campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:72:13:86:a6:10:ae:09:50:d8:a0:e3:fb:95:aa:aa:3d:5b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:13:86:a6:10:ae:09:50:d8:a0:e3:fb:95:aa:aa:3d:5b
Serial Number (int): 300155002092168188303416018261812999503195
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:0c:54:d4:2b:ef:43:86:a3:ce:2f:d0:26:c8:af:ff:4c:c3:f1:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:c2:ad:27:33:52:a1:ea:d3:f0:04:82:29:e3:6c:b3:94:90:ff:98
Fingerprint (sha256): 8d:bf:93:3f:27:84:3f:81:d6:bc:2e:49:5e:74:ac:4d:f0:b5:66:ad:ed:2f:af:2b:d4:04:d9:8f:c1:a7:af:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.galius.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
info.trademidia.com
mail.newsletter.rtp.pt
mkt.abert.org.br
mkt.abimota.pt
mkt.academiapedrosousa.pt
mkt.afp.pt
mkt.alertaemprego.pt
mkt.aplicarconteudosaude.com.br
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.balancasonline.com
mkt.balanzasmarques.es
mkt.blueandgreen.com
mkt.brasilbingo.com
mkt.brunosousa.pt
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.centraldelhogar.com
mkt.consum.es
mkt.csoutdoors.pt
mkt.e-primatur.com
mkt.eacr.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.europesagem.com
mkt.f1flash.com
mkt.ferramentasdecoaching.com
mkt.fotocristal-3d.pt
mkt.galpenergia.com
mkt.globelinkportugal.com
mkt.gloma.pt
mkt.harmonizando.com
mkt.hipnoterapiasocial.com.br
mkt.imacustica.pt
mkt.incofios.net
mkt.intersea.com.br
mkt.inv.pt
mkt.jogouganhou.com
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.lojadasmeias.pt
mkt.maisamigas.com.br
mkt.mega-alcance.com
mkt.mobilscan.pt
mkt.mtb.es
mkt.npibrasil.com
mkt.olicargo.com
mkt.pacsis.pt
mkt.pmspa.rj.gov.br
mkt.pontual.pt
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.relacre.pt
mkt.route66.com.br
mkt.salesup.pt
mkt.serrasconsulting.pt
mkt.sindsep-pe.com.br
mkt.slr.pt
mkt.sobarroso.pt
mkt.sptf.pt
mkt.spzn.pt
mkt.tejobrinde.pt
mkt.uaume.com
mkt.uonangola.com
mkt.uonequipamentos.com
mkt.uonsubastas.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.worldacademy.pt
mkt.wsenglish.email
mkt.xzconsultores.pt
mkt.youup.pt
mkt.zantia.com
mkt.zonacerealista.com.br
mkt.zonaverde.pt
news.musicanocoracao.pt
news.standnacional.com
news.webmarketingpt.com
news.xd.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pinayas.com
newsletter.timing.pt
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINAjCCC+qgAwIBAgISA3IThqYQrglQ2KDj+5Wqqj1bMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDEwMjAxNTdaFw0yNDAxMzAwMjAxNTZaMB8xHTAbBgNVBAMT
FGNhbXBhbmhhcy5yaXNlbWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyldzXjNrXjTdKvRql3N/dBGPbmXcCfB7lU4xjvdOfkWOblnmCHwY8YuC
JX1CYHLTJDWoWMCgfei38oq6uOLSwhPgRWSLxjgCfwuajptE6UkwsdZ6KdG1d2Yo
R/+pHnK4wYM1qkiSXnqug/e/RVTlo7H/vA0b1bWC9ry/VoKl0Iy6BjQ/4Wph/ud7
PrshmwGt74D2n/eFQeSR1uj8oufFZr5N4I9t/1S/zUM2vqaCpK6zlCbi4lMBM0Nf
m7NumAHEuNhglOoD2BsPJw8FW89zLjqXz597nvXoVWMTO8MQPdNq1in6bKHgDL7l
Gs9Y791qIOwt+cbCfNEefzoS5cGQxwIDAQABo4IKIzCCCh8wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBRBDFTUK+9DhqPOL9AmyK//TMPx7jAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCCCoGA1UdEQSCCCEwgggdghRjYW1wYW5oYXMucmlzZW1hLmNvbYIU
ZWdvaS5pbmZvLmFzcGFydHMucHSCFmVnb2kuaW5mby5hdXRvc3VlY28ucHSCFGVn
b2kuaW5mby5iaW9zYWZlLnB0ghNlZ29pLmluZm8uZ2FsaXVzLnB0ghJlZ29pLmlu
Zm8ubm9ycy5jb22CFWVnb2kuaW5mby5vbmVkcml2ZS5wdIIVZWdvaS5pbmZvLnRv
cHRydWNrLnB0gg1lbnZpb3MuaW9sLnB0ghNpbmZvLnRyYWRlbWlkaWEuY29tghZt
YWlsLm5ld3NsZXR0ZXIucnRwLnB0ghBta3QuYWJlcnQub3JnLmJygg5ta3QuYWJp
bW90YS5wdIIZbWt0LmFjYWRlbWlhcGVkcm9zb3VzYS5wdIIKbWt0LmFmcC5wdIIU
bWt0LmFsZXJ0YWVtcHJlZ28ucHSCH21rdC5hcGxpY2FyY29udGV1ZG9zYXVkZS5j
b20uYnKCE21rdC5hcm1hemVuc3JlaXMucHSCDW1rdC5hdHIuY28ucHSCFm1rdC5i
YWxhbmNhc29ubGluZS5jb22CFm1rdC5iYWxhbnphc21hcnF1ZXMuZXOCFG1rdC5i
bHVlYW5kZ3JlZW4uY29tghNta3QuYnJhc2lsYmluZ28uY29tghFta3QuYnJ1bm9z
b3VzYS5wdIIUbWt0LmJ1emlvcy5yai5nb3YuYnKCFm1rdC5jYWJvZnJpby5yai5n
b3YuYnKCF21rdC5jZW50cmFsZGVsaG9nYXIuY29tgg1ta3QuY29uc3VtLmVzghFt
a3QuY3NvdXRkb29ycy5wdIISbWt0LmUtcHJpbWF0dXIuY29tgg9ta3QuZWFjci5j
b20uYnKCFG1rdC5lc3B1bWFkZXNhYmFvLnB0ghBta3QuZXVyb2N1cG9uLnB0ghNt
a3QuZXVyb3Blc2FnZW0uY29tgg9ta3QuZjFmbGFzaC5jb22CHW1rdC5mZXJyYW1l
bnRhc2RlY29hY2hpbmcuY29tghVta3QuZm90b2NyaXN0YWwtM2QucHSCE21rdC5n
YWxwZW5lcmdpYS5jb22CGW1rdC5nbG9iZWxpbmtwb3J0dWdhbC5jb22CDG1rdC5n
bG9tYS5wdIIUbWt0Lmhhcm1vbml6YW5kby5jb22CHW1rdC5oaXBub3RlcmFwaWFz
b2NpYWwuY29tLmJyghFta3QuaW1hY3VzdGljYS5wdIIQbWt0LmluY29maW9zLm5l
dIITbWt0LmludGVyc2VhLmNvbS5icoIKbWt0Lmludi5wdIITbWt0LmpvZ291Z2Fu
aG91LmNvbYIWbWt0LmxheW91dGNyaWF0aXZvLmNvbYIWbWt0LmxpbmtlZHBvcnR1
Z2FsLmNvbYITbWt0LmxvamFkYXNtZWlhcy5wdIIVbWt0Lm1haXNhbWlnYXMuY29t
LmJyghRta3QubWVnYS1hbGNhbmNlLmNvbYIQbWt0Lm1vYmlsc2Nhbi5wdIIKbWt0
Lm10Yi5lc4IRbWt0Lm5waWJyYXNpbC5jb22CEG1rdC5vbGljYXJnby5jb22CDW1r
dC5wYWNzaXMucHSCE21rdC5wbXNwYS5yai5nb3YuYnKCDm1rdC5wb250dWFsLnB0
gg5ta3QucHJldm9pci5wdIIWbWt0LnByb2RkaWdpdGFsLmNvbS5icoIObWt0LnJl
bGFjcmUucHSCEm1rdC5yb3V0ZTY2LmNvbS5icoIObWt0LnNhbGVzdXAucHSCF21r
dC5zZXJyYXNjb25zdWx0aW5nLnB0ghVta3Quc2luZHNlcC1wZS5jb20uYnKCCm1r
dC5zbHIucHSCEG1rdC5zb2JhcnJvc28ucHSCC21rdC5zcHRmLnB0ggtta3Quc3B6
bi5wdIIRbWt0LnRlam9icmluZGUucHSCDW1rdC51YXVtZS5jb22CEW1rdC51b25h
bmdvbGEuY29tghdta3QudW9uZXF1aXBhbWVudG9zLmNvbYITbWt0LnVvbnN1YmFz
dGFzLmNvbYIUbWt0LnZhc2NvbWFycXVlcy5uZXSCE21rdC52aWFuYWxvY2Fscy5j
b22CE21rdC53b3JsZGFjYWRlbXkucHSCE21rdC53c2VuZ2xpc2guZW1haWyCFG1r
dC54emNvbnN1bHRvcmVzLnB0ggxta3QueW91dXAucHSCDm1rdC56YW50aWEuY29t
ghlta3Quem9uYWNlcmVhbGlzdGEuY29tLmJyghBta3Quem9uYXZlcmRlLnB0ghdu
ZXdzLm11c2ljYW5vY29yYWNhby5wdIIWbmV3cy5zdGFuZG5hY2lvbmFsLmNvbYIX
bmV3cy53ZWJtYXJrZXRpbmdwdC5jb22CCm5ld3MueGQucHSCGW5ld3NsZXR0ZXIt
cHQudXNic3BvdC5jb22CGG5ld3NsZXR0ZXIuY21jdmlzdWFsLmNvbYIUbmV3c2xl
dHRlci5uZXN0bGUucHSCFG5ld3NsZXR0ZXIub2dpbHZ5LnB0ghNuZXdzbGV0dGVy
Lm9pa29zLnB0ghduZXdzbGV0dGVyLm9yaWRyZWlhLmNvbYIWbmV3c2xldHRlci5w
aW5heWFzLmNvbYIUbmV3c2xldHRlci50aW1pbmcucHSCFm5ld3NsZXR0ZXIudXNi
c3BvdC5jb22CFm5ld3NsZXR0ZXIudmFsc291c2EucHSCGW5ld3NsZXR0ZXJzLnNv
Y2lhbHRpbWUucHSCGHByaW1hdmVyYS5jcmVhdGVpbmZvci5wdDATBgNVHSAEDDAK
MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANq2v2s/tbYin5vC
u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi4jUnmQAAAQDAEcwRQIhALPhHwOp1WBe
DicO0aca2BLnAIpXUshAHFB7DYrj3yj3AiAeIYI+TXLLVuuxwHjVMuaalV0m1zpF
Z6oixsBcoKWnAAB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB
i4jUnl4AAAQDAEcwRQIhALoW7NS/0S+eMSHTP6FyTyMEBEETAtaU986WqQ13dLwI
AiBg+0ZClmLHDgUkBY5CYARDfWLLuwLRX9pFk1+k/aA2TzANBgkqhkiG9w0BAQsF
AAOCAQEAfPWU53P+WY3Es/LaUvx/+13JPJ0/Kk93QtR6MErzQzsYAI7SGnp90G+z
k5ZU5L2qUzrxyMPbBsB/xlb/qm5Y5u2+KTF1RvO70I1PJgDJ5/yJT0GwVFXT0oGr
s2gBS8REfzeGIhROQnwJuUAX/vX1UQ6ZQa8h8G0PNIiyf/bHBIEDgec97UCrjcBQ
hFw0a4zqMUfamEMyxJ30txVB3DeufapL1XYB0KEWA0wnuYFF7JbqQI14tYfNuiHb
DPGJPzbxW/EDEvloLZp+nYOAEO247ikFkwyEDL+YilJhzihs1lYLDjALol8C2Zal
nYqxYIfIWcvuHmbLKk8UA36wXmc8IQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyldzXjNrXjTdKvRql3N/
dBGPbmXcCfB7lU4xjvdOfkWOblnmCHwY8YuCJX1CYHLTJDWoWMCgfei38oq6uOLS
whPgRWSLxjgCfwuajptE6UkwsdZ6KdG1d2YoR/+pHnK4wYM1qkiSXnqug/e/RVTl
o7H/vA0b1bWC9ry/VoKl0Iy6BjQ/4Wph/ud7PrshmwGt74D2n/eFQeSR1uj8oufF
Zr5N4I9t/1S/zUM2vqaCpK6zlCbi4lMBM0Nfm7NumAHEuNhglOoD2BsPJw8FW89z
LjqXz597nvXoVWMTO8MQPdNq1in6bKHgDL7lGs9Y791qIOwt+cbCfNEefzoS5cGQ
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300155002092168188303416018261812999503195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 02:01:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 02:01:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25543261128922788608492435131499922348738066518080130464455946025780843386366590946509550953149511074732286024635260722125526619993440608855032227410917024626617112361660682583684594590127293720333882203431045036928517003844056799660424361156560114434237546776298931138104656218671334859518173609154711116181955307192615281790132094587296247423079610957312580186112897877197913888394167040795309588455004273329717403584386144899526469815794818580491942184480521294666537592568939948742864660677979009828047680270180427883342060181490567682152581062462998573123810492369598149745612057394979559089095907826408880181447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							410c54d42bef4386a3ce2fd026c8afff4cc3f1ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.galius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.newsletter.rtp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abert.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abimota.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiapedrosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.afp.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.alertaemprego.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aplicarconteudosaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balancasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blueandgreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brunosousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.centraldelhogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.consum.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.e-primatur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europesagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.f1flash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fotocristal-3d.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.galpenergia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globelinkportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.harmonizando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hipnoterapiasocial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.imacustica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.incofios.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.intersea.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.lojadasmeias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maisamigas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mobilscan.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mtb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pacsis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pontual.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.relacre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.route66.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sindsep-pe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.slr.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sptf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spzn.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonequipamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uonsubastas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.worldacademy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wsenglish.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonacerealista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standnacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.xd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.timing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b88d49e640000040300473045022100b3e11f03a9d5605e0e270ed1a71ad812e7008a5752c8401c507b0d8ae3df28f702201e21823e4d72cb56ebb1c078d532e69a955d26d73a4567aa22c6c05ca0a5a700007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b88d49e5e0000040300473045022100ba16ecd4bfd12f9e3121d33fa1724f230404411302d694f7ce96a90d7774bc08022060fb46429662c70e0524058e426004437d62cbbb02d15fda45935fa4fda0364f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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