904196007bdd24101bee937399d1443e543d8c80d9a0a19453e099df7e261aac180a43673c1f4f01aff21c7c84a9e2bd91773296b56f2f958e37c175fcb41e3dff3f8a071961b3630a5f04cfb2f518b144cd687cdcfbe21f5053cf38d0f3baac71ffa3f0527fa7974df65fdf392f0e19be33bae5e8a53f38c9ce36bf2007b0c33df44550094422f8b5454dec8e742e5bdb21eb3b336d1b470d861fa993a0bc313c0aec2dfaa31045a7b4000d56f59a5ce3e4681fb8006821ed69832a45f5c323ec6466