campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:c4:e1:7d:78:d0:e6:3b:07:f3:86:d2:34:29:8c:21:3d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:c4:e1:7d:78:d0:e6:3b:07:f3:86:d2:34:29:8c:21:3d
Serial Number (int): 343266325355146216190305342122292608246077
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:00:49:92:39:f7:e5:8d:c6:04:71:5a:ce:f0:f8:73:3c:e2:06:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:fd:a7:9e:b3:5e:58:52:4b:e1:17:6a:09:95:6a:24:e0:1b:0e:76
Fingerprint (sha256): 7d:27:65:97:38:9d:e5:af:77:f7:e4:9f:cc:da:61:8b:6e:ba:13:a9:24:d0:b8:08:5e:01:a5:0e:0d:b6:ac:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
com.mapamental.org
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
gstar.cadalist.com.br
info.trademidia.com
marketing.severinomelo.com.br
mkt.acountia.pt
mkt.admancriativa.com.br
mkt.atr.co.pt
mkt.balanzasmarques.es
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.celvitae.com
mkt.ciadosbotoes.com.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conaroma.com.br
mkt.conversacionesconbarriguitas.com
mkt.csoutdoors.pt
mkt.eacr.com.br
mkt.ecommerceymarketing.es
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.eurocupon.pt
mkt.europesagem.com
mkt.ferramentasdecoaching.com
mkt.get-ao.com
mkt.gloma.pt
mkt.grupobrasmoto.com.br
mkt.hi-techwonder.com
mkt.iccjp.com
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.npibrasil.com
mkt.ntkglobal.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.primaverabss.com
mkt.proddigital.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.sucessoemvendas.pt
mkt.susanadamaso.com
mkt.tresce.com
mkt.uaume.com
mkt.valepinho.com.br
mkt.vascomarques.net
mkt.youup.pt
mkt.yunit.pt
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.liquidworks.com.br
news.lisbonhotelnews.com
news.musicanocoracao.pt
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.clinicadepele.com.br
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.empregosmanager.pt
newsletter.igoldenvisa.com
newsletter.imt.pt
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pendrives.pt
newsletter.pens.pt
newsletter.pinayas.com
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2sJDUWBhwp1+2xtSahL
EYJz0XCdhybXQsTabrSIaTCXdXols8v1CUfeOoUTq+6pxuGm48OnhEuWXUptKNEr
HDlQxWXgyaR11jkPDIpgeI2K8AUkzQnhB9OBHQ1RMQi93tzU7x+D5ROXYVFNttjS
WWxIrcmHjRq4uxOEtVshLp6MNYRu0SBjiu4gAfvIgNSCoslvdYONeDimXTXt6UKW
xKH+w42wGa1twIJCHwMZl6F7lXxTLaXxiB1KgJyKzft8PU3X69pJPfmiCVcdgLVq
zuwrH20Nsa9xm/XYzJ+pCoRIpCgMgf+Qrfw9QemarDg1qvh7/kOk+TAmuljoxkDv
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343266325355146216190305342122292608246077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 09:31:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-30 09:31:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25174203790827442637428189944256556166203466296996574240516820808908830514355187329735544680017919949064350901384775840065505821889775660323642900475772643141252188576053387426517028312945943529946237224735768261637786972994985075179018891203420704043599579252879598627419923649072951243146949789929639460083776173317657285222457121061225906820517018976101203375223046811705940488566493807529925785206712535664323934350676777593203953317978095358828008788293678067920199542976190589202876203676027869561945485055615279321013522458086132456113626139898842418934239850991650470991723793115387903891554495576589530623901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d400499239f7e58dc604715acef0f8733ce206b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.mapamental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstar.cadalist.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acountia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.celvitae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciadosbotoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conaroma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conversacionesconbarriguitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ecommerceymarketing.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.get-ao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupobrasmoto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hi-techwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ntkglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.primaverabss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.susanadamaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valepinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yunit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.lisbonhotelnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.clinicadepele.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.empregosmanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.imt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pendrives.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pens.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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