mkt.cascatadepedra.pt

Issued by R3

About this certificate

This digital certificate with serial number 03:36:67:7d:df:3c:1f:e7:b5:ec:47:80:1e:24:ff:2b:94:de was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.cascatadepedra.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:67:7d:df:3c:1f:e7:b5:ec:47:80:1e:24:ff:2b:94:de
Serial Number (int): 279849669657425485676710660372402195371230
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:0f:0d:58:56:e9:88:cc:9f:5c:a7:91:9d:5e:96:21:7c:cf:50:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:e9:ad:0c:bb:c2:13:13:54:a0:f7:7e:4a:cc:ff:0b:f4:1d:5b:fd
Fingerprint (sha256): a3:09:c3:4d:3d:31:f1:80:22:56:38:98:d4:35:d2:df:62:34:b4:55:d1:ad:15:65:2b:d2:e9:e5:aa:e7:91:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mkt.cascatadepedra.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.cascatadepedra.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

booking.twentyone.pt
comunicacao.dhlglobal.com.br
comunicacao.monitoramento.portoseguro.com.br
conteudo.jeunessebrasiloficial.com.br
conteudo.tilitgroup.com
curso.estudiopaladino.com
egoi.usemh.com.br
mailing.nowait3.com.ar
marketing.e3solucoesdigitais.com.br
materiais.criciumasupera.com.br
mkt.2021portugal.eu
mkt.acadiprev.com.br
mkt.agropepino.pt
mkt.ajornadadarealizacao.com.br
mkt.aktchoco.com.co
mkt.ambientesdecoracao.com
mkt.apicebrasil.org.br
mkt.aprendendopro.com.br
mkt.audiency.io
mkt.bakertilly.pt
mkt.bidbytoken.com
mkt.blinglogisticsnetwork.com
mkt.bmask.pt
mkt.br2seguros.com.br
mkt.brasilaudio.com.br
mkt.brmass.com
mkt.cagroup.pt
mkt.camanaimoveis.com.br
mkt.camorajoias.com.br
mkt.caravanmade.com
mkt.cascatadepedra.pt
mkt.ccrbrindes.com
mkt.clinicacleuzacanan.com.br
mkt.clubecriacaoconsciente.com.br
mkt.coepis.pt
mkt.comodesenharanime.com.br
mkt.contactus.pt
mkt.cookinghotel.com
mkt.criativopublicidade.com
mkt.curvadossonhos.com.br
mkt.diariodeumempreendedor.pt
mkt.digitalmultiwork.com
mkt.espacodocumentacao.pt
mkt.europalco.pt
mkt.flexben.pt
mkt.garotarechonche.com.br
mkt.globalmidia.eu
mkt.globaltoner.pt
mkt.gordalina.pt
mkt.gradual.pt
mkt.hds.min-saude.pt
mkt.inbet.pt
mkt.indoor.pt
mkt.inforware.com.br
mkt.integraedu.com
mkt.jdoconsultoria.com.br
mkt.keepersolutions.com.br
mkt.laurenti.com.br
mkt.leiriberia.com
mkt.manutencaodecelular.net
mkt.milenaback.com
mkt.motorex.pt
mkt.nambbu.com.br
mkt.nanamodagirls.com
mkt.olmoromero.com
mkt.oradiofazadiferenca.com.br
mkt.oralmeddigital.pt
mkt.peers2win.com
mkt.pistasescalas.pt
mkt.playcomshop.com.br
mkt.plenitudedavida.com
mkt.pmeincentivos.pt
mkt.portuguesparanos.com
mkt.preceitodigital.com
mkt.prummo.pt
mkt.qtalhortifruti.com.br
mkt.receitastodososdias.com.br
mkt.renataamantino.com.br
mkt.resultante.com.br
mkt.rmfsport.com
mkt.sapconsultoria.net
mkt.saudeebelezamais.com.br
mkt.semetiqueta.com.br
mkt.seusucessoo.com.br
mkt.seventeenst.com.co
mkt.smartinovation.com
mkt.sofia-tavares.com
mkt.sucessodigitais.com
mkt.superafloripa.com.br
mkt.tajoseguros.com.br
mkt.tallento.eng.br
mkt.tiesports.com
mkt.tilitgroup.com
mkt.umolharparaoceu.com.br
mkt.valorauto.pt
mkt.vipfolheados.com.br
mkt.webouse.com
mkt.xeiffersdesign.com
tuliolelis.bluefarm.com.br
vmcom.vmcomunicacao.com.br

Other certificates including the domain name cascatadepedra.pt

(limited to 100 certificates)
mkt.missus.pt
cascatadepedra.pt
mkt.interhome.com.br
www.cascatadepedra.pt
cascatadepedra.pt
cascatadepedra.pt
cascatadepedra.pt
cascatadepedra.pt
mkt.interhome.com.br
cascatadepedra.pt
mkt.comur.com
mkt.cascatadepedra.pt
cascatadepedra.pt
cascatadepedra.pt
mkt.missus.pt
cascatadepedra.pt

Certificate

The complete raw certificate details for mkt.cascatadepedra.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWf2ykJk8TkrOoi2Zcqp
kjLP/PUWVhQkbIZgG5HkWTcja7eRl2MxBlMt6BjzpYyFbsOA9jVVqC4Tc1el9fxB
omO0DUuPQNKpPUXO/CB10ufmOf6LqgAbJdZA8IuSOch22rK/+MbRrgds33orBzTo
+iD61AxjOhKZ9IxQ7nd6WbOj6NTlLqkbv8wrHqL0/pr+quk9py9ARnQLq9zKzePk
RckfCt2eYxNmRn/2wcDgnSuUbbHaUwvYn6e1Lkogpx4ZHGspOAt3DtNrciIGykEo
HHXRV4oIzTXxT5S/tkFD8jVXeXZPbhEIVJ9ReBZ9UyCe8TXqLrpq595qzoIb/UUc
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279849669657425485676710660372402195371230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-19 13:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 13:41:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.cascatadepedra.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23910306209418984752233624263794521152597941905066511771740130266878331450759576883360813780874519423828217309368954634596363412378355255336228738203113587301361054772910341274521534720153788569384654067843747026965078873219669415934552525403596686457772429737444893585619746183174463435113683163628732483097991349727803699274863805847918657195012359106807034381797019580777987194764438195295426297100221637808701124161207905385361178486739925807918272234673402469512180764128566744392561194485213412010381944725937248127579694302982443763171839197978337042422302386204747018566403115382935271592166315370516513627151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b0f0d5856e988cc9f5ca7919d5e96217ccf506a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.twentyone.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.dhlglobal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacao.monitoramento.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudo.jeunessebrasiloficial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudo.tilitgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curso.estudiopaladino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.usemh.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.nowait3.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.e3solucoesdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materiais.criciumasupera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.2021portugal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.acadiprev.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.agropepino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ajornadadarealizacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aktchoco.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ambientesdecoracao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.apicebrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.aprendendopro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.audiency.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bakertilly.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bidbytoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.blinglogisticsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bmask.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.br2seguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilaudio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brmass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cagroup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.camanaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.camorajoias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.caravanmade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cascatadepedra.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ccrbrindes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicacleuzacanan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clubecriacaoconsciente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.coepis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.comodesenharanime.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.contactus.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cookinghotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.criativopublicidade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.curvadossonhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.diariodeumempreendedor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.digitalmultiwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacodocumentacao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.europalco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.flexben.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.garotarechonche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globalmidia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.globaltoner.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gordalina.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gradual.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hds.min-saude.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inbet.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.indoor.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inforware.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.integraedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jdoconsultoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.keepersolutions.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.laurenti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.leiriberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.manutencaodecelular.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.milenaback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.motorex.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nambbu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.nanamodagirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olmoromero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oradiofazadiferenca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.oralmeddigital.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.peers2win.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pistasescalas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.playcomshop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.plenitudedavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmeincentivos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.portuguesparanos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.preceitodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prummo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.qtalhortifruti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.receitastodososdias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.renataamantino.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.resultante.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.rmfsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sapconsultoria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.saudeebelezamais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.semetiqueta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seusucessoo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seventeenst.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.smartinovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sofia-tavares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessodigitais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.superafloripa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tajoseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tallento.eng.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tiesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tilitgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.umolharparaoceu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.valorauto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vipfolheados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.webouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xeiffersdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuliolelis.bluefarm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmcom.vmcomunicacao.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017b5edbdd96000004030046304402203b0d5f45f0e78b480f29ff80a46046d3c2abac9e890947c777a6cfabf9ab53e00220782f08baf39cd128c1330f1c75bc3336f14fa56de9062da08ac684b44334a6f6007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017b5edbdd890000040300483046022100a52e056dad80bc102e55694207893408586b6756fb4c48ebebd1d96fb73072eb022100bf1fa885ca5bee251d9548b58b96a1b148b42f44be7cc56b3d8d369581f8654f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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