mkt.marceloserralva.com

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:22:30:41:be:46:68:4f:00:71:7a:71:d9:9a:f6:5e:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.marceloserralva.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:22:30:41:be:46:68:4f:00:71:7a:71:d9:9a:f6:5e:15
Serial Number (int): 418252473261371033575008956333060892548629
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:ce:6d:c8:da:88:36:d0:a2:f6:c3:bb:d8:d4:77:b8:6a:71:1a:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:e5:f8:43:9c:97:d2:c3:58:81:47:1e:d9:42:60:b2:fd:de:c0:0f
Fingerprint (sha256): 95:9c:de:e5:59:32:fe:97:fe:39:c3:40:27:52:6b:0f:09:77:3c:26:38:a0:59:83:a4:96:1d:52:30:cf:99:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.marceloserralva.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.marceloserralva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apc.arie.pt
blog.sitiweb.com.br
egoi.info.amplitudeseguros.com
egoi.info.civiparts.com
egoi.info.expressglass.pt
mkt.abear.com.br
mkt.academiazonaverde.pt
mkt.acervo.com.br
mkt.advogadoricardoreis.com.br
mkt.agrosul-sc.com.br
mkt.anagoncalvescirurgiaplastica.com
mkt.aprendaviver.com
mkt.aroconsulting.eu
mkt.asdr.org.br
mkt.autopel.com
mkt.beijaflorcosmeticos.com
mkt.boutiquetereza.com
mkt.bslidiomas.com.ar
mkt.cachapuz.com
mkt.canalforex.com.br
mkt.casadaarquitectura.pt
mkt.casinotroia.pt
mkt.coisasdeler.pt
mkt.comofalarbem.net
mkt.descla.pt
mkt.donmantel.com
mkt.dropview.com.br
mkt.editorfiscal.com.br
mkt.equipemerequete.com.br
mkt.espacosparaeventos.com.pt
mkt.eventsolutions.pt
mkt.evertonlopes.com.br
mkt.expertcomoemagrecerapido.com.br
mkt.extratransportes.pt
mkt.farmacialoureirobasto.pt
mkt.febrapdp.org.br
mkt.fecongd.org
mkt.ganharmassamuscular.net
mkt.glaucocastrofotos.com.br
mkt.goodafter.com
mkt.goweb.pt
mkt.guruvet.com
mkt.gustavofreitas.net
mkt.homeobras.pt
mkt.iacess.pt
mkt.ibmalphaville.com
mkt.iguarivarius.pt
mkt.inforap.pt
mkt.ipnascimento.com.br
mkt.jfrcontabil.com.br
mkt.keyperoculos.com.br
mkt.luzan5.es
mkt.maquicampos.pt
mkt.marceloserralva.com
mkt.masteroficial.ub.edu
mkt.mobilitec.pt
mkt.moviflor.pt
mkt.mreventos.com.br
mkt.multbrasil.com
mkt.mundovinum.com
mkt.novojornal.co.ao
mkt.nqda.pt
mkt.obesimed.pt
mkt.ordemdospsicologos.pt
mkt.parqueallamandas.com.br
mkt.promotienda.es
mkt.rbwcomunicacao.com.br
mkt.refleczo.pt
mkt.rendalucro.com
mkt.rigiflex.com.ar
mkt.rinfante.pt
mkt.rollingluggage.pt
mkt.sac.pacsis.pt
mkt.saudeshop.com.br
mkt.selektpt.pt
mkt.serenatahostel.com
mkt.setormed.com.br
mkt.sindieco.org.br
mkt.soninha.com.br
mkt.spms.min-saude.pt
mkt.straubjunqueira.com.br
mkt.streightex.com
mkt.thaisimobiliaria.com.br
mkt.thinkgreen.org.br
mkt.tpalaw.pt
mkt.transitex.pt
mkt.ubiwhere.com
mkt.uprealestate.com.br
mkt.valentim.com.pt
mkt.vinstmejl.com
mkt.vivianiabasto.com.ar
mkt.xavierdefreitas.com
news.grupotravelstore.com
news.radionovaera.pt
news.visitporto.travel
newsletter-es.usbspot.com
newsletter.advocaciafontana.com.br
newsletter.algarvenegocios.pt
newsletter.matrizauto.pt
newsletters.robbialacmaispinta.pt

Other certificates including the domain name marceloserralva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mkt.marceloserralva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A0LumcvoYjDqu1WktKf
0DwKIW8t3xcS0W1DGiY9BbjhuNw7arFntrvSucjFR2c/W5BETglG7VZXQuNd5u1j
5r4m8xDqgAj784EySh+86d2cspurbYaEu11B+eDYKauThDxpUVCi5Bpb1c6ED5GR
Fa6oEeiD9qgFPosY6o4NslDWFNfppzfNm8f7bJTIX5KNSef9P4uRxRMa8qqD3MZ8
vC1FWXvslfp2zEYg2XrCS/e+hJBklkpisnU6gHGMVRQux9fw14HQv0O01vsWbg1S
RjgfSU9K/PGWw3lR+RXSP/j7EX3zySgFba3zP9G2iXuufn8ZFZCfz46s3Yj4r3Rz
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418252473261371033575008956333060892548629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-01 03:03:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-01 03:03:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.marceloserralva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30303626322027738983816849120553770232930637327632725074694754299313968514693308926701535569246511645233053141858769384352882562132396447950622928921608363188908020631707869962732802353193650462648024842595029730916652576057407795909348053734542318535219353515578784614235101974797502963076498624545177000474484915037882678871364244883828256589608441780086398012709670206743859810814696128218098221500065011665559025650865931442938732759240526644569517337856395688541275863793162897791493973908345735667459715778392328825628540963224099672453265959152686221545441916391691638216014227016657430854717987817611773375453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fce6dc8da8836d0a2f6c3bbd8d477b86a711a5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc.arie.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.sitiweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.amplitudeseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.civiparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.expressglass.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.abear.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.academiazonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acervo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.advogadoricardoreis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agrosul-sc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.anagoncalvescirurgiaplastica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aprendaviver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aroconsulting.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.asdr.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.autopel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.beijaflorcosmeticos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.boutiquetereza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bslidiomas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cachapuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.canalforex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casadaarquitectura.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.casinotroia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.coisasdeler.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comofalarbem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.descla.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.donmantel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.dropview.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.editorfiscal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.equipemerequete.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacosparaeventos.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eventsolutions.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.evertonlopes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.expertcomoemagrecerapido.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.extratransportes.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.farmacialoureirobasto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.febrapdp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.fecongd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ganharmassamuscular.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.glaucocastrofotos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.goodafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.goweb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.guruvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gustavofreitas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.homeobras.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iacess.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ibmalphaville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iguarivarius.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inforap.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ipnascimento.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jfrcontabil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.keyperoculos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.luzan5.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.maquicampos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marceloserralva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.masteroficial.ub.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mobilitec.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.moviflor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mreventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mundovinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.novojornal.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nqda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.obesimed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ordemdospsicologos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.parqueallamandas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.promotienda.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rbwcomunicacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.refleczo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rendalucro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rigiflex.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rinfante.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rollingluggage.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sac.pacsis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudeshop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.selektpt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serenatahostel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.setormed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sindieco.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.soninha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.spms.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.straubjunqueira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.streightex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.thaisimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.thinkgreen.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tpalaw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.transitex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ubiwhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uprealestate.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valentim.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vinstmejl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vivianiabasto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xavierdefreitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.grupotravelstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.radionovaera.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.visitporto.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-es.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.advocaciafontana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.algarvenegocios.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.matrizauto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.robbialacmaispinta.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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