campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1b:92:76:c2:87:dd:33:6c:87:b8:1e:96:85:34:1f:4f:cb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:92:76:c2:87:dd:33:6c:87:b8:1e:96:85:34:1f:4f:cb
Serial Number (int): 270719165626111706683243158571718377689035
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:0b:80:6d:fd:06:b0:60:a4:19:89:35:74:c4:1e:b6:d3:18:c9:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:ee:1d:dd:29:37:d8:4d:c8:de:f5:ed:f5:3a:45:7a:bc:80:ee:78
Fingerprint (sha256): 9a:d6:79:b9:27:e0:8d:e8:d2:c3:97:22:16:b5:cd:25:9e:ff:56:d3:8f:e2:a1:56:8d:7b:c4:6d:59:d2:e7:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
com.mapamental.org
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
envios.iol.pt
gstar.cadalist.com.br
info.trademidia.com
marketing.severinomelo.com.br
mkt.acountia.pt
mkt.admancriativa.com.br
mkt.albermoveis.com.br
mkt.atr.co.pt
mkt.balanzasmarques.es
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conaroma.com.br
mkt.csoutdoors.pt
mkt.eacr.com.br
mkt.ecommerceymarketing.es
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.eurocupon.pt
mkt.ferramentasdecoaching.com
mkt.get-ao.com
mkt.gloma.pt
mkt.grupobrasmoto.com.br
mkt.hi-techwonder.com
mkt.hipnoseeregressao.org
mkt.iccjp.com
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.npibrasil.com
mkt.ntkglobal.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.primaverabss.com
mkt.proddigital.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.steppr.com.br
mkt.sucessoemvendas.pt
mkt.susanadamaso.com
mkt.tresce.com
mkt.uaume.com
mkt.valepinho.com.br
mkt.vascomarques.net
mkt.youup.pt
mkt.yunit.pt
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.jade.travel
news.liquidworks.com.br
news.lisbonhotelnews.com
news.musicanocoracao.pt
news.myclinique-nutricao-estetica.com
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.clinicadepele.com.br
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.empregosmanager.pt
newsletter.igoldenvisa.com
newsletter.imt.pt
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pendrives.pt
newsletter.pens.pt
newsletter.pinayas.com
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Oeb1z6OfVXoXUXizYS
dV1FJ9yLCiam67RA1XQw87gscZRZQCC2pkGiRsW9bcnaw3AQb11In/A5iVJKmmIx
r1UGQwYyLfjyKSAlLlNlDB4p4OVnahIXG9cSYrQDiJ0fiRWbROB12ExcypXjB1em
2GlNI+F2cNHI+RKWJWAYEtGFxi2R6blb/Uz+UEGFDSOYgV9mOfANCmhelQCzJQbA
GGWO4PXxNkDXXPhaCJJnT16lH6qFHBveMzk89wsEPMFFt/p68mTK1OPJKqBc3qaY
cPmSsTC93TaA9NyjKhSQ7mH2gKDdhVGoEyEAq2FWu+mw6+k3XWq1b9IVWJ2jfiDl
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270719165626111706683243158571718377689035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 14:49:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-21 14:49:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26212012608153663519783570941679262055161374262745687807362331914637844328816656559968065677714264165026074456713235225328013597800905736692248833284718555146699189408381699682537577567781227944469689006232678938954174032225444807311306021417337465788233059773610712350611328276943127805384609132329314654685283897091804281023871375998189197084070615288155199190118766769082881220184022031012725107804151312987803023295519601110574662031454636545113690501901838119393263429022696865377665940307136611206113347092386301281425383273913856461020542335281295470183266737843791398576517355541956702895934399679212680176943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							560b806dfd06b060a419893574c41eb6d318c9e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.mapamental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstar.cadalist.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acountia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.albermoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.balanzasmarques.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conaroma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ecommerceymarketing.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.get-ao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.grupobrasmoto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hi-techwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hipnoseeregressao.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ntkglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.primaverabss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.steppr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.susanadamaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valepinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.yunit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.jade.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.lisbonhotelnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.myclinique-nutricao-estetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.clinicadepele.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.empregosmanager.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.imt.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pendrives.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pens.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017725a35ce800000403004630440220390eb70d8cb6d3527626903dbb3706f88f32946c99f069efca181d77325a1c460220390a7413c5443248e2977e4b3e89ffb1a25721f3d1f9571e0f920c2969b4c3590075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017725a35d2f0000040300463044022055178b9dfaec077bd1f2d7ee08c0f76c22d70799a7035979c3aebbfc54b96a5202205b2fc497219846ad79e774534dcc1c4a27fbeb9c3207e5760de95a2ca497477b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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