newsletter.yvesrocher.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:04:69:e2:c0:d9:96:f0:92:a2:64:d1:86:0c:74:d2:02:35 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newsletter.yvesrocher.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:69:e2:c0:d9:96:f0:92:a2:64:d1:86:0c:74:d2:02:35
Serial Number (int): 349951019504834054230895179774310623609397
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:77:a1:1d:49:0f:07:7d:1e:15:8e:af:ee:d7:ca:b5:5a:b6:13:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:54:77:51:94:43:16:5e:42:a7:58:b3:eb:14:3f:21:91:ca:b9:71
Fingerprint (sha256): 84:ca:ff:e0:b4:73:3f:3c:b6:4c:5c:bb:a1:6d:92:70:ac:ec:39:4c:24:51:6c:6c:e0:91:42:09:a7:6b:f5:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newsletter.yvesrocher.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newsletter.yvesrocher.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info.fidufoods.com
mail.amecbrasil.org.br
marketing.geonext.pt
mkt.4sat.pt
mkt.aapi.pt
mkt.aberbeach.com.br
mkt.academia.samsys.pt
mkt.accessorize.es
mkt.accessorizeportugal.com
mkt.amandagomesdermato.com.br
mkt.apex.pt
mkt.autoalegre.pt
mkt.autowin24.com
mkt.best-of.pt
mkt.bilbilbeer.com.br
mkt.boticashotel.com
mkt.btw.com.pt
mkt.cbluxus.pt
mkt.cgm.pt
mkt.contaspoupanca.pt
mkt.copyvis.pt
mkt.correosexpress.com
mkt.credito-taxa-servico.pt
mkt.dedeka.com.br
mkt.deisyosorio.com
mkt.digitalsign.pt
mkt.digitalsigncertificadora.com.br
mkt.dynamicscreen.net
mkt.eagencia.co
mkt.ello.marketing
mkt.enigmind.pt
mkt.escolademaesepais.com
mkt.esj.pt
mkt.esquadros.com.br
mkt.evescritoriovirtual.com.br
mkt.fbah.org.br
mkt.fisicatvedras.pt
mkt.formulaempreender.com.br
mkt.frontallusa.com
mkt.hotelzanon.com.br
mkt.hovar.min-saude.pt
mkt.ifam.es
mkt.ifamfrance.com
mkt.indac.org.br
mkt.independa.com.br
mkt.inglot.pt
mkt.institutodoconhecer.com.br
mkt.interopera.com.br
mkt.jasminsoftware.com
mkt.jma-peru.com
mkt.jma.com.mx
mkt.jma.es
mkt.jmacolombia.com
mkt.jmausa.com
mkt.kuantokusta.pt
mkt.look4beauty.pt
mkt.loteriabarquillo10.es
mkt.maloclinics.com
mkt.marcelobenati.com
mkt.mariaconcha.com
mkt.martinaranda1965.com
mkt.mindsetbr.com
mkt.mr-blue.com
mkt.museuartesacra.org.br
mkt.myiced.com
mkt.netpoppers.com
mkt.omarketingpro.com
mkt.oportoforte.com
mkt.papemix.com.br
mkt.penseprint.com.br
mkt.perfume-store.uk
mkt.psguardavencedor.com
mkt.ptcacademy.pt
mkt.radiopopular.pt
mkt.rico.pt
mkt.rymeautomotive.com
mkt.saudebelezaevidasaudavel.com
mkt.sensueel.com.br
mkt.sks.co.uk
mkt.solarimpact.pt
mkt.spamed.com.br
mkt.spartancast.com.br
mkt.sportowin.com
mkt.tixalia.com
mkt.tmx.com.br
mkt.tourlandportugal.com
mkt.urbandesigncare.pt
mkt.wefind4u.pt
mkt.yetspace.com
mkt.zooera.com.br
mkt2.agroverdad.com.ar
mktrgpd.primaverabss.com
mrk.markbellucci.com
news.avvdbrasil.org.br
news.fsanches.pt
news.receitasdatiaceu.com
newsletter.yvesrocher.pt
portal.portaldnoticias.com
priogo.prio.pt
tiodey.tiodey.com.br

Other certificates including the domain name yvesrocher.pt

(limited to 100 certificates)
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io

Certificate

The complete raw certificate details for newsletter.yvesrocher.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWloxPC0ZS8bmhjxyKDQ
CpSwAro0t01w1M5eIQSU9NmT11cFm3qzMASiSMTOWCKTQO3mYlJE7g57qsHb3kwl
bQuoY/fi+Pqfgv7jikkjyfMeFdG49LWp9ukcsmvnclWBUwcre2cmJMScDi6am0zj
q7udsso5agvgVm6Cxz6PMgcynvSCMFdpJpUIiGpT8bSjeTvll5j6mZz53O3KHazc
khNlovowikICGdIqhjJyzx/kry1jKecgdsIg//CBN0+UFg7ub6FiZ6YWMRadPMtS
TAAmZKVw2irTnn45P1vjMvjST2WvL1DLEFfnxyxbxfGnvtDbifzJOt+rYOyhX4XT
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349951019504834054230895179774310623609397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 02:09:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 02:09:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsletter.yvesrocher.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21386252780231653282991064795296282657926928236328014528117833929205740342476842384765983635281204183794763818599925753386843474754464251996021159559589586059488441267519273105458795666746934858977277833876484826917686912098510955041440086129650800448070794781585869932315261349984474076565792254713911413220995798675975711053582418741760729180170940572875227314589172131859918652625460529130023255726696904224733805639702022396187323406745713426861254403003952147983758507918493511676752863898152291215573796659554763139892335624063730687418366753952986242142756157294325332870993619331976038317099089298528290591601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7577a11d490f077d1e158eafeed7cab55ab613cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.fidufoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amecbrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.geonext.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.4sat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aapi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aberbeach.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academia.samsys.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accessorize.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.accessorizeportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.amandagomesdermato.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autoalegre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autowin24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.best-of.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bilbilbeer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boticashotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.btw.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cbluxus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cgm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contaspoupanca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.copyvis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.correosexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.credito-taxa-servico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dedeka.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.deisyosorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalsign.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalsigncertificadora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dynamicscreen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eagencia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ello.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.enigmind.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.escolademaesepais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esj.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.esquadros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.evescritoriovirtual.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fbah.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fisicatvedras.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.formulaempreender.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.frontallusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hotelzanon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hovar.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifam.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ifamfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.indac.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.independa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inglot.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.institutodoconhecer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.interopera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jasminsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma-peru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jma.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jmacolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jmausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.kuantokusta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.look4beauty.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.loteriabarquillo10.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maloclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marcelobenati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mariaconcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.martinaranda1965.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mindsetbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mr-blue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.museuartesacra.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.myiced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.netpoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omarketingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oportoforte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papemix.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.penseprint.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.perfume-store.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.psguardavencedor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ptcacademy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.radiopopular.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rico.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rymeautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudebelezaevidasaudavel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sensueel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.solarimpact.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spamed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spartancast.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sportowin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tixalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tmx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tourlandportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.urbandesigncare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wefind4u.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yetspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zooera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt2.agroverdad.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktrgpd.primaverabss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrk.markbellucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.avvdbrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.fsanches.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.receitasdatiaceu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.yvesrocher.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.portaldnoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priogo.prio.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiodey.tiodey.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00218d2dc4cc026f01600f525a9cc67a792c538ea2e87d34f95b6e4cf13bec79284c3c23c640a66b527acd4e156664b899d9278b290f9491b1bd3ee9a24a583f328c6e3ea3ffdac72aa6db4a895a9db638571e51ab63f98c2aea3fca620bd01ffd1995f51630167ae5791378731f3e1f2386019edd7061dca839f55287e9fc7eac5d30e542b5b467bf63aea8e6532e8c4997d5de081fad61e4987fb8c0e48166dc0303bbcd4778ef85ce7e9ab443bb24f1a71acf9dd39f6087c2fa523de013644473d0c424b6c6e5fe1143ec4b00cda89c953cf1993b120f0c2050ec0c947653dbdfd5d46105398d20310994a20d04a5b20a391c5179f663999fbc96b591b9a6cc