campanhas.risema.com

Issued by R3

About this certificate

This digital certificate with serial number 03:89:9f:44:ee:15:36:50:f8:3a:2a:31:52:fc:23:df:1f:62 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campanhas.risema.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:9f:44:ee:15:36:50:f8:3a:2a:31:52:fc:23:df:1f:62
Serial Number (int): 308167247219859578585137338125454042668898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:46:1a:ba:4d:99:bf:6b:43:fd:6f:46:82:6b:91:2a:88:23:4e:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:af:54:e0:30:12:0a:fd:eb:08:59:dd:6e:71:91:7a:e5:c7:5f:72
Fingerprint (sha256): a9:57:18:e2:f2:ea:f7:97:dc:64:05:92:5c:4a:98:c4:68:1b:fe:4c:9e:07:9c:08:00:df:35:13:60:6d:6a:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campanhas.risema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campanhas.risema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campanhas.risema.com
egoi.info.asparts.pt
egoi.info.autosueco.pt
egoi.info.biosafe.pt
egoi.info.nors.com
egoi.info.onedrive.pt
egoi.info.toptruck.pt
envios.iol.pt
info.trademidia.com
marketing.severinomelo.com.br
mkt.admancriativa.com.br
mkt.armazensreis.pt
mkt.atr.co.pt
mkt.bencaquintalgourmet.com.br
mkt.brasilbingo.com
mkt.buzios.rj.gov.br
mkt.cabofrio.rj.gov.br
mkt.celvitae.com
mkt.ciadosbotoes.com.br
mkt.clicksummit.org
mkt.clinicadaeducacao.com
mkt.conaroma.com.br
mkt.conversacionesconbarriguitas.com
mkt.csoutdoors.pt
mkt.eacr.com.br
mkt.ergometrica.pt
mkt.espacovital.com.br
mkt.espumadesabao.pt
mkt.eurocupon.pt
mkt.ferramentasdecoaching.com
mkt.gloma.pt
mkt.hoteisnet.net
mkt.iccjp.com
mkt.informativo-mkt.com.br
mkt.inv.pt
mkt.jogouganhou.com
mkt.judiceonline.com.br
mkt.julianafonte.com.br
mkt.layoutcriativo.com
mkt.linkedportugal.com
mkt.mamcart.com.br
mkt.markamos.pt
mkt.mediapack.com
mkt.mega-alcance.com
mkt.megaturviagens.com.br
mkt.multi-di.pt
mkt.mypetshop.pt
mkt.noxautomacao.com.br
mkt.npibrasil.com
mkt.olicargo.com
mkt.omnibees.com
mkt.osgoliardos.com
mkt.papelariasagres.com
mkt.pmspa.rj.gov.br
mkt.prevoir.pt
mkt.proddigital.com.br
mkt.route66.com.br
mkt.salesup.pt
mkt.seagency.org
mkt.serrasconsulting.pt
mkt.sinafresp.org.br
mkt.sobarroso.pt
mkt.stantonchase.pt
mkt.sucessoemvendas.pt
mkt.tejobrinde.pt
mkt.tresce.com
mkt.uaume.com
mkt.vascomarques.net
mkt.vianalocals.com
mkt.wearelogo.com
mkt.xzconsultores.pt
mkt.youline.com.br
mkt.youup.pt
mkt.zantia.com
mkt.zonaverde.pt
news.aprofer.pt
news.decenio.com
news.feed.pt
news.impetusunderwear.com
news.liquidworks.com.br
news.musicanocoracao.pt
news.standnacional.com
news.webmarketingpt.com
news.winning.pt
newsletter-pt.usbspot.com
newsletter.cmcvisual.com
newsletter.deuter.com.br
newsletter.ecommercenews.com.br
newsletter.igoldenvisa.com
newsletter.nestle.pt
newsletter.ogilvy.pt
newsletter.oikos.pt
newsletter.oridreia.com
newsletter.pinayas.com
newsletter.timing.pt
newsletter.usbspot.com
newsletter.valsousa.pt
newsletters.asc-advancedskincare.com
newsletters.socialtime.pt
primavera.createinfor.pt

Other certificates including the domain name risema.com

(limited to 100 certificates)
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
assistcare.risema.com
assistcare.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com
campanhas.risema.com

Certificate

The complete raw certificate details for campanhas.risema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINrjCCDJagAwIBAgISA4mfRO4VNlD4OioxUvwj3x9iMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA3MDEwMTE0NDVaFw0yMjA5MjkwMTE0NDRaMB8xHTAbBgNVBAMT
FGNhbXBhbmhhcy5yaXNlbWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvkMeAXPssbJuY9Fr+R1DW1isupLGv/ufoDHjZ8Iu1Qc/Z0sVmiJYznBG
JuiYa7GH65nZuRk1Bqx+oyg5ByO4Ok5VUQEh99SrlwMMQKU3uyWc0hk5/FrXoNtB
+1pDLeEIKqsxd6NrrwEddsR5vD0c4pfXrynBk17U3OAXPD2loh8AEfUGTXgFAgLG
+7IQxuN97nfHShKy0QAmsziUgXWxqPaj0s5hzPZ6n7ZHYZQ3gPo9mcy84kQDe94z
MXjDyTluhzqy2b+gf2unusg3fEfIcYTGJrWzgeSl4ESXTAJwZZaHZxnq7qfDZgry
ekaLIDHCXTaKZ2/4lbV8VFG57fYQ7wIDAQABo4IKzzCCCsswDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBTQRhq6TZm/a0P9b0aCa5EqiCNONDAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCCJ0GA1UdEQSCCJQwggiQghRjYW1wYW5oYXMucmlzZW1hLmNvbYIU
ZWdvaS5pbmZvLmFzcGFydHMucHSCFmVnb2kuaW5mby5hdXRvc3VlY28ucHSCFGVn
b2kuaW5mby5iaW9zYWZlLnB0ghJlZ29pLmluZm8ubm9ycy5jb22CFWVnb2kuaW5m
by5vbmVkcml2ZS5wdIIVZWdvaS5pbmZvLnRvcHRydWNrLnB0gg1lbnZpb3MuaW9s
LnB0ghNpbmZvLnRyYWRlbWlkaWEuY29tgh1tYXJrZXRpbmcuc2V2ZXJpbm9tZWxv
LmNvbS5icoIYbWt0LmFkbWFuY3JpYXRpdmEuY29tLmJyghNta3QuYXJtYXplbnNy
ZWlzLnB0gg1ta3QuYXRyLmNvLnB0gh5ta3QuYmVuY2FxdWludGFsZ291cm1ldC5j
b20uYnKCE21rdC5icmFzaWxiaW5nby5jb22CFG1rdC5idXppb3MucmouZ292LmJy
ghZta3QuY2Fib2ZyaW8ucmouZ292LmJyghBta3QuY2Vsdml0YWUuY29tghdta3Qu
Y2lhZG9zYm90b2VzLmNvbS5icoITbWt0LmNsaWNrc3VtbWl0Lm9yZ4IZbWt0LmNs
aW5pY2FkYWVkdWNhY2FvLmNvbYITbWt0LmNvbmFyb21hLmNvbS5icoIkbWt0LmNv
bnZlcnNhY2lvbmVzY29uYmFycmlndWl0YXMuY29tghFta3QuY3NvdXRkb29ycy5w
dIIPbWt0LmVhY3IuY29tLmJyghJta3QuZXJnb21ldHJpY2EucHSCFm1rdC5lc3Bh
Y292aXRhbC5jb20uYnKCFG1rdC5lc3B1bWFkZXNhYmFvLnB0ghBta3QuZXVyb2N1
cG9uLnB0gh1ta3QuZmVycmFtZW50YXNkZWNvYWNoaW5nLmNvbYIMbWt0Lmdsb21h
LnB0ghFta3QuaG90ZWlzbmV0Lm5ldIINbWt0LmljY2pwLmNvbYIabWt0LmluZm9y
bWF0aXZvLW1rdC5jb20uYnKCCm1rdC5pbnYucHSCE21rdC5qb2dvdWdhbmhvdS5j
b22CF21rdC5qdWRpY2VvbmxpbmUuY29tLmJyghdta3QuanVsaWFuYWZvbnRlLmNv
bS5icoIWbWt0LmxheW91dGNyaWF0aXZvLmNvbYIWbWt0LmxpbmtlZHBvcnR1Z2Fs
LmNvbYISbWt0Lm1hbWNhcnQuY29tLmJygg9ta3QubWFya2Ftb3MucHSCEW1rdC5t
ZWRpYXBhY2suY29tghRta3QubWVnYS1hbGNhbmNlLmNvbYIZbWt0Lm1lZ2F0dXJ2
aWFnZW5zLmNvbS5icoIPbWt0Lm11bHRpLWRpLnB0ghBta3QubXlwZXRzaG9wLnB0
ghdta3Qubm94YXV0b21hY2FvLmNvbS5icoIRbWt0Lm5waWJyYXNpbC5jb22CEG1r
dC5vbGljYXJnby5jb22CEG1rdC5vbW5pYmVlcy5jb22CE21rdC5vc2dvbGlhcmRv
cy5jb22CF21rdC5wYXBlbGFyaWFzYWdyZXMuY29tghNta3QucG1zcGEucmouZ292
LmJygg5ta3QucHJldm9pci5wdIIWbWt0LnByb2RkaWdpdGFsLmNvbS5icoISbWt0
LnJvdXRlNjYuY29tLmJygg5ta3Quc2FsZXN1cC5wdIIQbWt0LnNlYWdlbmN5Lm9y
Z4IXbWt0LnNlcnJhc2NvbnN1bHRpbmcucHSCFG1rdC5zaW5hZnJlc3Aub3JnLmJy
ghBta3Quc29iYXJyb3NvLnB0ghNta3Quc3RhbnRvbmNoYXNlLnB0ghZta3Quc3Vj
ZXNzb2VtdmVuZGFzLnB0ghFta3QudGVqb2JyaW5kZS5wdIIObWt0LnRyZXNjZS5j
b22CDW1rdC51YXVtZS5jb22CFG1rdC52YXNjb21hcnF1ZXMubmV0ghNta3Qudmlh
bmFsb2NhbHMuY29tghFta3Qud2VhcmVsb2dvLmNvbYIUbWt0Lnh6Y29uc3VsdG9y
ZXMucHSCEm1rdC55b3VsaW5lLmNvbS5icoIMbWt0LnlvdXVwLnB0gg5ta3QuemFu
dGlhLmNvbYIQbWt0LnpvbmF2ZXJkZS5wdIIPbmV3cy5hcHJvZmVyLnB0ghBuZXdz
LmRlY2VuaW8uY29tggxuZXdzLmZlZWQucHSCGW5ld3MuaW1wZXR1c3VuZGVyd2Vh
ci5jb22CF25ld3MubGlxdWlkd29ya3MuY29tLmJyghduZXdzLm11c2ljYW5vY29y
YWNhby5wdIIWbmV3cy5zdGFuZG5hY2lvbmFsLmNvbYIXbmV3cy53ZWJtYXJrZXRp
bmdwdC5jb22CD25ld3Mud2lubmluZy5wdIIZbmV3c2xldHRlci1wdC51c2JzcG90
LmNvbYIYbmV3c2xldHRlci5jbWN2aXN1YWwuY29tghhuZXdzbGV0dGVyLmRldXRl
ci5jb20uYnKCH25ld3NsZXR0ZXIuZWNvbW1lcmNlbmV3cy5jb20uYnKCGm5ld3Ns
ZXR0ZXIuaWdvbGRlbnZpc2EuY29tghRuZXdzbGV0dGVyLm5lc3RsZS5wdIIUbmV3
c2xldHRlci5vZ2lsdnkucHSCE25ld3NsZXR0ZXIub2lrb3MucHSCF25ld3NsZXR0
ZXIub3JpZHJlaWEuY29tghZuZXdzbGV0dGVyLnBpbmF5YXMuY29tghRuZXdzbGV0
dGVyLnRpbWluZy5wdIIWbmV3c2xldHRlci51c2JzcG90LmNvbYIWbmV3c2xldHRl
ci52YWxzb3VzYS5wdIIkbmV3c2xldHRlcnMuYXNjLWFkdmFuY2Vkc2tpbmNhcmUu
Y29tghluZXdzbGV0dGVycy5zb2NpYWx0aW1lLnB0ghhwcmltYXZlcmEuY3JlYXRl
aW5mb3IucHQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5t
RwAAAYG3igfCAAAEAwBHMEUCIQC7b3v9xkPSZSfZ5t7xiW9Zwg1G3t1nWqx/Pc4b
lppoEgIgKRnrckB/c0zmJFIPlH1gLZI4LCe0pq3msa4PBayZ4NYAdgBByMqx3yJG
ShDGoToJQodeTjGLGwPr60vHaPCQYpYG9gAAAYG3iggTAAAEAwBHMEUCIQCxCl53
PHBSGu0mnjLt8589S9uwa7K9nTaAw8ZcaByzOAIgU/owiE9vJQ8riTi81E6yP0rT
tHa59HsgeNQD9sXFRVkwDQYJKoZIhvcNAQELBQADggEBALYL8cJm95ONI+FeJaPT
aTfa3AQHsvD+v0UhU1TvD4+PpvoLGrB4zw23oWB5u8LBrniAs/ahF7fDTuC0o8WJ
B+RR30vyE/tFaPdmnEIwyrlQHRMXowqX+AGa96bjgrs51wBGv8mOFuon59Q7M7gq
HKgu6g8ufRLK44OU8v9FKeGKQuWpGtX9o6wSBwBrLf8U2YTQK5UGHWt0HhChSsnB
sDeAkrqsfmrbzKeYI9Y3V8DB9AnPx0CkUAOWQlirEzti8q0ugjji9OHx2vHViMB8
2nFmSUe+QyfEBbwE4etq3RJ7Uk6bPdAWZ15WuRt1yVU6c3FW6U0qJVY2EIXjZUCj
lr0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkMeAXPssbJuY9Fr+R1D
W1isupLGv/ufoDHjZ8Iu1Qc/Z0sVmiJYznBGJuiYa7GH65nZuRk1Bqx+oyg5ByO4
Ok5VUQEh99SrlwMMQKU3uyWc0hk5/FrXoNtB+1pDLeEIKqsxd6NrrwEddsR5vD0c
4pfXrynBk17U3OAXPD2loh8AEfUGTXgFAgLG+7IQxuN97nfHShKy0QAmsziUgXWx
qPaj0s5hzPZ6n7ZHYZQ3gPo9mcy84kQDe94zMXjDyTluhzqy2b+gf2unusg3fEfI
cYTGJrWzgeSl4ESXTAJwZZaHZxnq7qfDZgryekaLIDHCXTaKZ2/4lbV8VFG57fYQ
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308167247219859578585137338125454042668898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-01 01:14:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 01:14:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campanhas.risema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24018374673170648096002534527259560938904184242435229431757791073343649582583367276301847796462405558097409323119718212581312034623499134447336138084586099006205176615352367706229529080310364720124061150564505943094609414837412032548532308591689105296349404337087574113306964040642720863808147523954819290822506573931304427617357556074894550646297677473614263699270434288577214381542093775228667864598494823445969888257795985465989617855129095212981412502969082575790291943675792476008609840795529006063044472371362222252115431234789257238281224523396527380899069852754772868109323178500591661782888005490728894861551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0461aba4d99bf6b43fd6f46826b912a88234e34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanhas.risema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.asparts.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.autosueco.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.biosafe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.nors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.onedrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egoi.info.toptruck.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envios.iol.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.trademidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.severinomelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.admancriativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.armazensreis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.atr.co.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.bencaquintalgourmet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.brasilbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.buzios.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.cabofrio.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.celvitae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ciadosbotoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clicksummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.clinicadaeducacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conaroma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.conversacionesconbarriguitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.csoutdoors.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eacr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ergometrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espacovital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.espumadesabao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.eurocupon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.ferramentasdecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.gloma.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.hoteisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.iccjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.informativo-mkt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.inv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.jogouganhou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.judiceonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.julianafonte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.layoutcriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.linkedportugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mamcart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.markamos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mediapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mega-alcance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.megaturviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.multi-di.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.mypetshop.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.noxautomacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.npibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.olicargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.omnibees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.osgoliardos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.papelariasagres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.pmspa.rj.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.prevoir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.proddigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.route66.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.salesup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.seagency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.serrasconsulting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sinafresp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sobarroso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.stantonchase.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.sucessoemvendas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tejobrinde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.tresce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.uaume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vascomarques.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.vianalocals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.wearelogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.xzconsultores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.youup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zantia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.zonaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.aprofer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.decenio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.feed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.impetusunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.liquidworks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.musicanocoracao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.standnacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.webmarketingpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.winning.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-pt.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.cmcvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.deuter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ecommercenews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.igoldenvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.nestle.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ogilvy.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oikos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.oridreia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.pinayas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.timing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.usbspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.valsousa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.asc-advancedskincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.socialtime.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primavera.createinfor.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181b78a07c20000040300473045022100bb6f7bfdc643d26527d9e6def1896f59c20d46dedd675aac7f3dce1b969a681202202919eb72407f734ce624520f947d602d92382c27b4a6ade6b1ae0f05ac99e0d600760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181b78a08130000040300473045022100b10a5e773c70521aed269e32edf39f3d4bdbb06bb2bd9d3680c3c65c681cb338022053fa30884f6f250f2b8938bcd44eb23f4ad3b476b9f47b2078d403f6c5c54559
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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