mkt.conquistadigital.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:70:37:31:bb:e8:31:cc:2c:78:c5:cc:71:a3:38:59:14 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mkt.conquistadigital.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:70:37:31:bb:e8:31:cc:2c:78:c5:cc:71:a3:38:59:14
Serial Number (int): 428564660074042253186599543232121674422548
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:22:d3:d1:74:01:0e:91:ce:8e:7d:09:bf:ef:91:8b:f1:37:96:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:6b:2c:9b:98:39:c2:35:6d:6a:2e:df:4d:73:1d:a5:c2:62:ba:cb
Fingerprint (sha256): 7f:88:fb:e2:70:d0:10:73:04:8e:c5:df:02:75:c2:81:d7:01:6f:f6:11:a5:80:1f:ca:9d:35:9c:73:96:2f:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.conquistadigital.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.conquistadigital.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comunicacao.stayhotels.pt
comunidade.esquemaeletrico.website
consulting.eqsglobal.com
egoi.sistrade.com
email.bravosconsorcios.com.br
email.mafepre.pt
email.onetimecorp.com.br
emails.oppa.com.br
emkt.custapoucoseduzir.com.br
experiences.sportwc.ca
giolena.emsintoniacomasaude.com.br
imprensa.essenciacompleta.pt
info.docevidadiabetes.com.br
info.sportwc.ca
info.vinha.pt
marketing.ativokids.com
marketing.cap-lab.com.br
marketing.geonext.pt
marketing.sportwc.ca
mkt.agirpeloplaneta.pt
mkt.algarvepaincentre.com
mkt.angu.pt
mkt.animaladvocacycareers.org
mkt.artcruz.com.br
mkt.bemboladobrasil.com.br
mkt.bioforma.pt
mkt.boutiquedassi.com.br
mkt.boxerbeers.com
mkt.brindespromocao.com.br
mkt.caixacolonial.club
mkt.calcadonet.com.br
mkt.cauny.com
mkt.checkin.com.pt
mkt.cheeselab.com.br
mkt.cja-lda.pt
mkt.conquistadigital.com.br
mkt.contaspoupanca.pt
mkt.crivosoft.pt
mkt.dualup.pt
mkt.ebianch.com.br
mkt.esquadros.com.br
mkt.fechadurasabreefecha.com.br
mkt.femedica.pt
mkt.fresh-home.pt
mkt.fs-baby.com
mkt.habanosnightbrasil.com.br
mkt.habitacao.org.br
mkt.herbago.pt
mkt.housers.es
mkt.hushpuppies.es
mkt.ibraph.com.br
mkt.iglesiaevolution.com
mkt.iguariacampeira.com.br
mkt.inaed.com
mkt.ivansaraiva7.com
mkt.jtip.com.br
mkt.jtmsa.com
mkt.k-elec.com
mkt.laranjazen.com
mkt.mackflex.com.br
mkt.maredivini.com.br
mkt.mercatopet.com.br
mkt.mergulhandonaviagem.com.br
mkt.motivo.pt
mkt.mr-blue.com
mkt.multibar.com.br
mkt.netpoppers.com
mkt.norterefrigeracao.com.br
mkt.northcoastmadeirahotels.com
mkt.novagaya.com
mkt.novaluz.pt
mkt.nutsoriginal.pt
mkt.ojp.pt
mkt.pascoalrenovaveis.com
mkt.petitenfance.com.br
mkt.portaldovet.com.br
mkt.qdlcc.com
mkt.r2sap.com
mkt.rafaelpohren.com.br
mkt.realgroup.pt
mkt.realvitur.pt
mkt.rmhub.pt
mkt.seanite.com
mkt.segmentodigital.pt
mkt.sensahotels.com
mkt.smartgram.com.br
mkt.stayhotels.pt
mkt.topchallenge.pt
mkt.umavida-melhor.com
mkt.vamospoupar.com
mkt.vfc.pt
mkt.vilaimperial.com.br
mkti.isinaliza.com
news.gatomoderno.com.br
news.ind.pt
news.omacademy.pt
news.wb.com.br
newsletter.pacto.cc
newsletter.yvesrocher.pt
platmkt.lojadacrianca.com.br

Other certificates including the domain name conquistadigital.com.br

(limited to 100 certificates)
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
sni.cloudflaressl.com
sni219994.cloudflaressl.com
mkt.best-of.pt
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
membros.conquistadigital.com.br
conquistadigital.com.br
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
lp.conquistadigital.com.br
sni219994.cloudflaressl.com
membros.conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
lp.conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
mkt.imediato.pt
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
conquistadigital.com.br
conquistadigital.com.br
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com
sni219994.cloudflaressl.com

Certificate

The complete raw certificate details for mkt.conquistadigital.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINfDCCDGSgAwIBAgISBOtwNzG76DHMLHjFzHGjOFkUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDEwMjIyMTRaFw0yNDAxMzAwMjIyMTNaMCYxJDAiBgNVBAMT
G21rdC5jb25xdWlzdGFkaWdpdGFsLmNvbS5icjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANYwixGgtDtxrMIVdEwVOIFJKGDL6J15SCtUYgZbeR1ebysM
VkVpGp9VMv1EdcluCcC2Wcobam0/7Yt//VMY9k4bqREM0pAdW0UVcH96T0+wDaju
+rdyS3sbf2KescZCJc/znEYzopTHbCe5TR8jplmLrBXOL6pivItx9nKFdkuDxFOP
A6UdaZatY+yLXskyn/r5+Hbo4dOPrWld4ZmRGF5xkYxFrWIaGugznrRydTPKAqvE
hnGHBkHi8ahSPkf3WSg9vXTCSsqDVTmcmNryK+TyVw9X09Bd0NL+RybwWkmnHzmA
M6VE2PjsjJ0QMEnvgKbnh046qWo0aMK8ZdmGCAkCAwEAAaOCCpYwggqSMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUUyLT0XQBDpHOjn0Jv++Ri/E3lk8wHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggibBgNVHREEggiSMIIIjoIZY29tdW5pY2FjYW8uc3Rh
eWhvdGVscy5wdIIiY29tdW5pZGFkZS5lc3F1ZW1hZWxldHJpY28ud2Vic2l0ZYIY
Y29uc3VsdGluZy5lcXNnbG9iYWwuY29tghFlZ29pLnNpc3RyYWRlLmNvbYIdZW1h
aWwuYnJhdm9zY29uc29yY2lvcy5jb20uYnKCEGVtYWlsLm1hZmVwcmUucHSCGGVt
YWlsLm9uZXRpbWVjb3JwLmNvbS5icoISZW1haWxzLm9wcGEuY29tLmJygh1lbWt0
LmN1c3RhcG91Y29zZWR1emlyLmNvbS5icoIWZXhwZXJpZW5jZXMuc3BvcnR3Yy5j
YYIiZ2lvbGVuYS5lbXNpbnRvbmlhY29tYXNhdWRlLmNvbS5icoIcaW1wcmVuc2Eu
ZXNzZW5jaWFjb21wbGV0YS5wdIIcaW5mby5kb2NldmlkYWRpYWJldGVzLmNvbS5i
coIPaW5mby5zcG9ydHdjLmNhgg1pbmZvLnZpbmhhLnB0ghdtYXJrZXRpbmcuYXRp
dm9raWRzLmNvbYIYbWFya2V0aW5nLmNhcC1sYWIuY29tLmJyghRtYXJrZXRpbmcu
Z2VvbmV4dC5wdIIUbWFya2V0aW5nLnNwb3J0d2MuY2GCFm1rdC5hZ2lycGVsb3Bs
YW5ldGEucHSCGW1rdC5hbGdhcnZlcGFpbmNlbnRyZS5jb22CC21rdC5hbmd1LnB0
gh1ta3QuYW5pbWFsYWR2b2NhY3ljYXJlZXJzLm9yZ4ISbWt0LmFydGNydXouY29t
LmJyghpta3QuYmVtYm9sYWRvYnJhc2lsLmNvbS5icoIPbWt0LmJpb2Zvcm1hLnB0
ghhta3QuYm91dGlxdWVkYXNzaS5jb20uYnKCEm1rdC5ib3hlcmJlZXJzLmNvbYIa
bWt0LmJyaW5kZXNwcm9tb2Nhby5jb20uYnKCFm1rdC5jYWl4YWNvbG9uaWFsLmNs
dWKCFW1rdC5jYWxjYWRvbmV0LmNvbS5icoINbWt0LmNhdW55LmNvbYISbWt0LmNo
ZWNraW4uY29tLnB0ghRta3QuY2hlZXNlbGFiLmNvbS5icoIObWt0LmNqYS1sZGEu
cHSCG21rdC5jb25xdWlzdGFkaWdpdGFsLmNvbS5icoIVbWt0LmNvbnRhc3BvdXBh
bmNhLnB0ghBta3QuY3Jpdm9zb2Z0LnB0gg1ta3QuZHVhbHVwLnB0ghJta3QuZWJp
YW5jaC5jb20uYnKCFG1rdC5lc3F1YWRyb3MuY29tLmJygh9ta3QuZmVjaGFkdXJh
c2FicmVlZmVjaGEuY29tLmJygg9ta3QuZmVtZWRpY2EucHSCEW1rdC5mcmVzaC1o
b21lLnB0gg9ta3QuZnMtYmFieS5jb22CHW1rdC5oYWJhbm9zbmlnaHRicmFzaWwu
Y29tLmJyghRta3QuaGFiaXRhY2FvLm9yZy5icoIObWt0LmhlcmJhZ28ucHSCDm1r
dC5ob3VzZXJzLmVzghJta3QuaHVzaHB1cHBpZXMuZXOCEW1rdC5pYnJhcGguY29t
LmJyghhta3QuaWdsZXNpYWV2b2x1dGlvbi5jb22CGm1rdC5pZ3VhcmlhY2FtcGVp
cmEuY29tLmJygg1ta3QuaW5hZWQuY29tghRta3QuaXZhbnNhcmFpdmE3LmNvbYIP
bWt0Lmp0aXAuY29tLmJygg1ta3QuanRtc2EuY29tgg5ta3Quay1lbGVjLmNvbYIS
bWt0LmxhcmFuamF6ZW4uY29tghNta3QubWFja2ZsZXguY29tLmJyghVta3QubWFy
ZWRpdmluaS5jb20uYnKCFW1rdC5tZXJjYXRvcGV0LmNvbS5icoIebWt0Lm1lcmd1
bGhhbmRvbmF2aWFnZW0uY29tLmJygg1ta3QubW90aXZvLnB0gg9ta3QubXItYmx1
ZS5jb22CE21rdC5tdWx0aWJhci5jb20uYnKCEm1rdC5uZXRwb3BwZXJzLmNvbYIc
bWt0Lm5vcnRlcmVmcmlnZXJhY2FvLmNvbS5icoIfbWt0Lm5vcnRoY29hc3RtYWRl
aXJhaG90ZWxzLmNvbYIQbWt0Lm5vdmFnYXlhLmNvbYIObWt0Lm5vdmFsdXoucHSC
E21rdC5udXRzb3JpZ2luYWwucHSCCm1rdC5vanAucHSCGW1rdC5wYXNjb2FscmVu
b3ZhdmVpcy5jb22CF21rdC5wZXRpdGVuZmFuY2UuY29tLmJyghZta3QucG9ydGFs
ZG92ZXQuY29tLmJygg1ta3QucWRsY2MuY29tgg1ta3QucjJzYXAuY29tghdta3Qu
cmFmYWVscG9ocmVuLmNvbS5icoIQbWt0LnJlYWxncm91cC5wdIIQbWt0LnJlYWx2
aXR1ci5wdIIMbWt0LnJtaHViLnB0gg9ta3Quc2Vhbml0ZS5jb22CFm1rdC5zZWdt
ZW50b2RpZ2l0YWwucHSCE21rdC5zZW5zYWhvdGVscy5jb22CFG1rdC5zbWFydGdy
YW0uY29tLmJyghFta3Quc3RheWhvdGVscy5wdIITbWt0LnRvcGNoYWxsZW5nZS5w
dIIWbWt0LnVtYXZpZGEtbWVsaG9yLmNvbYITbWt0LnZhbW9zcG91cGFyLmNvbYIK
bWt0LnZmYy5wdIIXbWt0LnZpbGFpbXBlcmlhbC5jb20uYnKCEm1rdGkuaXNpbmFs
aXphLmNvbYIXbmV3cy5nYXRvbW9kZXJuby5jb20uYnKCC25ld3MuaW5kLnB0ghFu
ZXdzLm9tYWNhZGVteS5wdIIObmV3cy53Yi5jb20uYnKCE25ld3NsZXR0ZXIucGFj
dG8uY2OCGG5ld3NsZXR0ZXIueXZlc3JvY2hlci5wdIIccGxhdG1rdC5sb2phZGFj
cmlhbmNhLmNvbS5icjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkC
BAIEgfcEgfQA8gB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
i4jnMzAAAAQDAEgwRgIhAPIIa0tOaL9phamvecO3XcRP4RfUHx9/9dI4iUR9NnDF
AiEAu2CbKbtI2U91v03tLlLAM3slMgWnxfhMdDRiE+IctUgAdwB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYuI5zNbAAAEAwBIMEYCIQDxrCFM254V
UoSZdSlMFlGyRA7KcqasDclzSWGxh63HrgIhAIb1GbOm2pTrKI3dUKWPrApaD8uI
UKHxuDem2CGhQkYUMA0GCSqGSIb3DQEBCwUAA4IBAQCKeveymfPNF5QwpRbRocAR
bvYDKzLCXimrMhP0qlARR6GAv4u+TBjzt8vfE0L7tiIE0KslivzW2b/V6UAo//X4
PgEu+jTZhdvX6GPWa0gjpHZyDKm9Lpo6mSEzLMQ9ceu5z/dvPpRG3utQP57UaEVY
EWXeDWGHi3U/TPLzn4eJFEf8JhjP63x492AzLN10j/cVnu0RYCievRefMXZFfDHD
Adtxn2Ml0jmTtPO3n8cvkmsFsQltfhbCHqEEK7DdTFSR/wZZCYtcJ6MIhN0cMYOM
e3m2Gfbm9vRV7pxfPkGvu2nuDSkeWSWoCtw0tp3bMJ362G8GN5w1sMi/+x9Pg+u8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jCLEaC0O3GswhV0TBU4
gUkoYMvonXlIK1RiBlt5HV5vKwxWRWkan1Uy/UR1yW4JwLZZyhtqbT/ti3/9Uxj2
ThupEQzSkB1bRRVwf3pPT7ANqO76t3JLext/Yp6xxkIlz/OcRjOilMdsJ7lNHyOm
WYusFc4vqmK8i3H2coV2S4PEU48DpR1plq1j7IteyTKf+vn4dujh04+taV3hmZEY
XnGRjEWtYhoa6DOetHJ1M8oCq8SGcYcGQeLxqFI+R/dZKD29dMJKyoNVOZyY2vIr
5PJXD1fT0F3Q0v5HJvBaSacfOYAzpUTY+OyMnRAwSe+ApueHTjqpajRowrxl2YYI
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428564660074042253186599543232121674422548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 02:22:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 02:22:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.conquistadigital.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27038934825425460779015248148847193849615884608336728092160612155618089560043633248461266066523314031996523675870123015996484417564979987956668970822611179660266224830227744487796028249954198866738464832145000946462711812365212347484341610171535823166338244370616866363266638353012694754734476872205994057177385118544535369837829980803304290967005431168336022089863564178258065561742085041338012275003136467742767489980483442005973666067775666756750925215013323668122435816603298639822291541126205163418994498611598382793103909565516663843675099963732084017471734153661583900204355037734253863948314965972391217727497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5322d3d174010e91ce8e7d09bfef918bf137964f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.stayhotels.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunidade.esquemaeletrico.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consulting.eqsglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.sistrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.bravosconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.mafepre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.onetimecorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.oppa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emkt.custapoucoseduzir.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.sportwc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giolena.emsintoniacomasaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imprensa.essenciacompleta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.docevidadiabetes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.sportwc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vinha.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.ativokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.cap-lab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.geonext.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.sportwc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agirpeloplaneta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.algarvepaincentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.angu.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.animaladvocacycareers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.artcruz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bemboladobrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bioforma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boutiquedassi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boxerbeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brindespromocao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.caixacolonial.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.calcadonet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cauny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.checkin.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cheeselab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cja-lda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conquistadigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contaspoupanca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.crivosoft.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dualup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ebianch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esquadros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fechadurasabreefecha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.femedica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fresh-home.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fs-baby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.habanosnightbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.habitacao.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.herbago.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.housers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hushpuppies.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibraph.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iglesiaevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iguariacampeira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inaed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ivansaraiva7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jtip.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jtmsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.k-elec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.laranjazen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mackflex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maredivini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mercatopet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mergulhandonaviagem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.motivo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mr-blue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multibar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.netpoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.norterefrigeracao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.northcoastmadeirahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novagaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novaluz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nutsoriginal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ojp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pascoalrenovaveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.petitenfance.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portaldovet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.qdlcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.r2sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rafaelpohren.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.realgroup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.realvitur.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rmhub.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seanite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.segmentodigital.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sensahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.smartgram.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stayhotels.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.topchallenge.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.umavida-melhor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vamospoupar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vfc.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vilaimperial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkti.isinaliza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.gatomoderno.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ind.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.omacademy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.wb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pacto.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.yvesrocher.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platmkt.lojadacrianca.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b88e733300000040300483046022100f2086b4b4e68bf6985a9af79c3b75dc44fe117d41f1f7ff5d23889447d3670c5022100bb609b29bb48d94f75bf4ded2e52c0337b253205a7c5f84c74346213e21cb54800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b88e7335b0000040300483046022100f1ac214cdb9e1552849975294c1651b2440eca72a6ac0dc9734961b187adc7ae02210086f519b3a6da94eb288ddd50a58fac0a5a0fcb8850a1f1b837a6d821a1424614
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a7af7b299f3cd179430a516d1a1c0116ef6032b32c25e29ab3213f4aa501147a180bf8bbe4c18f3b7cbdf1342fbb62204d0ab258afcd6d9bfd5e94028fff5f83e012efa34d985dbd7e863d66b4823a476720ca9bd2e9a3a9921332cc43d71ebb9cff76f3e9446deeb503f9ed46845581165de0d61878b753f4cf2f39f87891447fc2618cfeb7c78f760332cdd748ff7159eed1160289ebd179f3176457c31c301db719f6325d23993b4f3b79fc72f926b05b1096d7e16c21ea1042bb0dd4c5491ff0659098b5c27a30884dd1c31838c7b79b619f6e6f6f455ee9c5f3e41afbb69ee0d291e5925a80adc34b69ddb309dfad86f06379c35b0c8bffb1f4f83ebbc